
$ rpki-client -vvf rpki.apnic.net/member_repository/A9177C3F/D737437E733311F0839CDC83C4F9AE02/JGQlARmdbB3pb6P_Lr5new4DDRA.mft
File: JGQlARmdbB3pb6P_Lr5new4DDRA.mft (raw, json)
Hash identifier: am6V1PoiP132aC7OyoXqvlALSNZbYm2errWA3sazOGs=
Subject key identifier: D0:7C:F4:38:F9:4A:55:74:36:C2:1C:E1:8A:D0:47:8D:42:F0:A2:D2
Authority key identifier: 24:64:25:01:19:9D:6C:1D:E9:6F:A3:FF:2E:BE:67:7B:0E:03:0D:10
Certificate issuer: /CN=A9177C3F/serialNumber=24642501199D6C1DE96FA3FF2EBE677B0E030D10
Certificate serial: 7E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JGQlARmdbB3pb6P_Lr5new4DDRA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9177C3F/D737437E733311F0839CDC83C4F9AE02/JGQlARmdbB3pb6P_Lr5new4DDRA.mft
Manifest number: 7E
Signing time: Sun 05 Apr 2026 07:05:16 +0000
Manifest this update: Sun 05 Apr 2026 07:05:15 +0000
Manifest next update: Sun 12 Apr 2026 07:05:15 +0000
Files and hashes: 1: JGQlARmdbB3pb6P_Lr5new4DDRA.crl (hash: XaNb28xnme/Rqpr6+XzPkuiR7m2dTST8emehDo4NlQk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9177C3F/D737437E733311F0839CDC83C4F9AE02/JGQlARmdbB3pb6P_Lr5new4DDRA.crl
rsync://rpki.apnic.net/member_repository/A9177C3F/D737437E733311F0839CDC83C4F9AE02/JGQlARmdbB3pb6P_Lr5new4DDRA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JGQlARmdbB3pb6P_Lr5new4DDRA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 07:05:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126 (0x7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9177C3F, serialNumber=24642501199D6C1DE96FA3FF2EBE677B0E030D10
Validity
Not Before: Apr 5 07:05:15 2026 GMT
Not After : Apr 12 07:05:15 2026 GMT
Subject: CN=69d209ac-ee26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:38:b0:a1:a8:30:e7:a0:89:87:b5:a2:33:b3:
3f:22:cf:26:35:4f:ac:de:a4:ea:52:c9:a9:71:8c:
08:78:b1:a2:ef:dc:e6:ff:f0:f0:97:66:20:dd:cc:
70:97:7f:f0:c7:a7:fd:a9:25:55:bf:60:d7:a6:5e:
4b:ee:a4:af:21:17:dc:72:fa:63:e5:d4:c8:8f:82:
c3:b4:de:a5:10:28:d6:3d:3f:b1:21:e8:41:05:40:
03:47:02:ea:a0:21:76:41:87:bb:2f:1b:8f:8f:98:
66:aa:82:f2:de:ba:1b:33:bb:07:31:05:35:2d:ef:
78:d7:30:61:81:44:f8:e1:16:d2:b5:3e:4a:1e:af:
c8:78:a0:1a:e5:64:09:3d:08:2d:82:60:be:03:fc:
f6:39:81:60:f2:30:f0:0d:76:b1:60:93:d6:6f:11:
c5:ab:78:2a:33:26:f5:3b:ed:d4:38:57:65:68:48:
7d:49:0a:22:97:e5:1b:44:b5:bc:2d:46:a9:0e:2e:
ad:0f:05:7d:8b:46:a0:33:e7:a6:d4:08:6f:bc:bb:
45:28:a8:94:3e:ae:0d:e9:d2:a9:3c:e7:fa:5c:91:
b0:b4:0c:bb:3d:72:4e:d8:82:67:ff:76:f2:20:65:
00:f0:45:05:00:7a:6e:44:91:51:dc:a2:a8:ed:a2:
cb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:7C:F4:38:F9:4A:55:74:36:C2:1C:E1:8A:D0:47:8D:42:F0:A2:D2
X509v3 Authority Key Identifier:
keyid:24:64:25:01:19:9D:6C:1D:E9:6F:A3:FF:2E:BE:67:7B:0E:03:0D:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9177C3F/D737437E733311F0839CDC83C4F9AE02/JGQlARmdbB3pb6P_Lr5new4DDRA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JGQlARmdbB3pb6P_Lr5new4DDRA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177C3F/D737437E733311F0839CDC83C4F9AE02/JGQlARmdbB3pb6P_Lr5new4DDRA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:0b:4f:6e:c7:8e:1e:d7:e0:dd:b1:2f:d7:8d:a7:27:c3:42:
46:5d:55:c7:8a:67:c2:6c:45:c3:4a:48:1c:fc:ca:c1:50:8f:
bd:13:62:31:4c:f1:bb:a9:10:ed:b5:0b:d5:02:a5:3a:a6:e6:
1c:64:8c:3b:4c:9a:2e:34:e1:7a:1c:40:d0:9a:ca:d8:9c:d3:
e4:d6:13:99:df:f4:8c:62:eb:cf:a6:04:1f:d5:2e:8f:36:14:
74:f8:48:7f:d9:59:74:38:6a:41:a8:b0:4d:a9:96:da:98:5c:
67:0c:85:3b:9c:d0:ca:34:a9:51:9f:45:88:56:db:21:b5:b6:
d4:83:e5:8f:a9:04:1b:6e:85:4c:77:fc:d5:71:30:b1:8f:d6:
f8:3b:4a:9f:8b:42:91:1c:56:51:7a:9f:bc:6b:7a:ce:83:22:
2c:a0:fc:99:29:44:7c:cd:54:0e:7f:d2:c0:64:6a:b7:2b:98:
8b:ca:06:5b:ff:8f:53:ea:db:cd:23:27:54:3e:03:02:42:6e:
fc:cf:06:a2:78:f6:fa:fe:a1:86:d4:fb:67:99:d7:12:ba:fb:
74:95:10:a0:a7:8c:f2:27:ee:8a:05:d6:f0:27:4b:39:ef:03:
ca:e0:ce:11:94:d8:be:eb:08:26:3f:52:b4:18:b9:41:fa:34:
de:bc:40:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:33:36 2026 by rpki-client