
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft
File: jDzLT_uJGJxu9bNN_aq-GAalIYo.mft (raw, json)
Hash identifier: o5E1SZNCoS3WL2RFd9jX3CIpXGK84JKxVWtAI4mOys8=
Subject key identifier: AA:6B:9F:DE:80:C9:10:7E:6E:F2:10:86:CA:51:CD:DD:E1:EC:96:EB
Authority key identifier: 8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A
Certificate issuer: /CN=A9182502/serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A
Certificate serial: 0B55
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft
Manifest number: 0AE2
Signing time: Tue 10 Mar 2026 19:12:34 +0000
Manifest this update: Tue 10 Mar 2026 19:12:34 +0000
Manifest next update: Tue 17 Mar 2026 19:12:34 +0000
Files and hashes: 1: jDzLT_uJGJxu9bNN_aq-GAalIYo.crl (hash: 4Cjr6gSL3Gxb2zRqatPNy0kLsDf8lhYhVEo1dEQqGsI=)
2: 0A5773F6BBBC11ECB2E7FF46C4F9AE02.roa (hash: NMa7UpL5w1Txgsqxfm+5UqMg/zQgfsv4FmRfVL5Sn+c=)
3: 0CB23E10AB4F11EC85BF147CC4F9AE02.roa (hash: A7d/aeiJtUu4K+fswUeowBZEDmHgn1F1Svvc5b1xWTc=)
4: 0D8C94BAAB2811ECB3CF9363C4F9AE02.roa (hash: KY96V7nPX5oq3FzsE82d+7qiOhZ/q030YiLdCFM2iGI=)
5: F7B8727E41CA11EC9262BD80C4F9AE02.roa (hash: 7FNm1lP1Pe3hdsBxuVhe1eOrgDF7OuaVieb5lKlg9LI=)
6: 0044F6405A4211EBA729CB56C4F9AE02.roa (hash: b9jxPZOZDnRvzE7CGYRtx0ipIG0fk5b1zujNyCQ0yI0=)
7: DC512D0473CD11EA8BE69127C4F9AE02.roa (hash: Xmz75nyzzXffCP8ozi4dDJ7X2fT2ShFNR8iyCQqoj9w=)
8: AAB43BD6247F11EE9CEA495CC4F9AE02.roa (hash: SfpOZZZqAF6xymFu+bkiJdRZTKRwkZseOTXppXvJjio=)
9: F3ABC6EAE91A11EF877A535AC4F9AE02.roa (hash: HwFnU0dCqCQrz33mSD+K9rw/y8Y1TbFJLnxiPnPYqwc=)
10: F4FCC41E648311EC88370386C4F9AE02.roa (hash: 2wQvvhttQQFvtvmxnPq6NXZn3bUMgE5kswhBwNt4I+c=)
11: E95058049A8C11F096D9A13AC4F9AE02.roa (hash: Al2kZd3bm7sIrq8HRQFPgDS+45qqXFnhmN7j5M3C30g=)
12: 26400C8EC97611EFB28BD766C4F9AE02.roa (hash: chO6OG4ylU6FeQD8EZ6ojrHcYUct9WTBlxUERjOvSus=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl
rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 17 Mar 2026 19:12:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2901 (0xb55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182502, serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A
Validity
Not Before: Mar 10 19:12:34 2026 GMT
Not After : Mar 17 19:12:34 2026 GMT
Subject: CN=69b06d22-3c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a5:45:80:f4:37:e6:2a:52:c2:99:b5:cb:46:
d5:6c:cd:d9:b5:fc:64:97:d9:c4:be:17:a8:29:cc:
87:77:54:75:fb:41:e5:6f:e3:14:9c:6d:55:8b:4d:
a6:88:eb:02:a2:0d:cc:04:57:f2:cd:2f:26:f3:3d:
fd:2f:71:62:e9:4f:86:67:2a:a6:f7:16:36:b5:f6:
aa:df:cc:3b:0d:49:f3:a2:9c:da:94:80:b9:bf:68:
14:cf:6b:4a:85:1a:70:79:85:7a:7c:d8:c2:56:29:
57:4f:85:c1:e9:8d:d0:ec:0f:ea:e5:b6:2c:54:4c:
e0:94:10:e7:ad:03:e0:09:d0:e1:90:87:6a:bf:17:
2b:7f:28:21:f5:b7:a0:ff:0d:dd:fe:c5:e7:29:fc:
bf:0f:69:de:bc:87:15:e0:6a:57:c5:51:b3:07:93:
fa:05:38:38:c9:af:d4:a4:56:c6:61:4f:d3:f0:df:
50:1e:51:8e:1f:b2:94:29:c5:85:f1:91:78:a8:b5:
b7:28:31:7d:18:03:bd:0d:8c:26:fd:33:8b:ad:a9:
f4:97:ad:16:51:1b:cc:0f:49:83:56:0c:54:21:66:
3b:9f:f0:99:fa:8d:9c:eb:29:38:2d:dc:f0:89:df:
c1:e2:96:c4:69:e4:36:16:82:c2:ce:65:e5:e4:2a:
45:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:6B:9F:DE:80:C9:10:7E:6E:F2:10:86:CA:51:CD:DD:E1:EC:96:EB
X509v3 Authority Key Identifier:
keyid:8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:d9:e0:18:b4:4b:4c:1f:ec:5e:f4:67:c7:67:b4:34:2e:45:
2e:3c:38:35:b4:3b:f0:5d:c8:ab:f8:e7:df:a2:0b:58:76:b8:
b1:15:7b:b6:9c:e0:fd:bd:5a:f1:c9:9c:5e:c1:bc:a3:18:72:
96:2c:cf:9a:a5:65:0d:06:f2:5a:86:17:87:23:a1:c8:30:51:
29:cb:28:62:c2:f6:c9:91:8d:36:17:34:ca:a0:13:92:d6:0b:
2b:81:45:7b:f4:79:0c:61:0f:07:47:ba:59:94:4a:d8:3a:53:
06:de:19:99:e6:fd:c4:cc:ca:f7:ed:4b:5f:07:59:7e:d7:2a:
ac:a6:8e:46:b1:d1:74:bc:92:64:2a:a0:89:88:1f:0e:09:3e:
ab:b9:8a:66:25:ab:36:ff:ea:27:45:ae:7d:3c:69:3b:46:6c:
1a:d4:24:f1:3d:4c:0b:90:a3:d3:2e:99:9a:68:c4:0e:38:e0:
ff:75:df:d7:1e:60:f2:de:07:79:47:e2:9a:83:e1:84:f1:81:
d1:76:62:d0:9c:1e:26:cf:56:27:32:d8:16:fa:ed:39:d0:8f:
18:61:cd:97:11:52:a0:db:78:7d:01:ac:1c:83:a7:ac:d9:e4:
a3:f8:58:73:ef:28:4d:01:5b:80:52:4c:74:a8:0d:12:0c:0b:
09:e5:58:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 15:12:06 2026 by rpki-client