
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
File: JDIOr_moILjtpZ4D5AVVxfNP78w.mft (raw, json)
Hash identifier: JHUHLPZ7XxGZPFarlwJVdF8yeWz+am7tkkSUPvSbMug=
Subject key identifier: 3E:BF:F7:3C:E6:9A:B4:F6:21:49:87:32:52:DD:D8:6F:D3:B6:2F:C2
Authority key identifier: 24:32:0E:AF:F9:A8:20:B8:ED:A5:9E:03:E4:05:55:C5:F3:4F:EF:CC
Certificate issuer: /CN=A9164F45/serialNumber=24320EAFF9A820B8EDA59E03E40555C5F34FEFCC
Certificate serial: 020B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
Manifest number: 01F4
Signing time: Sun 05 Apr 2026 02:50:28 +0000
Manifest this update: Sun 05 Apr 2026 02:50:27 +0000
Manifest next update: Sun 12 Apr 2026 02:50:27 +0000
Files and hashes: 1: JDIOr_moILjtpZ4D5AVVxfNP78w.crl (hash: boLGj0IRdyV39asFj9hOQ3I7CLk9GB9S4MhgmaL6NU4=)
2: 7599519C42F811EEBCBA9981C4F9AE02.roa (hash: I5QliwvYU+6XY3uLDux2ljdugQkjPvN8suXRu5XZZMM=)
3: 32B9FB9C42FD11EEBC3A6810C4F9AE02.roa (hash: QXAEGZzwRw0h1gNPZ7PlUf/rgAFsJhEDsbChop9gPBY=)
4: AC1FAF84432211EEB1984F73C4F9AE02.roa (hash: 5f3PGGQ4lIHquQnRshVK4NbBoJAP65xZO5Xtmj/sUr0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.crl
rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 02:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 523 (0x20b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164F45, serialNumber=24320EAFF9A820B8EDA59E03E40555C5F34FEFCC
Validity
Not Before: Apr 5 02:50:27 2026 GMT
Not After : Apr 12 02:50:27 2026 GMT
Subject: CN=69d1cdf3-d91a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:15:a5:c5:3e:b0:92:c4:37:28:97:0e:c5:9f:
ad:4d:d4:97:ad:32:21:ad:4a:39:8d:34:de:94:20:
b0:86:bc:cd:63:bc:24:a2:37:ab:e5:82:43:a0:63:
af:1c:0a:b8:da:94:e9:39:11:d9:3a:b2:c9:90:72:
c0:3b:a2:b7:8e:60:52:80:2f:de:73:65:c7:24:dd:
e1:c1:67:01:79:2e:0f:b3:4b:83:61:b5:48:94:7f:
28:38:08:f5:dd:ad:ba:7d:10:a1:c7:bc:1c:4d:2b:
62:8b:43:97:62:6a:3c:ca:a7:5f:d1:2c:9c:80:77:
34:d7:6f:1e:d9:80:fb:9e:35:d4:bb:18:9e:d4:3d:
8d:b3:ba:ec:d6:ad:d9:b0:ce:e4:5a:c9:7a:15:48:
35:ff:6d:b1:66:bb:82:96:ce:c8:d1:cd:35:d2:2f:
22:1d:a9:9f:3e:6f:0a:db:fe:93:01:21:da:80:d5:
54:5d:87:ac:f4:b3:b4:42:28:e4:49:92:c7:bc:4b:
13:4f:3c:1b:57:37:f1:2b:6e:18:9a:fc:66:ce:a0:
28:e1:36:86:0c:00:ad:70:26:65:1a:b5:14:7b:18:
ff:fc:ba:ff:4e:93:42:cc:f8:ce:2b:1b:e1:bd:e1:
92:0c:40:e6:92:3f:76:e4:ea:62:3a:82:20:91:d1:
21:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:BF:F7:3C:E6:9A:B4:F6:21:49:87:32:52:DD:D8:6F:D3:B6:2F:C2
X509v3 Authority Key Identifier:
