
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.mft
File: _JzDgDXfD9iyRV42dn4TAif06Hs.mft (raw, json)
Hash identifier: SdRrw0qSQk88dE6JRgczKfIZ82tyZPIXjVzgtjfIHDs=
Subject key identifier: AE:5D:CC:F0:7F:52:B4:E9:17:FC:89:66:42:2D:1B:4E:37:B0:AE:FF
Authority key identifier: FC:9C:C3:80:35:DF:0F:D8:B2:45:5E:36:76:7E:13:02:27:F4:E8:7B
Certificate issuer: /CN=A9117E49/serialNumber=FC9CC38035DF0FD8B2455E36767E130227F4E87B
Certificate serial: 181D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JzDgDXfD9iyRV42dn4TAif06Hs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.mft
Manifest number: 180A
Signing time: Tue 24 Mar 2026 16:26:46 +0000
Manifest this update: Tue 24 Mar 2026 16:26:45 +0000
Manifest next update: Tue 31 Mar 2026 16:26:45 +0000
Files and hashes: 1: _JzDgDXfD9iyRV42dn4TAif06Hs.crl (hash: +yXpAUh0bBTZsWoMZxJwLn7aPDMWjdKw3v+LK8wiU6k=)
2: 1DA0BF7C7C5911EDB5D8DA67C4F9AE02.roa (hash: QfnBq9xejz5ZwYAMH9XPFcemJYRZJ/r0BcQTGcREk70=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.crl
rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JzDgDXfD9iyRV42dn4TAif06Hs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 16:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6173 (0x181d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117E49, serialNumber=FC9CC38035DF0FD8B2455E36767E130227F4E87B
Validity
Not Before: Mar 24 16:26:45 2026 GMT
Not After : Mar 31 16:26:45 2026 GMT
Subject: CN=69c2bb46-c280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bd:02:79:d0:0d:52:3e:b5:85:84:04:24:23:
61:ab:9e:6f:45:46:e9:e5:bb:83:47:db:f6:d1:74:
c0:e9:fa:af:f4:fe:18:b4:00:22:4a:23:8e:47:bb:
95:3a:c3:29:10:9d:d1:f1:ab:33:63:bb:df:ef:47:
e5:0d:f0:94:82:4d:15:bf:a4:27:9e:2d:df:93:09:
9d:3c:b2:43:58:36:90:9c:f0:13:25:1a:16:70:6f:
4b:0a:5f:64:44:f9:71:c3:1b:e7:13:d7:13:9c:d9:
8f:a6:87:71:c2:8e:b0:3f:49:08:fb:d5:a5:f2:3f:
21:25:cb:62:b9:b3:3c:e4:89:33:69:e0:5d:f1:47:
97:06:08:86:22:cb:5b:77:18:a6:7d:98:c3:eb:62:
24:33:5b:ff:0d:68:85:42:c1:23:58:b9:2e:c9:48:
7a:dd:ab:2d:cc:f3:9e:43:ed:73:e1:43:c3:38:3d:
6e:6a:43:04:f2:0b:ff:60:94:23:c8:1d:21:c5:8a:
09:2e:e0:d6:77:f6:8a:3a:af:4e:8f:ce:dd:11:96:
96:9f:cd:0b:03:f3:72:c4:d2:73:26:95:9e:44:4d:
12:e1:cd:96:2b:df:a9:b8:fc:b9:54:eb:ac:de:59:
e2:3f:c7:a4:ac:64:16:36:43:95:7d:71:d6:75:23:
7e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:5D:CC:F0:7F:52:B4:E9:17:FC:89:66:42:2D:1B:4E:37:B0:AE:FF
X509v3 Authority Key Identifier:
keyid:FC:9C:C3:80:35:DF:0F:D8:B2:45:5E:36:76:7E:13:02:27:F4:E8:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JzDgDXfD9iyRV42dn4TAif06Hs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:d4:37:31:29:a6:4e:af:00:8e:f0:76:08:f3:bf:1a:1b:26:
3c:63:ef:ec:b7:f9:2b:e8:46:80:35:15:69:0f:fb:07:71:32:
5b:c7:d7:09:d8:d5:4e:4f:f4:2d:4d:0e:db:3b:9e:2e:7c:45:
7b:e2:4a:11:cf:1e:73:6a:3e:6c:aa:4f:04:35:1a:41:ea:c6:
fb:9f:38:f5:30:52:4a:18:75:1a:06:41:b7:8d:4a:b7:29:88:
06:c3:c7:98:15:b7:56:3d:51:51:44:df:cf:91:ad:8f:97:7f:
c0:3f:e4:56:89:aa:05:d0:57:3e:42:8b:1e:ec:5a:07:7d:c7:
47:1d:86:03:a4:ff:e9:01:fd:8d:85:ca:f0:e6:e8:5c:10:e9:
12:38:c4:05:b0:e9:4a:5c:ef:61:13:1d:94:c6:90:bd:bc:04:
a1:79:46:ec:59:b1:9a:97:e7:ab:6f:af:61:19:d6:17:a1:d5:
88:7a:6b:b3:40:28:2e:bf:9b:7b:32:09:ff:9c:b8:f6:b7:6f:
11:45:78:4e:bd:fb:97:e1:da:31:5c:2d:a3:76:5e:c0:ce:0b:
11:3d:95:43:ba:77:5c:f9:d3:a9:41:5b:6e:eb:75:1a:a5:dd:
9d:63:5f:42:49:32:85:d0:d1:b1:a3:84:56:91:85:28:3b:9a:
a5:33:50:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:12:51 2026 by rpki-client