
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft
File: JG9qS-FbAM_sDcOZpehDn5OckXQ.mft (raw, json)
Hash identifier: BY1j2MLqLtVw8IDos73yvrEBpJ6m0pGPwWWCN1Pbvak=
Subject key identifier: 94:6C:4F:F1:21:5C:93:71:DE:E5:F3:AC:50:BD:F1:B6:34:0C:D6:B4
Authority key identifier: 24:6F:6A:4B:E1:5B:00:CF:EC:0D:C3:99:A5:E8:43:9F:93:9C:91:74
Certificate issuer: /CN=A912E99B/serialNumber=246F6A4BE15B00CFEC0DC399A5E8439F939C9174
Certificate serial: 079E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft
Manifest number: 077A
Signing time: Thu 12 Mar 2026 21:18:35 +0000
Manifest this update: Thu 12 Mar 2026 21:18:34 +0000
Manifest next update: Thu 19 Mar 2026 21:18:34 +0000
Files and hashes: 1: JG9qS-FbAM_sDcOZpehDn5OckXQ.crl (hash: fph+wagAcM8P+4V+Fjy5Ctlj9b/9YNaBtuSYPKpm6OM=)
2: DD9876F4B19911EFA6C3FD55C4F9AE02.roa (hash: OlUYHfxgsq3VvSrhhkQb6Q/TDtAt7UfH0OhxtkAQu0U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.crl
rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 21:18:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1950 (0x79e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E99B, serialNumber=246F6A4BE15B00CFEC0DC399A5E8439F939C9174
Validity
Not Before: Mar 12 21:18:34 2026 GMT
Not After : Mar 19 21:18:34 2026 GMT
Subject: CN=69b32dab-2ebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f3:03:e9:22:a5:c9:f6:04:71:84:f4:c6:2d:
39:cc:9b:ec:49:0e:ac:c1:10:97:f7:bf:2a:aa:c4:
7a:90:24:94:c6:89:4a:14:2a:7e:b2:22:96:9d:16:
0a:1b:d9:1e:b6:2a:16:94:87:75:b6:3f:6a:5e:47:
5c:0a:b3:83:df:a9:3d:2d:08:1c:ae:cb:03:3f:25:
12:90:e0:f4:e2:63:e8:5f:ac:96:34:9d:b1:8e:3e:
74:c0:1f:4c:a7:6f:87:96:5f:3b:70:08:a0:15:02:
a6:70:d9:84:0c:63:3e:72:54:0d:76:6a:97:eb:4f:
91:7d:3d:b2:76:23:90:9b:df:04:fe:c6:ae:1f:cd:
6e:72:d0:d6:1d:54:85:38:b4:0e:59:1c:b6:a3:d4:
67:bd:31:ae:ec:e8:7f:88:ce:6b:a5:ad:44:93:50:
7d:75:43:a4:08:86:6c:f4:18:90:bc:ce:36:57:1d:
41:6f:c5:2b:3d:84:33:38:9a:d7:88:16:5d:fb:83:
6d:7e:67:84:22:d0:7b:a8:06:97:f0:ac:09:ae:f6:
c1:71:40:e2:90:97:63:12:90:65:d4:5a:59:aa:04:
0a:2c:3c:66:b4:f5:df:f1:62:7b:11:48:50:5d:b2:
20:1a:09:e0:12:9a:a8:00:1f:cc:f4:c9:cf:84:c2:
9b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6C:4F:F1:21:5C:93:71:DE:E5:F3:AC:50:BD:F1:B6:34:0C:D6:B4
X509v3 Authority Key Identifier:
keyid:24:6F:6A:4B:E1:5B:00:CF:EC:0D:C3:99:A5:E8:43:9F:93:9C:91:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:e2:20:6f:75:17:29:b7:99:6d:41:74:e7:df:fa:19:81:c5:
0b:36:66:68:ea:82:78:a4:79:df:64:f7:ca:2a:24:ad:89:5c:
df:a7:02:5b:12:fe:c1:60:40:aa:66:ff:50:92:a1:74:ba:0d:
0c:20:bf:ab:81:09:42:47:22:a1:4a:95:87:ba:1e:f6:f1:10:
cf:4a:e7:e7:d0:38:65:c3:52:0d:b6:2d:cd:e6:20:91:45:d9:
a1:f9:89:a8:c0:6b:6a:f9:23:78:ac:a5:ad:b3:aa:f8:f4:3c:
59:24:22:80:b8:a6:f9:3e:71:00:c6:8f:d3:be:1d:3c:bc:f6:
ce:a9:38:56:be:88:0c:03:7f:b2:99:88:84:76:c8:2e:2b:49:
1c:49:91:96:84:00:b0:e5:6d:cc:91:f8:3e:77:8a:46:d3:a2:
8e:6c:18:25:3d:6a:37:e5:0a:e2:ee:cb:f5:0b:31:3d:fc:cf:
c9:95:53:25:9f:19:3d:b4:af:3f:19:7c:5d:4b:5e:65:7b:a5:
20:da:0e:ae:3c:00:f8:3e:cf:c5:9d:51:d6:c7:03:36:0d:09:
c4:e7:d9:de:3e:ad:34:82:52:9b:d4:07:32:84:c4:07:4c:8a:
65:3e:50:56:73:5c:98:9a:1f:2e:55:59:63:95:ad:54:35:73:
a4:96:a9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 07:35:55 2026 by rpki-client