
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9155FAB/FA863772F5AC11EFAE40E71BC4F9AE02/Jvi9A8Wit6pxdUWeoEeohnYjnuA.mft
File: Jvi9A8Wit6pxdUWeoEeohnYjnuA.mft (raw, json)
Hash identifier: jmYIHgLsNVLRw83OGTbvL4VW1rRdi1NmKCNSvGfYODY=
Subject key identifier: 35:30:86:C2:4C:95:DA:83:83:F7:3F:B9:A8:69:8C:5D:0F:73:71:47
Authority key identifier: 26:F8:BD:03:C5:A2:B7:AA:71:75:45:9E:A0:47:A8:86:76:23:9E:E0
Certificate issuer: /CN=A9155FAB/serialNumber=26F8BD03C5A2B7AA7175459EA047A88676239EE0
Certificate serial: 0128
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jvi9A8Wit6pxdUWeoEeohnYjnuA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155FAB/FA863772F5AC11EFAE40E71BC4F9AE02/Jvi9A8Wit6pxdUWeoEeohnYjnuA.mft
Manifest number: 0122
Signing time: Sat 05 Sep 2026 05:36:42 +0000
Manifest this update: Sat 05 Sep 2026 05:36:41 +0000
Manifest next update: Sat 12 Sep 2026 05:36:41 +0000
Files and hashes: 1: Jvi9A8Wit6pxdUWeoEeohnYjnuA.crl (hash: a+KHL16QoP1F1lQfceTSH6W7utjuJecMqXvO2iP4P0w=)
2: 4E66D766F5AD11EFA64C671CC4F9AE02.roa (hash: DGkul+ozckWHPUCME/QWLmgNY4q/l+teYlrEvBr8aK4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155FAB/FA863772F5AC11EFAE40E71BC4F9AE02/Jvi9A8Wit6pxdUWeoEeohnYjnuA.crl
rsync://rpki.apnic.net/member_repository/A9155FAB/FA863772F5AC11EFAE40E71BC4F9AE02/Jvi9A8Wit6pxdUWeoEeohnYjnuA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jvi9A8Wit6pxdUWeoEeohnYjnuA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 05:36:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 296 (0x128)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155FAB, serialNumber=26F8BD03C5A2B7AA7175459EA047A88676239EE0
Validity
Not Before: Sep 5 05:36:41 2026 GMT
Not After : Sep 12 05:36:41 2026 GMT
Subject: CN=6a9baa6a-8460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:12:b0:82:32:99:f2:f2:19:78:42:cb:b9:6d:
65:58:c3:c8:2b:4e:f5:47:45:2d:24:67:29:91:e3:
bc:c0:c6:b6:d2:9f:ac:21:bd:ce:c4:7e:fe:d2:5f:
84:cb:42:9c:b9:cc:1c:0b:94:5a:48:00:c0:eb:45:
85:da:5c:d7:b1:a8:8f:fb:8a:c9:2c:9a:e5:45:6c:
61:74:25:39:78:fa:86:81:60:33:ff:02:c3:69:34:
dd:81:07:85:f4:1f:0a:ae:01:3f:28:ec:31:dd:7f:
ed:3f:85:25:e1:49:ca:2a:55:4e:1e:e8:1a:7c:32:
20:f2:80:a8:b0:12:f7:7e:b1:0d:3e:3b:fb:6c:a6:
53:48:3e:18:f1:72:02:e7:ab:37:05:8c:94:57:3a:
02:ce:a5:49:47:b8:9b:38:8f:b2:e9:94:b3:64:45:
40:9f:81:0b:48:fa:b2:41:74:e7:3b:c4:1f:1b:f5:
71:98:62:91:aa:81:9d:ef:a1:1a:bd:89:3c:3e:c4:
3c:3e:ce:34:5c:46:76:1e:63:d6:c0:46:c9:1b:02:
34:a8:6b:fe:b3:b3:6d:1c:13:f7:7f:72:a1:b6:ee:
cb:f3:6c:eb:d1:e3:19:4c:ad:ba:58:44:ca:33:7d:
54:76:44:5f:64:95:8e:eb:a3:f2:5b:f8:f4:1f:94:
db:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:30:86:C2:4C:95:DA:83:83:F7:3F:B9:A8:69:8C:5D:0F:73:71:47
X509v3 Authority Key Identifier:
