
$ rpki-client -vvf rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft
File: J-OLvrji2ycfz6F8E0feawaDRGA.mft (raw, json)
Hash identifier: 3pA8mvuseIRZ0dmcOWoMkP7aK/3P80+eHwspAwl+wck=
Subject key identifier: 61:47:D4:3C:0C:79:CF:81:98:6E:C6:39:3B:93:D8:05:E7:C6:D8:2B
Authority key identifier: 27:E3:8B:BE:B8:E2:DB:27:1F:CF:A1:7C:13:47:DE:6B:06:83:44:60
Certificate issuer: /CN=A9151E54/serialNumber=27E38BBEB8E2DB271FCFA17C1347DE6B06834460
Certificate serial: 05E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-OLvrji2ycfz6F8E0feawaDRGA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft
Manifest number: 05E1
Signing time: Sat 04 Apr 2026 22:44:43 +0000
Manifest this update: Sat 04 Apr 2026 22:44:43 +0000
Manifest next update: Sat 11 Apr 2026 22:44:43 +0000
Files and hashes: 1: J-OLvrji2ycfz6F8E0feawaDRGA.crl (hash: 1xjKZOgD5+kHNtmLWH+aFgxyLB5BEuOQEPmMfx9b1SY=)
2: 7D20FF46F3E511EBB8BBF720C4F9AE02.roa (hash: xyL9vaBiGiRh4WvFs0MIb3j4FJIXwUneeWSkmubICJw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.crl
rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-OLvrji2ycfz6F8E0feawaDRGA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 22:44:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1511 (0x5e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151E54, serialNumber=27E38BBEB8E2DB271FCFA17C1347DE6B06834460
Validity
Not Before: Apr 4 22:44:43 2026 GMT
Not After : Apr 11 22:44:43 2026 GMT
Subject: CN=69d1945b-bf6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5d:ca:4f:c3:b3:9d:4b:4c:6a:b1:21:26:c8:
75:4f:b3:04:85:8f:43:f4:4d:42:b2:3a:eb:ed:fd:
78:cb:42:e7:e4:ad:64:c3:6a:d0:a9:06:3a:39:fd:
03:11:8f:25:46:1c:b2:0b:1c:0e:7e:d6:93:03:50:
1b:a1:09:3e:f7:86:6d:ae:82:c6:37:f2:58:53:dd:
46:7b:d6:9e:6a:08:38:0c:f9:7c:c8:b1:76:e9:fa:
ae:d6:50:7b:7f:be:1f:e3:f4:12:00:6b:0a:57:03:
78:3e:4c:42:61:a5:f2:65:7c:a6:3d:ec:2b:0d:82:
79:86:31:20:f7:9b:13:2d:8a:b2:b0:6a:9a:6a:a8:
ab:ca:0a:a9:14:76:fb:ff:57:67:2e:cc:77:b6:94:
e6:02:e0:95:66:06:a5:42:a5:f1:26:08:53:ae:79:
4c:98:eb:11:e0:2a:8b:82:37:35:e5:09:a1:b6:a7:
dd:01:e8:66:54:04:14:de:97:f8:91:f6:f9:2b:82:
f4:9e:32:ae:74:de:0a:32:e4:01:c4:3b:d6:ec:b0:
33:2c:f5:24:35:b4:18:16:35:f9:a8:46:24:d9:71:
4d:aa:61:ae:e9:f8:42:c0:d3:14:a7:54:23:bc:55:
fc:6d:83:82:3f:c8:39:4a:ca:ef:b6:f5:cd:ac:7b:
0b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:47:D4:3C:0C:79:CF:81:98:6E:C6:39:3B:93:D8:05:E7:C6:D8:2B
X509v3 Authority Key Identifier:
keyid:27:E3:8B:BE:B8:E2:DB:27:1F:CF:A1:7C:13:47:DE:6B:06:83:44:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-OLvrji2ycfz6F8E0feawaDRGA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:7d:26:2f:11:68:b9:33:e9:ef:64:36:98:30:76:21:df:43:
1f:8e:cb:5d:fe:c2:b0:c0:7f:e9:6e:36:93:13:f5:0c:13:3e:
f8:21:08:30:68:67:20:8e:29:8a:57:f4:6b:e9:0c:c5:49:5a:
a5:c4:f4:b1:71:55:3d:98:20:8b:75:63:0f:2d:69:f8:fc:06:
15:b5:24:9d:6d:5e:28:e7:45:1b:8c:3b:71:55:f7:d3:02:63:
1a:b8:ab:fb:cb:7a:cd:cd:f8:79:82:93:30:d9:d3:e1:ae:bb:
1f:e4:4b:4d:df:b0:e6:97:29:f1:73:60:4b:43:07:d4:1d:a0:
fc:a2:e2:ef:ef:9c:1a:2d:db:09:ab:c8:8d:a0:5d:88:66:fc:
ab:54:76:5a:2c:19:87:92:c3:e5:7e:a3:b7:cc:76:a3:80:0c:
b6:fd:40:12:61:a2:bf:0a:6f:4f:9e:6d:0c:d6:f5:c4:2f:42:
21:8f:29:ce:ff:d5:1f:70:fe:65:42:72:41:fd:68:79:19:82:
2e:62:46:95:70:e9:e1:d4:d1:0b:60:9a:47:90:62:e2:40:bc:
bb:0b:55:a3:ca:bf:77:26:97:d7:6f:00:0e:c6:6a:92:57:ae:
4c:b1:6c:3f:67:65:db:42:a2:76:90:50:36:b2:95:ae:06:75:
94:b0:1d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:54:22 2026 by rpki-client