
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft
File: jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft (raw, json)
Hash identifier: qy5Up9shje4SMCrIt/WsNoPivBwGRhLEDXwcRJE/Vbk=
Subject key identifier: 01:E5:0E:44:67:31:57:01:D0:04:7A:96:DD:17:37:29:EA:EE:61:1E
Authority key identifier: 8D:16:FD:0E:25:FB:89:6E:26:FA:73:4A:BC:98:4C:E4:B4:69:8D:D3
Certificate issuer: /CN=A9149A6C/serialNumber=8D16FD0E25FB896E26FA734ABC984CE4B4698DD3
Certificate serial: 079D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRb9DiX7iW4m-nNKvJhM5LRpjdM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft
Manifest number: 0795
Signing time: Wed 20 May 2026 21:32:18 +0000
Manifest this update: Wed 20 May 2026 21:32:17 +0000
Manifest next update: Wed 27 May 2026 21:32:17 +0000
Files and hashes: 1: jRb9DiX7iW4m-nNKvJhM5LRpjdM.crl (hash: kvIY73kc6RjZdimLaRgJwM8ozoCetwOJ2eInr+L+REI=)
2: 22D8137A51A711EBAAAB6410C4F9AE02.roa (hash: hAtG+f9sTyDBDIC3yzVKMSXyXaV2HtV+sHcFaEmD/HU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.crl
rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRb9DiX7iW4m-nNKvJhM5LRpjdM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 21:32:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1949 (0x79d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149A6C, serialNumber=8D16FD0E25FB896E26FA734ABC984CE4B4698DD3
Validity
Not Before: May 20 21:32:17 2026 GMT
Not After : May 27 21:32:17 2026 GMT
Subject: CN=6a0e2862-768f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:42:dd:3c:dc:73:91:c6:d6:95:2e:be:29:ca:
67:e2:5a:e1:47:2a:1d:7f:c0:19:cf:76:c6:8e:dd:
bb:b2:b3:ee:de:ad:a5:a7:56:17:20:8e:67:ab:7c:
41:d7:3a:f9:4c:0d:85:ab:e2:79:96:6e:29:f1:cd:
e2:d8:31:19:a0:69:b0:14:1c:d7:ec:88:5c:d5:5f:
19:2e:41:54:9d:e6:79:fe:dd:b4:89:f9:49:47:97:
1f:92:ed:f4:16:7a:ca:a1:9d:c2:6d:3b:ac:f7:03:
b8:8e:18:78:05:89:b6:72:c3:23:a4:b9:81:6a:ff:
75:76:14:ef:fc:35:aa:be:12:67:61:52:90:99:53:
6a:06:b9:84:e2:ec:a6:7d:0f:67:a7:32:1b:e8:b9:
06:f5:e8:33:18:55:04:63:25:3f:98:f0:9f:48:09:
dd:93:14:8a:b2:a8:a0:bf:24:07:55:22:4e:8c:5c:
82:e4:33:c9:98:26:07:51:f0:d3:32:63:c2:48:22:
b0:3c:2a:73:6d:31:ab:34:c1:75:ca:52:6e:0e:97:
6b:d0:28:41:5a:68:bc:df:4f:a6:96:a3:cd:19:55:
0e:c3:a5:fa:47:2b:1d:9f:34:2c:1d:af:a6:48:64:
24:1a:60:e0:24:e7:8a:df:70:c3:4d:49:84:50:77:
cc:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E5:0E:44:67:31:57:01:D0:04:7A:96:DD:17:37:29:EA:EE:61:1E
X509v3 Authority Key Identifier:
keyid:8D:16:FD:0E:25:FB:89:6E:26:FA:73:4A:BC:98:4C:E4:B4:69:8D:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRb9DiX7iW4m-nNKvJhM5LRpjdM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:ca:57:ed:95:45:5a:19:ad:09:70:2e:12:8a:ef:ec:bd:e3:
dd:7a:ca:01:70:a7:3b:79:b7:02:08:66:8e:ca:85:25:7c:66:
54:80:5e:c1:ff:8d:9c:ab:28:ea:8e:b6:97:03:da:6c:33:88:
12:89:c7:c9:82:ad:71:ce:55:ab:5b:ea:b1:91:7d:f1:dd:12:
78:9e:ee:44:c7:43:7a:0f:e3:7a:55:89:dd:3c:be:df:b5:b6:
dd:05:36:41:29:f8:bd:0c:8d:0a:a4:db:43:7a:7f:92:2b:ed:
2f:be:13:99:3c:aa:37:47:20:78:3d:48:78:94:96:e4:5f:25:
c3:9e:24:d5:3d:18:e2:e1:2d:9e:19:64:54:50:87:88:1c:ad:
2d:46:c4:f4:e0:e9:c5:f5:d2:54:cf:8e:84:04:24:eb:7a:ad:
ec:aa:f2:f3:9e:7c:40:a2:1f:cc:de:80:d4:b8:18:19:07:65:
51:2f:73:e5:49:bf:b5:16:62:55:78:7b:18:dd:49:f4:12:e3:
88:89:d7:0a:ce:f7:d2:1b:62:bd:9e:8d:9d:80:e2:ed:6c:c0:
f2:b9:19:30:08:bc:a9:5c:59:b0:b6:79:76:8a:d9:66:8c:a5:
ac:2f:4c:27:fb:74:ae:73:45:51:17:1e:16:61:ae:a6:0d:6e:
ec:7c:15:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:07:40 2026 by rpki-client