
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.mft
File: jyvUwSY28AWbQI0HFq8yyPVAaaU.mft (raw, json)
Hash identifier: bY2VP2nv+3bWsysZ+KfS/hFId8pmXSvKAOjl27mZ5YI=
Subject key identifier: A1:C1:DE:AD:2A:6F:E1:F4:F3:49:FA:AE:F7:A1:E9:52:10:0D:03:9C
Authority key identifier: 8F:2B:D4:C1:26:36:F0:05:9B:40:8D:07:16:AF:32:C8:F5:40:69:A5
Certificate issuer: /CN=A9120AC1/serialNumber=8F2BD4C12636F0059B408D0716AF32C8F54069A5
Certificate serial: 05A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvUwSY28AWbQI0HFq8yyPVAaaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.mft
Manifest number: 056A
Signing time: Tue 12 May 2026 23:28:22 +0000
Manifest this update: Tue 12 May 2026 23:28:21 +0000
Manifest next update: Tue 19 May 2026 23:28:21 +0000
Files and hashes: 1: jyvUwSY28AWbQI0HFq8yyPVAaaU.crl (hash: 0EB4nNULiiI5RA+Koy5fZCOVeMQ+Wql7mpFAW9QHRaE=)
2: 8BE9B1A03C8B11EC8947D982C4F9AE02.roa (hash: X2fqbOwNjfPVvOnATgu0zvqwWCe0l0CVElKSGtxJl4w=)
3: EDB1F68E3C8811EC889B9D78C4F9AE02.roa (hash: HmmgtKcEaWNEx652ZmG3M6u6VFLBTA0tqlJh4wWcvjo=)
4: 17A5A8400EC811F088512D41C4F9AE02.roa (hash: kAcVejf2v61m+dqDwgqkFV7Bb75fP9Efwhiqg+ESLEc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.crl
rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvUwSY28AWbQI0HFq8yyPVAaaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:28:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1443 (0x5a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120AC1, serialNumber=8F2BD4C12636F0059B408D0716AF32C8F54069A5
Validity
Not Before: May 12 23:28:21 2026 GMT
Not After : May 19 23:28:21 2026 GMT
Subject: CN=6a03b795-d54b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:74:d9:6d:78:1a:30:c5:c1:f6:b1:6b:d4:85:
0f:42:4f:f8:2e:e5:48:e7:86:0c:b4:d6:0a:8c:b9:
da:f8:2f:7b:26:b1:14:0c:04:07:86:8d:3d:8f:96:
71:dd:cc:25:d3:f9:6b:9a:3a:74:54:79:13:c1:ca:
e9:d6:ae:41:e2:a8:ac:f5:3c:97:ee:45:51:35:31:
d1:bc:3d:15:bf:f9:e3:e4:f8:1a:34:25:67:bc:56:
f3:f5:ed:6d:f5:44:4f:1f:e9:7e:be:45:61:8e:9d:
9f:1d:40:c6:25:e7:03:e4:0b:b6:42:1e:49:ee:e8:
10:8e:b4:d5:12:2f:e4:a5:83:58:4f:75:74:a4:85:
7b:37:8a:2a:26:52:7c:b7:eb:42:4d:07:a7:99:bf:
11:d9:75:75:de:54:19:0b:2d:40:10:1b:f9:c1:1d:
e8:74:17:41:30:a8:b5:98:ee:d5:9b:37:c7:c5:16:
09:4f:85:a0:99:a0:2b:22:5d:cb:a7:f6:9e:e6:fb:
31:19:c2:dc:6f:13:8a:c8:80:c5:f3:cb:72:f3:17:
7e:2b:5c:e2:6c:14:b6:a7:89:d3:b4:ce:51:46:51:
f6:eb:8c:4c:c7:b1:ac:9c:1a:05:ec:74:2d:17:50:
47:fd:34:71:f1:f8:50:98:94:7c:3b:53:4a:e4:7e:
f0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C1:DE:AD:2A:6F:E1:F4:F3:49:FA:AE:F7:A1:E9:52:10:0D:03:9C
X509v3 Authority Key Identifier:
keyid:8F:2B:D4:C1:26:36:F0:05:9B:40:8D:07:16:AF:32:C8:F5:40:69:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvUwSY28AWbQI0HFq8yyPVAaaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:02:97:6f:64:0c:71:f8:17:a4:ac:a5:49:59:4a:69:a2:b9:
29:37:d0:7f:36:45:bc:e4:40:4e:ed:84:19:7b:a9:31:81:3e:
d0:b1:1d:3f:12:18:56:24:71:10:9a:ff:50:a4:2a:46:23:04:
a6:fa:90:00:70:36:c0:a9:c6:0e:d4:c8:95:d9:9a:a2:51:e6:
50:1a:f6:84:4e:5e:d7:fc:45:00:fd:8d:31:5a:b8:36:33:d4:
73:27:ad:49:c4:a4:be:79:f5:db:69:da:70:90:3a:df:77:da:
eb:a5:b5:59:30:ff:70:3f:06:04:44:a1:8a:44:59:6e:c8:d0:
a9:bb:c3:e4:53:6a:13:fd:56:f6:52:51:1c:d4:a0:0b:1c:1a:
6e:8f:fc:b8:74:b0:44:dd:17:77:d7:7a:a9:7f:b1:3d:78:57:
39:5a:61:0b:6b:84:6a:54:92:63:c6:d9:2d:3f:e2:14:c9:08:
da:bb:3c:4c:55:9c:30:7b:63:4f:49:f1:30:a4:4f:0d:56:bb:
c0:c6:6f:23:23:49:0a:a3:6a:ac:77:64:27:cf:a4:21:00:3b:
94:f2:0d:ef:0f:98:1d:7d:0f:61:d2:f2:42:89:fc:8a:17:a2:
f0:11:ed:06:80:65:65:8b:9f:65:ad:65:0b:96:ce:7c:1e:65:
a9:6c:be:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:45:49 2026 by rpki-client