keyid:26:F8:BD:03:C5:A2:B7:AA:71:75:45:9E:A0:47:A8:86:76:23:9E:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155FAB/FA863772F5AC11EFAE40E71BC4F9AE02/Jvi9A8Wit6pxdUWeoEeohnYjnuA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jvi9A8Wit6pxdUWeoEeohnYjnuA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155FAB/FA863772F5AC11EFAE40E71BC4F9AE02/Jvi9A8Wit6pxdUWeoEeohnYjnuA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:05:9d:ed:d0:5b:37:f9:d3:ea:25:41:f0:12:5d:0e:22:b9:
fa:e2:0f:61:cd:7c:e0:b6:b9:35:13:54:5b:3d:38:32:d7:6c:
61:f5:dd:54:65:fd:69:92:5b:a6:0e:fe:9e:fe:e7:51:f4:ea:
23:24:b4:64:63:3a:f0:47:bd:a8:b0:b0:1a:bc:57:03:b7:dc:
a4:b1:cc:c1:91:20:b0:8e:9f:ef:3d:70:fb:a9:0a:0f:58:b2:
cb:40:f9:97:89:97:4d:b8:43:75:61:49:db:d0:cd:20:bd:14:
11:6e:b7:7d:ff:7b:0d:9a:a9:fc:ab:02:81:0b:5a:d7:9d:e4:
cc:47:b8:9b:b8:40:53:84:8e:43:7d:26:e0:db:48:fe:d3:06:
6b:27:7b:c6:8b:b4:b2:de:b1:4e:ad:50:ec:38:a5:39:8c:67:
d1:3b:a8:a6:06:f4:6e:c0:44:2a:e8:f1:06:b3:0d:5d:a8:c9:
da:0b:bd:e9:fa:5f:44:71:68:62:20:ac:c2:ed:3c:75:ac:4d:
1d:fc:78:37:b8:5e:c3:f0:2a:1c:01:f6:ec:3f:af:54:b6:56:
04:c6:b6:52:19:75:c4:bd:5b:41:62:8e:a1:5e:75:53:71:79:
61:e2:76:ef:af:75:39:0f:b0:bf:ae:84:23:e5:f7:c7:d0:5d:
cf:76:8e:51
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTVGQUIxMTAvBgNVBAUTKDI2RjhCRDAzQzVBMkI3QUE3MTc1NDU5RUEwNDdBODg2
NzYyMzlFRTAwHhcNMjYwOTA1MDUzNjQxWhcNMjYwOTEyMDUzNjQxWjAYMRYwFAYD
VQQDEw02YTliYWE2YS04NDYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuhKwgjKZ8vIZeELLuW1lWMPIK071R0UtJGcpkeO8wMa20p+sIb3OxH7+0l+E
y0KcucwcC5RaSADA60WF2lzXsaiP+4rJLJrlRWxhdCU5ePqGgWAz/wLDaTTdgQeF
9B8KrgE/KOwx3X/tP4Ul4UnKKlVOHugafDIg8oCosBL3frENPjv7bKZTSD4Y8XIC
56s3BYyUVzoCzqVJR7ibOI+y6ZSzZEVAn4ELSPqyQXTnO8QfG/VxmGKRqoGd76Ea
vYk8PsQ8Ps40XEZ2HmPWwEbJGwI0qGv+s7NtHBP3f3Khtu7L82zr0eMZTK26WETK
M31UdkRfZJWO66PyW/j0H5TbqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDUwhsJM
ldqDg/c/uahpjF0Pc3FHMB8GA1UdIwQYMBaAFCb4vQPForeqcXVFnqBHqIZ2I57g
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NUZBQi9GQTg2Mzc3MkY1
QUMxMUVGQUU0MEU3MUJDNEY5QUUwMi9Kdmk5QThXaXQ2cHhkVVdlb0Vlb2huWWpu
dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0p2aTlBOFdpdDZweGRVV2VvRWVvaG5Zam51QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NUZBQi9GQTg2Mzc3MkY1QUMxMUVGQUU0MEU3MUJDNEY5QUUwMi9Kdmk5QThXaXQ2
cHhkVVdlb0Vlb2huWWpudUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABAWd7dBbN/nT6iVB8BJdDiK5+uIPYc184La5NRNUWz04MtdsYfXdVGX9aZJb
pg7+nv7nUfTqIyS0ZGM68Ee9qLCwGrxXA7fcpLHMwZEgsI6f7z1w+6kKD1iyy0D5
l4mXTbhDdWFJ29DNIL0UEW63ff97DZqp/KsCgQta153kzEe4m7hAU4SOQ30m4NtI
/tMGayd7xou0st6xTq1Q7DilOYxn0Tuopgb0bsBEKujxBrMNXajJ2gu96fpfRHFo
YiCswu08daxNHfx4N7hew/AqHAH27D+vVLZWBMa2Uhl1xL1bQWKOoV51U3F5YeJ2
7691OQ+wv66EI+X3x9Bdz3aOUQ==
-----END CERTIFICATE-----
Generated at Sat Sep 5 11:51:33 2026 by rpki-client