
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.mft
File: jyvUwSY28AWbQI0HFq8yyPVAaaU.mft (raw, json)
Hash identifier: /kCYvhkcHlr+C85KxyNi6GAgh4FJb6PETPrf5gAkks0=
Subject key identifier: 1F:8E:96:FA:ED:F2:BC:30:45:50:F1:4E:AC:AD:5E:5F:C0:3C:FA:2C
Authority key identifier: 8F:2B:D4:C1:26:36:F0:05:9B:40:8D:07:16:AF:32:C8:F5:40:69:A5
Certificate issuer: /CN=A9120AC1/serialNumber=8F2BD4C12636F0059B408D0716AF32C8F54069A5
Certificate serial: 05CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvUwSY28AWbQI0HFq8yyPVAaaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.mft
Manifest number: 0593
Signing time: Thu 16 Jul 2026 23:47:37 +0000
Manifest this update: Thu 16 Jul 2026 23:47:36 +0000
Manifest next update: Thu 23 Jul 2026 23:47:36 +0000
Files and hashes: 1: jyvUwSY28AWbQI0HFq8yyPVAaaU.crl (hash: bCyR049E8hjIRBSGgQXMdnfsiVJUNK2jdQAc84MOfDo=)
2: 17A5A8400EC811F088512D41C4F9AE02.roa (hash: mqSnjtVQnDVvl2krW/vPBOGwW2QAUKPwPw1sF8LPF0A=)
3: EDB1F68E3C8811EC889B9D78C4F9AE02.roa (hash: HmmgtKcEaWNEx652ZmG3M6u6VFLBTA0tqlJh4wWcvjo=)
4: 8BE9B1A03C8B11EC8947D982C4F9AE02.roa (hash: X2fqbOwNjfPVvOnATgu0zvqwWCe0l0CVElKSGtxJl4w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.crl
rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvUwSY28AWbQI0HFq8yyPVAaaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 23:47:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1485 (0x5cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120AC1, serialNumber=8F2BD4C12636F0059B408D0716AF32C8F54069A5
Validity
Not Before: Jul 16 23:47:36 2026 GMT
Not After : Jul 23 23:47:36 2026 GMT
Subject: CN=6a596d98-e3f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5c:44:f2:6e:a9:0b:b5:bf:19:23:53:32:5e:
42:f4:be:bd:bd:ad:d5:d3:53:a2:67:6d:85:8c:0f:
5f:c7:4e:58:14:da:03:13:85:1d:53:9b:3a:b8:e7:
aa:91:12:59:92:6b:ab:3c:0a:12:0f:e1:4e:c8:e2:
98:2f:74:89:7f:03:3f:e2:fd:e9:b6:60:d2:31:9b:
ce:7f:f5:eb:7c:60:ad:5e:c6:37:d5:b6:6d:a7:9b:
ae:39:90:e9:f6:7f:fe:c3:d5:9d:5b:6e:66:37:51:
7e:b5:13:93:d3:a8:17:d3:62:f1:97:8e:53:25:e3:
41:36:9c:5f:04:29:d1:2e:6e:cb:70:13:a9:7f:77:
f4:c3:7a:22:2b:d5:83:63:b0:98:4c:fa:8a:d5:42:
47:2c:7e:64:09:59:61:9b:1c:35:f1:72:cd:14:00:
9b:dd:ac:ed:83:37:25:56:a5:5f:18:c5:85:36:fc:
01:0b:14:96:39:6e:9d:e5:e5:56:3d:db:9a:28:b3:
f4:f5:67:2f:90:60:9d:36:d8:9a:03:a0:d1:6d:6b:
38:97:d7:e0:03:7f:0a:82:f4:58:bf:43:fa:07:18:
40:38:54:f5:59:53:4c:11:49:5e:ef:46:6a:a3:37:
c4:98:fd:47:be:14:24:31:df:db:2a:38:40:74:16:
a8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:8E:96:FA:ED:F2:BC:30:45:50:F1:4E:AC:AD:5E:5F:C0:3C:FA:2C
X509v3 Authority Key Identifier:
keyid:8F:2B:D4:C1:26:36:F0:05:9B:40:8D:07:16:AF:32:C8:F5:40:69:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvUwSY28AWbQI0HFq8yyPVAaaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ca:57:12:93:07:b9:21:cc:50:b2:2e:2e:df:96:8d:31:8b:
c0:c0:38:c5:30:9f:71:aa:9d:90:9b:c9:a1:78:37:46:19:15:
56:3f:07:c5:91:ea:ce:66:34:3c:8a:5a:1d:44:4f:b8:85:6b:
d7:d2:d6:39:85:c0:21:43:2c:0d:89:53:6f:14:44:f8:66:44:
5a:2c:db:ae:ab:21:12:58:21:1a:ae:b4:b3:b2:ab:63:d0:8c:
ca:dd:c4:cf:6f:06:62:a0:3f:23:bd:48:7e:d3:22:26:4c:e1:
75:28:35:86:8f:58:24:a0:b7:96:36:2a:f0:d3:ef:63:40:41:
1c:eb:92:b4:36:07:e8:44:61:c5:59:30:1b:d1:04:cd:e7:fd:
8d:1e:74:a5:77:7b:9a:29:74:74:af:57:19:4d:e2:95:f6:4e:
29:0a:d4:c4:cf:bb:7a:4e:75:89:c0:b8:fc:62:49:40:47:a5:
34:ae:6d:ee:5c:68:41:1c:f7:2c:db:9f:19:07:bb:6e:d4:72:
7a:93:4e:5b:ec:c5:9a:f1:46:e4:d8:32:5d:d8:30:65:eb:c0:
9b:de:2f:8c:82:c9:d0:44:86:0d:18:fb:61:20:19:7c:f5:f2:
75:32:32:c4:97:7e:84:4d:fa:f7:da:09:ad:3c:10:d5:63:7f:
4c:8a:93:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 07:15:53 2026 by rpki-client