
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft
File: J-OLvrji2ycfz6F8E0feawaDRGA.mft (raw, json)
Hash identifier: 0vA0LO9o6zA8GaXFfakT2ZgHJRsbxgKqQeM+1kx1enw=
Subject key identifier: B0:8E:F4:DB:2F:53:F8:18:89:8A:77:F8:05:59:B6:1B:8E:87:19:19
Authority key identifier: 27:E3:8B:BE:B8:E2:DB:27:1F:CF:A1:7C:13:47:DE:6B:06:83:44:60
Certificate issuer: /CN=A9151E54/serialNumber=27E38BBEB8E2DB271FCFA17C1347DE6B06834460
Certificate serial: 0648
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-OLvrji2ycfz6F8E0feawaDRGA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft
Manifest number: 0641
Signing time: Tue 06 Oct 2026 22:48:27 +0000
Manifest this update: Tue 06 Oct 2026 22:48:27 +0000
Manifest next update: Tue 13 Oct 2026 22:48:27 +0000
Files and hashes: 1: J-OLvrji2ycfz6F8E0feawaDRGA.crl (hash: mI/FTO20yWN7li3RHLumPtuQltPifg8nBcMptf47j+4=)
2: 7D20FF46F3E511EBB8BBF720C4F9AE02.roa (hash: V+XheScePk1AavDQ0HXjp7Jys0+s+yjGu/TYBAzZvTM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.crl
rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-OLvrji2ycfz6F8E0feawaDRGA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 22:48:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1608 (0x648)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151E54, serialNumber=27E38BBEB8E2DB271FCFA17C1347DE6B06834460
Validity
Not Before: Oct 6 22:48:27 2026 GMT
Not After : Oct 13 22:48:27 2026 GMT
Subject: CN=6ac57abb-65d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fd:d1:d5:72:80:ce:5a:29:56:e2:f2:b2:b7:
f1:56:0b:d8:7d:a3:c5:4b:7e:be:80:ba:1a:c8:b5:
9a:8c:b9:32:88:34:c5:08:74:04:f0:70:f4:70:0c:
ea:63:fe:07:4f:d0:41:37:cc:fd:de:3c:5c:92:58:
ea:f5:8e:9a:f3:49:02:19:7d:dc:00:5a:79:90:b7:
2b:fb:45:9e:35:d0:95:58:a5:8e:d0:bf:62:9e:bf:
71:28:c9:99:28:ce:3e:23:c1:e4:57:45:51:d6:37:
d5:d1:dd:a6:3a:2d:40:c8:e1:71:1f:a5:5b:b4:57:
a9:24:ff:00:28:df:09:d9:e2:b0:5c:28:ca:1e:3e:
ed:da:64:62:6c:c4:51:d9:9c:a6:33:04:f1:7a:4e:
87:41:86:a2:10:ed:20:af:1d:f2:1e:af:52:38:71:
e1:19:7b:54:9d:49:af:93:e2:6f:f9:ab:a3:2c:f2:
60:ec:fe:de:92:e5:7a:28:ec:46:ac:41:73:d8:09:
3f:9d:f7:d4:78:98:88:6f:b3:26:25:9b:54:6b:80:
1e:88:33:61:f1:65:5a:2a:95:b7:46:41:83:1e:2b:
04:bf:dc:a3:46:fd:b0:bd:db:e6:20:66:8a:a9:89:
ef:94:78:78:11:0d:2d:42:06:4a:6a:2f:cf:4b:48:
88:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:8E:F4:DB:2F:53:F8:18:89:8A:77:F8:05:59:B6:1B:8E:87:19:19
X509v3 Authority Key Identifier:
keyid:27:E3:8B:BE:B8:E2:DB:27:1F:CF:A1:7C:13:47:DE:6B:06:83:44:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-OLvrji2ycfz6F8E0feawaDRGA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:98:0d:ef:01:86:05:b6:ec:4c:31:82:1c:0c:b2:9e:e2:fd:
83:ff:7c:44:bc:60:5b:d9:a7:d4:4c:16:4d:6c:5c:bd:2e:e5:
3e:46:94:5c:b8:48:cf:a6:bc:89:a4:2a:0e:30:da:1f:0c:90:
66:7f:ba:62:5e:f7:de:05:a8:24:45:09:b0:e0:a7:6f:5e:6b:
fa:f3:f3:29:d6:7d:fb:45:c3:56:21:06:f9:30:a3:63:91:67:
c7:13:db:a1:26:0f:b2:6f:44:ee:c5:c9:e1:62:13:55:e5:9a:
f9:18:84:ac:a9:a5:87:c7:30:a5:75:15:e6:fa:0e:67:fd:ad:
99:33:df:eb:29:f0:ce:24:1a:ea:a0:82:86:7a:25:2f:df:f4:
a6:4d:dc:be:49:a5:ba:66:38:19:34:3a:ff:55:e9:4f:b8:6d:
a8:ae:f3:c0:a6:27:f7:11:f7:6d:9a:56:1c:35:80:cd:dd:49:
b6:94:79:1d:5f:96:fe:14:31:8e:fd:e1:8b:70:0a:53:5e:fc:
f5:c6:a3:00:0c:97:c3:92:ba:19:4e:32:c7:1e:e5:98:2d:ad:
ee:72:73:c7:6e:28:8a:47:6e:8a:c6:87:01:72:d3:e8:54:f3:
2a:ba:fa:65:77:20:60:d4:fd:02:6f:bc:79:ac:ea:6f:07:38:
bf:3e:ab:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:05:35 2026 by rpki-client