
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.mft
File: JlnO0VJ9LKvYssUwdezNlO1x_pg.mft (raw, json)
Hash identifier: Q+x0DS1GOX5afrfHF3VdXR3cLI0IeTbmN2o7zrxc/+k=
Subject key identifier: 5E:32:42:87:D7:E6:E2:83:EF:6A:61:35:0A:77:D8:59:A7:44:60:FE
Authority key identifier: 26:59:CE:D1:52:7D:2C:AB:D8:B2:C5:30:75:EC:CD:94:ED:71:FE:98
Certificate issuer: /CN=A9197227/serialNumber=2659CED1527D2CABD8B2C53075ECCD94ED71FE98
Certificate serial: 0747
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlnO0VJ9LKvYssUwdezNlO1x_pg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.mft
Manifest number: 072D
Signing time: Sat 04 Apr 2026 21:39:47 +0000
Manifest this update: Sat 04 Apr 2026 21:39:46 +0000
Manifest next update: Sat 11 Apr 2026 21:39:46 +0000
Files and hashes: 1: JlnO0VJ9LKvYssUwdezNlO1x_pg.crl (hash: DUL4MusOjleA40hw/4z9ptL65mcnpzcldalgmenOG98=)
2: AE2B714A72E911EEA3EFD34AC4F9AE02.roa (hash: wmsK2Lecc9Keo0HYXGV1+xMm34n8Wt34+xyKgFv4k4o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.crl
rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlnO0VJ9LKvYssUwdezNlO1x_pg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 21:39:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1863 (0x747)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197227, serialNumber=2659CED1527D2CABD8B2C53075ECCD94ED71FE98
Validity
Not Before: Apr 4 21:39:46 2026 GMT
Not After : Apr 11 21:39:46 2026 GMT
Subject: CN=69d18522-ca59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3e:25:8b:ac:55:f7:9e:86:b7:e2:18:2f:9e:
a8:da:9d:ad:a7:df:0e:d0:58:53:c7:67:bf:8e:6d:
c0:c6:78:c4:02:54:3f:e0:72:fe:1b:5d:30:65:00:
0c:1a:57:0c:30:cc:a4:91:86:2e:20:e4:2f:24:84:
7b:a8:d8:1f:e4:fd:5f:f6:01:79:aa:33:a5:87:8a:
0a:19:d4:10:02:03:b5:a0:df:3e:5c:7f:32:20:da:
f9:f7:06:7e:8c:4c:d2:ad:30:a2:12:64:a8:cf:5d:
ca:e5:48:92:bc:9d:37:f2:7c:86:f0:05:db:ef:20:
d7:c9:1a:57:f4:6d:30:82:27:17:30:bf:26:51:da:
20:ce:d8:d4:d4:3c:09:37:bb:66:a4:98:0e:d3:e4:
b2:ca:24:a0:da:29:32:3a:2e:09:f2:c4:26:46:b3:
de:72:22:c4:f1:cc:e0:ac:8e:b0:91:4d:8a:79:7b:
3c:18:ce:e4:88:26:8b:fa:b1:fd:ef:d4:96:36:06:
42:9b:c2:d8:b8:27:54:18:2d:87:5d:fc:62:7c:b9:
1a:5c:43:05:85:63:46:31:28:53:5d:01:73:10:61:
7c:c0:1a:52:73:de:cb:25:94:25:c0:37:ab:48:78:
dd:0d:07:32:2a:71:0b:33:d9:46:ea:87:54:db:83:
35:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:32:42:87:D7:E6:E2:83:EF:6A:61:35:0A:77:D8:59:A7:44:60:FE
X509v3 Authority Key Identifier:
keyid:26:59:CE:D1:52:7D:2C:AB:D8:B2:C5:30:75:EC:CD:94:ED:71:FE:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlnO0VJ9LKvYssUwdezNlO1x_pg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cb:2a:02:b2:05:97:59:cd:47:48:13:f4:e0:fe:56:3d:f8:08:
cc:2f:1d:55:a9:56:83:f6:18:6e:f6:9f:4c:5a:4e:7c:06:60:
e7:d3:cf:96:73:c9:66:9b:1f:85:79:7a:8f:ff:db:e5:4e:8c:
0d:ad:32:d3:c1:43:cb:03:c1:50:8a:69:2c:60:82:9d:f2:56:
7d:1b:7e:64:91:fe:4b:bc:25:86:a7:ef:87:0e:5d:91:a0:ed:
d2:0e:7c:bf:64:2c:c7:85:d1:2e:9f:f9:89:e5:22:9a:a9:39:
29:d3:7b:56:e0:9b:08:90:c8:ee:8e:4b:fb:96:34:1d:8d:53:
10:ab:b1:5b:59:ae:73:d6:bd:e6:6d:4b:fc:b7:cb:38:83:dd:
c2:8b:9b:a8:ba:6c:8f:3a:04:e3:18:20:dd:51:ab:53:21:1e:
1a:a2:36:f4:1e:4c:8f:fe:34:f9:b1:a0:88:92:0f:01:e5:78:
ca:29:ad:cc:5c:03:70:87:04:d8:56:5f:49:f8:30:8c:b1:28:
5c:11:ef:d4:96:02:55:43:d4:73:44:c1:04:0a:80:35:a2:fd:
4b:7e:ac:3a:3a:4c:49:51:75:df:d4:bf:29:8f:63:1f:98:14:
e7:cb:50:f9:ab:cf:87:ae:3b:14:a2:2a:a1:41:5b:20:ab:44:
43:01:9a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:53:12 2026 by rpki-client