
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131157/06B2B8E2072611F083F3FC75C4F9AE02/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.mft
File: Ji7CDTK8Ey19IEw0SCIpeSQhz3A.mft (raw, json)
Hash identifier: yHOEsWWGjSPc0M1mcG58pkXDYsJvptwynHi0bqe1DLQ=
Subject key identifier: F5:DC:D9:9A:A1:D1:17:77:06:71:99:05:00:99:F5:0E:8C:10:87:41
Authority key identifier: 26:2E:C2:0D:32:BC:13:2D:7D:20:4C:34:48:22:29:79:24:21:CF:70
Certificate issuer: /CN=A9131157/serialNumber=262EC20D32BC132D7D204C34482229792421CF70
Certificate serial: F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131157/06B2B8E2072611F083F3FC75C4F9AE02/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.mft
Manifest number: E7
Signing time: Thu 21 May 2026 06:43:05 +0000
Manifest this update: Thu 21 May 2026 06:43:04 +0000
Manifest next update: Thu 28 May 2026 06:43:04 +0000
Files and hashes: 1: Ji7CDTK8Ey19IEw0SCIpeSQhz3A.crl (hash: s6TYFGdVMGOWpnlkQr3LU2l7BSv97amGrFrinqEn2m8=)
2: 2264A3AC083911F0B331A472C4F9AE02.roa (hash: pwNtVZGrmzrKiGVRjkeCeKqvfBMVhfXsfTuHRWtv4fs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131157/06B2B8E2072611F083F3FC75C4F9AE02/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.crl
rsync://rpki.apnic.net/member_repository/A9131157/06B2B8E2072611F083F3FC75C4F9AE02/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 06:43:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 240 (0xf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131157, serialNumber=262EC20D32BC132D7D204C34482229792421CF70
Validity
Not Before: May 21 06:43:04 2026 GMT
Not After : May 28 06:43:04 2026 GMT
Subject: CN=6a0ea979-fc86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7f:f1:da:8e:5e:8d:ae:a3:ec:21:99:64:a0:
18:82:26:4a:f2:ee:a6:93:84:be:6d:65:95:33:79:
70:f9:b8:8c:53:86:3f:e4:af:dc:00:6d:89:58:89:
c5:0a:a0:4a:8d:5b:3e:36:69:92:ad:d2:47:a6:5e:
2e:41:b9:04:bf:44:5e:cf:40:ee:50:dd:48:a4:66:
86:f9:26:0f:e7:3e:40:0b:86:18:80:b4:ca:f3:f9:
bf:38:81:33:83:f1:0b:ae:ae:b7:91:67:6e:9e:d9:
fb:dc:0a:93:53:12:a0:4e:06:b1:94:4e:ee:aa:3c:
bb:b4:12:69:70:e7:bc:b3:3d:33:40:e2:d1:c3:a8:
c4:1e:1a:66:ea:46:d6:bd:79:2e:6d:5e:bc:b0:2d:
ab:d8:36:25:06:9f:31:6d:59:77:b3:cd:66:14:3c:
05:4f:1a:dc:46:8f:97:a8:43:f8:65:4e:a4:bd:a0:
ff:73:44:03:8a:d0:00:31:62:b6:a5:37:d9:df:29:
66:d4:6f:72:de:5d:ca:99:11:c7:91:e5:f8:28:79:
21:d6:78:39:9c:aa:a0:f1:24:5c:fd:12:7c:48:d3:
67:87:e5:de:89:21:ee:5b:48:76:82:ad:9a:f0:30:
80:cb:2f:3f:d4:48:64:21:8f:25:c3:e0:42:3e:b8:
0b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:DC:D9:9A:A1:D1:17:77:06:71:99:05:00:99:F5:0E:8C:10:87:41
X509v3 Authority Key Identifier:
keyid:26:2E:C2:0D:32:BC:13:2D:7D:20:4C:34:48:22:29:79:24:21:CF:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131157/06B2B8E2072611F083F3FC75C4F9AE02/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131157/06B2B8E2072611F083F3FC75C4F9AE02/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:fa:f2:20:8d:82:47:23:0a:72:d8:48:a0:55:cd:1a:dc:d2:
6d:16:6f:fb:37:33:f6:c3:69:37:4e:db:d2:37:61:80:d5:66:
98:db:cf:21:2c:56:f3:62:a0:1d:ca:f5:13:cc:8a:1c:a5:b8:
c0:2c:b8:f6:5b:a2:3e:3b:1b:10:9b:eb:cc:7e:84:44:7e:bb:
2f:15:05:66:db:62:c0:ce:a3:58:2a:c3:de:3a:bc:57:61:47:
58:43:c9:7c:7c:87:e3:04:f8:3b:07:b4:62:64:54:b2:52:31:
dc:61:2c:8b:5c:1d:da:69:42:f2:96:d3:1a:d6:4f:d7:e5:5f:
d3:dc:24:dd:68:63:09:00:52:d3:95:5c:88:11:ec:d2:36:bf:
2f:4b:5a:80:ca:a1:37:ba:1e:d5:d4:2d:69:c5:52:f7:3d:d6:
fc:04:d6:10:17:28:23:cb:56:1d:cf:26:08:2d:71:32:96:6a:
21:f9:56:4a:90:fa:e3:e6:08:55:63:fe:1a:5d:5a:c8:d8:f2:
95:e0:41:3f:82:5a:aa:45:1e:59:3d:b4:39:50:c8:c5:80:23:
4a:7e:23:a8:11:d2:ae:d6:59:42:ce:42:93:82:47:fd:aa:e1:
07:c4:a5:c6:53:d6:d2:b4:c6:d8:00:ed:00:c7:30:60:1c:42:
1e:02:4c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 13:23:20 2026 by rpki-client