keyid:24:32:0E:AF:F9:A8:20:B8:ED:A5:9E:03:E4:05:55:C5:F3:4F:EF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:7e:da:a6:3b:8c:09:50:0a:0d:3c:77:de:ec:f0:0e:05:19:
c1:54:d8:a7:2c:2a:b8:33:9b:cc:cb:c5:1c:32:a5:6b:57:1e:
fa:fd:a2:e7:08:3c:e4:d6:b2:e4:03:06:34:73:ec:df:dd:d2:
1a:3c:84:fe:e6:aa:b6:92:31:91:c7:24:c9:44:f8:e3:f1:ec:
e2:cc:99:8c:c1:7b:45:c9:21:d3:a3:65:53:78:8d:8a:84:c0:
b6:c2:94:f2:a4:7a:2c:47:f9:cc:d5:73:46:1b:33:51:4e:e7:
14:e5:91:76:ba:ee:ad:59:56:5b:bd:76:c1:3d:71:17:f7:ce:
40:a8:d0:72:14:70:c2:27:a0:00:80:94:0e:87:7c:8a:51:0c:
94:1f:0d:5f:5d:c9:6d:6e:86:40:de:2b:10:2e:93:7a:b8:44:
13:cc:0a:d7:3a:50:14:09:ec:67:c2:81:be:3a:6b:c2:12:7c:
b5:a4:06:32:f8:e5:15:59:b8:03:ff:2c:81:66:d7:0f:fa:64:
96:8c:47:a4:66:56:9a:1a:46:2e:e7:76:a4:78:d8:c3:96:26:
af:bc:03:46:fe:30:93:e5:40:c7:76:f3:3d:4c:c3:d1:1a:2a:
7b:15:34:17:15:aa:71:76:56:c4:69:85:4a:b1:02:52:f0:fe:
1b:91:c3:cc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjRGNDUxMTAvBgNVBAUTKDI0MzIwRUFGRjlBODIwQjhFREE1OUUwM0U0MDU1NUM1
RjM0RkVGQ0MwHhcNMjYwNDA1MDI1MDI3WhcNMjYwNDEyMDI1MDI3WjAYMRYwFAYD
VQQDEw02OWQxY2RmMy1kOTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAihWlxT6wksQ3KJcOxZ+tTdSXrTIhrUo5jTTelCCwhrzNY7wkojer5YJDoGOv
HAq42pTpORHZOrLJkHLAO6K3jmBSgC/ec2XHJN3hwWcBeS4Ps0uDYbVIlH8oOAj1
3a26fRChx7wcTStii0OXYmo8yqdf0SycgHc0128e2YD7njXUuxie1D2Ns7rs1q3Z
sM7kWsl6FUg1/22xZruCls7I0c010i8iHamfPm8K2/6TASHagNVUXYes9LO0Qijk
SZLHvEsTTzwbVzfxK24YmvxmzqAo4TaGDACtcCZlGrUUexj//Lr/TpNCzPjOKxvh
veGSDEDmkj925OpiOoIgkdEhlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD6/9zzm
mrT2IUmHMlLd2G/Tti/CMB8GA1UdIwQYMBaAFCQyDq/5qCC47aWeA+QFVcXzT+/M
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEY0NS8zMzYxMTlDNDQy
RjYxMUVFQTI1MjRENjNDNEY5QUUwMi9KRElPcl9tb0lManRwWjRENUFWVnhmTlA3
OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pESU9yX21vSUxqdHBaNEQ1QVZWeGZOUDc4dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NEY0NS8zMzYxMTlDNDQyRjYxMUVFQTI1MjRENjNDNEY5QUUwMi9KRElPcl9tb0lM
anRwWjRENUFWVnhmTlA3OHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAj37apjuMCVAKDTx33uzwDgUZwVTYpywquDObzMvFHDKla1ce+v2i5wg85Nay
5AMGNHPs393SGjyE/uaqtpIxkcckyUT44/Hs4syZjMF7Rckh06NlU3iNioTAtsKU
8qR6LEf5zNVzRhszUU7nFOWRdrrurVlWW712wT1xF/fOQKjQchRwwiegAICUDod8
ilEMlB8NX13JbW6GQN4rEC6TerhEE8wK1zpQFAnsZ8KBvjprwhJ8taQGMvjlFVm4
A/8sgWbXD/pkloxHpGZWmhpGLud2pHjYw5Ymr7wDRv4wk+VAx3bzPUzD0RoqexU0
FxWqcXZWxGmFSrECUvD+G5HDzA==
-----END CERTIFICATE-----
Generated at Mon Apr 6 13:36:38 2026 by rpki-client