
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft
File: jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft (raw, json)
Hash identifier: bi/FuLJJ6LPYeZQ0Fhf6KxkVlWkPvXZNZP7bB60UvOE=
Subject key identifier: C0:A9:27:4C:2C:77:17:5D:DC:BA:E7:A1:1D:FA:DC:55:03:75:45:0F
Authority key identifier: 8D:16:FD:0E:25:FB:89:6E:26:FA:73:4A:BC:98:4C:E4:B4:69:8D:D3
Certificate issuer: /CN=A9149A6C/serialNumber=8D16FD0E25FB896E26FA734ABC984CE4B4698DD3
Certificate serial: 0786
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRb9DiX7iW4m-nNKvJhM5LRpjdM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft
Manifest number: 077E
Signing time: Sat 04 Apr 2026 21:21:22 +0000
Manifest this update: Sat 04 Apr 2026 21:21:21 +0000
Manifest next update: Sat 11 Apr 2026 21:21:21 +0000
Files and hashes: 1: jRb9DiX7iW4m-nNKvJhM5LRpjdM.crl (hash: kXdiCkTaj8s50hn1QidMmrN66hefeENAMpk4LUzT4FA=)
2: 22D8137A51A711EBAAAB6410C4F9AE02.roa (hash: hAtG+f9sTyDBDIC3yzVKMSXyXaV2HtV+sHcFaEmD/HU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.crl
rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRb9DiX7iW4m-nNKvJhM5LRpjdM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 21:21:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1926 (0x786)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149A6C, serialNumber=8D16FD0E25FB896E26FA734ABC984CE4B4698DD3
Validity
Not Before: Apr 4 21:21:21 2026 GMT
Not After : Apr 11 21:21:21 2026 GMT
Subject: CN=69d180d2-b8b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:85:0d:a7:72:d8:58:c8:25:e8:4f:a7:1b:bf:
ac:1a:15:0f:58:c6:65:f6:b1:6e:79:47:67:c8:92:
f6:3f:6c:1d:e3:87:10:1e:d3:22:b7:4f:ae:8e:a5:
b4:f8:64:e7:a6:86:67:09:1f:56:b1:90:68:ef:27:
14:cb:71:23:b1:97:4e:c1:38:af:7c:00:1a:f3:86:
fa:bd:5e:c5:9c:0a:bc:68:9f:f2:a7:7e:e5:f5:0d:
12:e1:73:7d:85:62:d5:7d:31:c8:7b:e4:78:fb:44:
38:75:ae:32:fc:24:06:2c:dd:5b:b8:e2:56:ba:2f:
aa:c6:f0:34:cb:3a:cd:5f:f5:c1:32:6f:4d:63:5b:
a7:d5:f6:79:ea:1e:16:f4:bb:fb:8c:48:2f:ea:60:
6f:97:39:a3:6b:99:c4:0c:68:30:b7:d9:7d:33:d0:
4a:b8:ef:d9:d5:84:0d:c8:6a:14:a4:ec:42:c2:17:
bd:56:68:5b:f7:43:cc:d1:67:0d:06:6e:81:60:12:
7b:a7:e7:0f:5b:63:9e:ef:8d:cb:49:15:4d:ec:83:
df:cd:18:0b:4a:75:44:17:3e:37:a9:c4:67:1c:1c:
d4:1d:82:32:b7:ce:93:65:8c:5a:2d:e4:39:c4:b6:
92:ef:73:c1:78:8d:91:11:b1:00:a0:5a:a2:00:e5:
e9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A9:27:4C:2C:77:17:5D:DC:BA:E7:A1:1D:FA:DC:55:03:75:45:0F
X509v3 Authority Key Identifier:
keyid:8D:16:FD:0E:25:FB:89:6E:26:FA:73:4A:BC:98:4C:E4:B4:69:8D:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRb9DiX7iW4m-nNKvJhM5LRpjdM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:c8:82:f4:b4:18:84:78:b1:7d:3d:78:43:fc:dd:45:c5:69:
b3:2c:b9:91:41:1a:56:8d:81:ae:95:82:ec:2f:f4:bc:06:2c:
b0:68:7b:36:f0:05:fe:60:86:a2:30:2f:7e:f0:a1:73:59:d5:
39:98:16:5a:ae:84:9b:01:b2:a0:aa:00:29:9e:b1:bd:26:f5:
98:67:fd:e4:82:c4:bd:6f:0c:ca:35:80:1f:a4:9b:61:b2:ff:
51:0e:14:5c:84:9b:37:ae:1a:6c:d7:f4:db:6f:96:a8:b5:cc:
39:26:e6:e8:ee:f4:15:aa:46:1b:78:92:e2:df:08:68:c1:0a:
12:76:1e:61:c7:19:b4:a0:ee:4f:c5:e7:1d:b5:83:75:88:33:
c5:33:00:88:77:bc:14:c0:bc:1c:d7:97:8f:23:27:1a:bb:75:
a5:56:da:f6:1b:86:7e:76:97:c3:80:fa:c8:4f:cc:d9:7b:7d:
6e:c4:cf:7c:16:45:b7:2f:99:9f:40:ee:4c:74:db:1b:b5:11:
f4:40:5b:fb:31:9d:c3:87:ec:d9:0d:dc:37:a1:14:5a:27:c3:
cb:40:d5:a6:dc:71:6d:58:53:fe:f6:20:bf:c2:0d:58:be:14:
3b:75:18:9a:72:c3:90:9a:52:84:7d:64:53:dd:06:5d:cb:9c:
7c:56:fd:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:52:08 2026 by rpki-client