
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.mft
File: J5ydeYJLogRvE4r2zbijsI8DvrM.mft (raw, json)
Hash identifier: Rj/6tsdJQ3njjpplqyr5k/dDDBDcgfID9jr31ioF6C4=
Subject key identifier: A3:01:2F:5D:ED:3F:80:E4:4E:B0:9A:8E:6E:3F:F8:C7:00:32:84:DA
Authority key identifier: 27:9C:9D:79:82:4B:A2:04:6F:13:8A:F6:CD:B8:A3:B0:8F:03:BE:B3
Certificate issuer: /CN=A9170927/serialNumber=279C9D79824BA2046F138AF6CDB8A3B08F03BEB3
Certificate serial: DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5ydeYJLogRvE4r2zbijsI8DvrM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.mft
Manifest number: D0
Signing time: Sun 05 Apr 2026 06:17:09 +0000
Manifest this update: Sun 05 Apr 2026 06:17:09 +0000
Manifest next update: Sun 12 Apr 2026 06:17:09 +0000
Files and hashes: 1: J5ydeYJLogRvE4r2zbijsI8DvrM.crl (hash: ySb8koKLSV2N2IGNIn6dHLlfdDX159blVfHsq4doDEM=)
2: F31C1B909D3C11F097272925C4F9AE02.roa (hash: wVEbnfEW5GeLuVpd4/zHfbWm/1FWKGn8jJz6Ylxyltw=)
3: 6D8A3DC29DCD11F0A412CC62C4F9AE02.roa (hash: KteD+gnwfbH1TZydXUFqfSWq7gf/LG4wlbVUwsA7oxE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.crl
rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5ydeYJLogRvE4r2zbijsI8DvrM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 06:17:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222 (0xde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170927, serialNumber=279C9D79824BA2046F138AF6CDB8A3B08F03BEB3
Validity
Not Before: Apr 5 06:17:09 2026 GMT
Not After : Apr 12 06:17:09 2026 GMT
Subject: CN=69d1fe65-dea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4e:fb:4f:e7:51:cf:b0:c7:82:16:c7:ef:be:
d8:a5:a2:5a:18:d8:e8:08:3a:1e:f6:6e:fa:fd:74:
46:80:d0:ff:95:df:eb:66:bd:d6:d8:f2:f5:bd:ad:
93:9c:a7:10:98:a6:e9:ac:8e:bd:7c:83:f6:1d:13:
bb:a1:ab:e8:37:f7:8b:8c:1f:fa:3c:06:1a:89:46:
b9:d1:17:19:0a:75:17:d2:44:68:07:40:91:2a:c6:
01:fb:62:05:a7:5e:ac:cf:5b:21:1b:3a:58:44:67:
c2:c6:b3:38:19:5b:7b:16:36:c8:2a:57:4d:38:ee:
2a:9e:64:8f:21:55:3b:07:9d:8a:35:2e:25:00:20:
4d:00:d9:84:e8:3c:65:a3:bf:e6:b9:c2:2d:51:f8:
64:7d:54:5a:85:8b:0e:e6:dc:53:59:c8:5c:a5:5b:
3b:bf:ad:eb:0e:4b:00:de:72:ae:5a:5c:1b:c6:d7:
9f:f9:0e:9b:5c:6a:2e:1b:f7:c8:17:bc:b1:db:e4:
a8:6b:08:40:af:ae:fb:2b:fa:ba:1b:26:ed:83:86:
b1:a0:0a:d4:7b:2d:c0:94:35:aa:69:76:86:e5:56:
84:1b:9a:ee:65:da:14:8f:c6:12:e7:89:de:56:bf:
93:bc:06:a6:c6:53:a1:13:99:9c:82:d3:ce:d3:42:
7c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:01:2F:5D:ED:3F:80:E4:4E:B0:9A:8E:6E:3F:F8:C7:00:32:84:DA
X509v3 Authority Key Identifier:
keyid:27:9C:9D:79:82:4B:A2:04:6F:13:8A:F6:CD:B8:A3:B0:8F:03:BE:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5ydeYJLogRvE4r2zbijsI8DvrM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:a4:00:80:84:f6:1b:9c:03:ed:1c:33:f3:84:8f:40:70:e5:
9f:1c:20:c3:d6:5c:69:8d:e6:2e:7b:a1:af:0d:da:a2:00:94:
96:e1:ca:b7:33:83:c4:43:63:9f:b4:24:8f:a4:b8:0e:ce:24:
e2:84:f0:a8:c8:92:f3:95:3d:37:b6:e2:fc:c1:f4:dc:53:38:
86:36:f7:15:08:5b:32:32:bd:01:d8:0c:77:e9:a6:48:95:89:
46:3a:38:1d:ab:ac:c9:59:36:12:2d:4c:1d:60:1f:eb:63:9b:
25:c6:76:84:f3:29:0a:20:ea:37:ff:5e:ba:ee:ad:ee:d0:f3:
c1:1c:3e:2e:87:d1:93:cb:12:1c:4c:ef:7c:f5:7f:93:31:07:
90:cb:5d:35:cc:51:be:2f:9c:c7:3b:54:56:1d:bc:78:5d:77:
90:d4:a7:6f:05:cc:8e:04:49:e2:17:87:00:4d:6c:7f:27:bd:
b5:ce:4b:e3:08:86:0f:ae:34:8d:f9:d8:b4:b0:6f:1d:a3:0d:
6f:cf:7a:6e:26:21:e6:d1:b1:c7:e8:24:17:7a:89:b2:44:23:
d0:e7:38:8b:5b:5b:f2:1c:f5:bf:24:ac:44:8e:e4:0b:f8:bf:
85:93:fd:b7:23:5f:14:9c:05:36:7a:ee:e8:1b:6f:5d:24:3d:
9d:cd:e2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:54:34 2026 by rpki-client