
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft
File: jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft (raw, json)
Hash identifier: Gd8Ks+Z1lqcrVjFezBhrIGTLcNTjRbcTmZpOmU84TfU=
Subject key identifier: 9A:36:92:9D:61:B0:51:60:63:50:9D:73:3E:A6:C9:EA:92:1C:AA:38
Authority key identifier: 8E:52:61:23:EF:52:CF:84:95:58:26:A2:72:8A:33:07:57:F1:E8:0C
Certificate issuer: /CN=A917A2D1/serialNumber=8E526123EF52CF84955826A2728A330757F1E80C
Certificate serial: 018E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft
Manifest number: 0188
Signing time: Wed 19 Aug 2026 05:06:25 +0000
Manifest this update: Wed 19 Aug 2026 05:06:25 +0000
Manifest next update: Wed 26 Aug 2026 05:06:25 +0000
Files and hashes: 1: jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl (hash: kMEsdDpLsVYNchHES3kdhAvrKaLjmPC6zVKJDenm3V8=)
2: 29703A0645A911EF965B5A37C4F9AE02.roa (hash: 9bbDY8F7VTJe7fWMHNRwEy390EAPlvg4QCMeRuahlMA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl
rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 05:06:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 398 (0x18e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A2D1, serialNumber=8E526123EF52CF84955826A2728A330757F1E80C
Validity
Not Before: Aug 19 05:06:25 2026 GMT
Not After : Aug 26 05:06:25 2026 GMT
Subject: CN=6a8539d1-e997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:eb:20:1c:b4:2f:4e:41:47:4d:14:06:a5:d9:
79:e3:5b:9a:20:9e:b5:05:56:38:98:53:d0:5e:5a:
e6:04:c2:f8:49:44:72:d3:3d:d0:59:1d:5d:94:69:
49:ea:05:71:32:2d:9e:a7:0f:64:bf:73:8b:7d:cd:
95:09:92:59:8f:f6:d3:35:ed:c5:72:8d:fd:f4:d4:
dc:cb:df:97:ed:5c:69:63:a0:01:e0:0d:53:78:e7:
01:96:b2:ef:d4:fb:86:83:8c:24:4e:41:b3:b5:61:
e5:0f:27:a2:36:86:f3:90:50:30:c2:f9:bd:f0:68:
0d:8e:c3:46:dc:43:17:1b:ae:ed:fe:8d:fe:3a:42:
ae:53:8c:19:a2:78:fb:ce:c7:45:af:7b:8f:d7:35:
78:c8:1f:0e:92:54:85:d8:ec:91:00:b6:03:a9:66:
f0:ec:c7:06:47:61:19:66:ee:71:60:42:35:d9:12:
0c:3d:24:47:99:45:13:26:32:90:53:9d:9d:a6:6c:
c4:d4:db:5c:ad:02:f5:1b:17:ee:ab:81:61:df:10:
9a:10:3c:6c:bf:fb:e6:b0:6e:01:21:5f:90:6b:de:
51:88:f8:54:54:ac:ba:69:62:c5:64:7b:ac:d2:44:
c3:26:b0:0e:2c:ca:d3:59:fb:91:96:1b:9a:e2:11:
1d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:36:92:9D:61:B0:51:60:63:50:9D:73:3E:A6:C9:EA:92:1C:AA:38
X509v3 Authority Key Identifier:
keyid:8E:52:61:23:EF:52:CF:84:95:58:26:A2:72:8A:33:07:57:F1:E8:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:db:04:62:b1:01:fb:2b:30:93:55:d0:00:d2:c5:8f:89:2a:
fe:d7:90:a1:e5:ed:9a:9d:d4:79:49:31:04:e2:a8:9b:c4:e4:
37:d5:20:35:00:a5:8a:f5:1d:93:15:7d:dd:55:dd:8d:06:48:
b7:bb:12:47:9c:e1:d8:d7:42:eb:c1:37:88:b1:c9:b2:be:60:
4b:2e:eb:07:e7:70:aa:2b:5b:4b:ee:19:83:30:53:0f:60:69:
0e:00:3b:5d:69:64:18:6f:29:7b:1e:8d:a5:22:40:f1:cc:db:
62:3a:8b:58:04:bd:d5:90:b9:05:49:75:f6:50:b9:ab:26:d2:
c3:3d:c5:dc:06:f1:73:cf:cf:86:10:80:43:1f:17:3f:48:ae:
eb:46:69:55:b1:ac:27:df:43:71:fc:62:b3:e2:3b:89:9f:99:
11:b5:48:f8:9b:72:07:38:56:eb:fa:46:53:4e:b6:46:8c:09:
f3:cc:51:9a:df:08:7c:c8:c9:08:82:2d:c9:b4:82:0b:11:65:
00:b3:e6:bb:8a:67:80:a9:80:53:7c:f2:57:36:34:75:87:aa:
e2:bd:28:74:e6:0d:e9:24:3c:58:25:2f:d1:a4:7d:56:7f:93:
4e:c2:c7:cb:71:92:a0:03:59:e3:a4:c1:5a:1c:b2:00:5e:b6:
71:fc:0c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:40:17 2026 by rpki-client