
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.mft
File: jyvUwSY28AWbQI0HFq8yyPVAaaU.mft (raw, json)
Hash identifier: 1cqTAJclRuDTcUz63xHTAEgENMZVorq1rp22zcIJlfw=
Subject key identifier: 6B:68:FA:9A:F3:81:32:F8:19:D2:CE:5F:BF:D6:B7:21:B1:FE:A7:90
Authority key identifier: 8F:2B:D4:C1:26:36:F0:05:9B:40:8D:07:16:AF:32:C8:F5:40:69:A5
Certificate issuer: /CN=A9120AC1/serialNumber=8F2BD4C12636F0059B408D0716AF32C8F54069A5
Certificate serial: 05D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvUwSY28AWbQI0HFq8yyPVAaaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.mft
Manifest number: 0596
Signing time: Thu 23 Jul 2026 00:02:10 +0000
Manifest this update: Thu 23 Jul 2026 00:02:10 +0000
Manifest next update: Thu 30 Jul 2026 00:02:10 +0000
Files and hashes: 1: jyvUwSY28AWbQI0HFq8yyPVAaaU.crl (hash: y7gL1AFjmi83/TRff+dzsHWirotSR2Kowv76MpfJBuY=)
2: 8BE9B1A03C8B11EC8947D982C4F9AE02.roa (hash: X2fqbOwNjfPVvOnATgu0zvqwWCe0l0CVElKSGtxJl4w=)
3: 17A5A8400EC811F088512D41C4F9AE02.roa (hash: mqSnjtVQnDVvl2krW/vPBOGwW2QAUKPwPw1sF8LPF0A=)
4: EDB1F68E3C8811EC889B9D78C4F9AE02.roa (hash: HmmgtKcEaWNEx652ZmG3M6u6VFLBTA0tqlJh4wWcvjo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.crl
rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvUwSY28AWbQI0HFq8yyPVAaaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1488 (0x5d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120AC1, serialNumber=8F2BD4C12636F0059B408D0716AF32C8F54069A5
Validity
Not Before: Jul 23 00:02:10 2026 GMT
Not After : Jul 30 00:02:10 2026 GMT
Subject: CN=6a615a02-d8b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:45:9e:2f:c0:54:8e:e7:9e:a5:6e:b3:e8:f0:
02:ae:f1:c1:37:8d:82:d5:cf:54:19:a1:52:09:63:
a9:44:54:7a:34:8c:fb:5b:45:16:76:9c:c0:8a:10:
85:d3:24:57:b6:a5:13:c1:2d:3c:74:4d:5f:04:ce:
aa:e1:ef:9c:35:ef:fa:27:a5:35:82:03:e5:e7:3a:
63:df:e4:e3:df:4a:b7:e2:59:8f:7c:3f:d8:0f:a3:
8f:de:f5:93:11:73:c0:39:c6:07:c0:80:b2:f8:0c:
a0:f8:15:da:84:4e:d1:cc:7f:0f:a3:3d:5c:6b:91:
42:84:8c:1f:cf:cb:b9:e9:dc:e4:5a:5d:75:24:a8:
1b:1c:3e:39:48:47:be:3a:25:67:51:9d:6c:49:d3:
b0:34:f3:3d:6b:4d:e0:20:bb:ce:6e:c4:61:4f:2c:
4c:78:72:36:85:d6:59:05:d9:4f:ed:59:ac:87:26:
45:a7:f9:ee:35:63:a2:3d:4a:06:42:fd:b1:80:32:
64:9b:e1:41:b6:ec:f5:6f:a2:23:40:fe:37:40:0a:
7c:c4:56:7e:8a:76:c3:3f:f4:52:84:aa:03:a2:57:
bd:d4:a1:09:5f:3b:19:61:fd:36:ee:2b:3f:22:ea:
08:8a:73:d4:2f:60:e3:42:14:18:e0:60:70:f9:0e:
54:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:68:FA:9A:F3:81:32:F8:19:D2:CE:5F:BF:D6:B7:21:B1:FE:A7:90
X509v3 Authority Key Identifier:
keyid:8F:2B:D4:C1:26:36:F0:05:9B:40:8D:07:16:AF:32:C8:F5:40:69:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvUwSY28AWbQI0HFq8yyPVAaaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:0c:9c:19:5a:73:7c:1d:99:e5:69:8a:93:99:47:11:68:62:
8b:c9:f3:d1:91:e3:05:39:0a:13:f1:11:6e:68:56:69:4c:d4:
4f:6a:f8:40:a5:4a:1f:6d:31:e7:24:73:b1:7b:bd:d4:d1:84:
6d:bc:b4:00:32:12:c9:e8:a5:98:6a:e6:98:20:05:c2:37:dc:
e9:a0:1a:d0:04:b1:6d:5f:81:2a:7b:a2:79:b4:3b:43:f4:bd:
c7:05:c4:ff:43:b7:24:2b:5a:90:c1:22:b5:f6:79:a4:cf:3c:
ab:61:08:59:85:b9:40:02:02:2d:50:9b:73:4f:28:ae:72:53:
81:df:3a:b3:76:ca:13:0d:38:62:a4:6a:a1:e4:4f:d7:ee:73:
3b:ae:bc:49:78:b2:93:7b:3a:35:94:7d:dd:c5:5b:5a:ce:d8:
b0:f6:9a:7b:e8:03:4a:10:24:60:88:1b:ec:98:0d:b4:55:e4:
e7:0a:8c:da:fc:a0:8c:4d:13:27:fa:e4:ab:ff:af:a7:90:96:
9d:f7:17:80:aa:87:ab:82:0e:db:70:81:e3:ad:a4:b1:52:45:
a5:7f:4f:e4:e0:f0:87:89:55:55:31:45:64:d7:00:03:bf:e7:
2f:8e:83:b6:05:8f:73:6c:19:f2:07:19:77:99:4e:2e:e6:79:
91:02:ee:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:46:20 2026 by rpki-client