
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.mft
File: jyvUwSY28AWbQI0HFq8yyPVAaaU.mft (raw, json)
Hash identifier: ESSauetcf9DqDoSPnXs8rIJsjDOPYBCnM5GKU6+d/u8=
Subject key identifier: AA:20:D9:27:80:29:92:A2:EB:69:00:86:B0:E1:49:91:CA:30:FC:47
Authority key identifier: 8F:2B:D4:C1:26:36:F0:05:9B:40:8D:07:16:AF:32:C8:F5:40:69:A5
Certificate issuer: /CN=A9120AC1/serialNumber=8F2BD4C12636F0059B408D0716AF32C8F54069A5
Certificate serial: 05F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvUwSY28AWbQI0HFq8yyPVAaaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.mft
Manifest number: 05B6
Signing time: Tue 22 Sep 2026 22:50:08 +0000
Manifest this update: Tue 22 Sep 2026 22:50:07 +0000
Manifest next update: Tue 29 Sep 2026 22:50:07 +0000
Files and hashes: 1: jyvUwSY28AWbQI0HFq8yyPVAaaU.crl (hash: 0JitL14gi8h6qdOReI4cOlRmsoHE6/FIb+Lyfi8tYjM=)
2: 8BE9B1A03C8B11EC8947D982C4F9AE02.roa (hash: X2fqbOwNjfPVvOnATgu0zvqwWCe0l0CVElKSGtxJl4w=)
3: 17A5A8400EC811F088512D41C4F9AE02.roa (hash: mqSnjtVQnDVvl2krW/vPBOGwW2QAUKPwPw1sF8LPF0A=)
4: EDB1F68E3C8811EC889B9D78C4F9AE02.roa (hash: HmmgtKcEaWNEx652ZmG3M6u6VFLBTA0tqlJh4wWcvjo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.crl
rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvUwSY28AWbQI0HFq8yyPVAaaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 22:50:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1520 (0x5f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120AC1, serialNumber=8F2BD4C12636F0059B408D0716AF32C8F54069A5
Validity
Not Before: Sep 22 22:50:07 2026 GMT
Not After : Sep 29 22:50:07 2026 GMT
Subject: CN=6ab30620-6d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e9:40:ec:79:9c:94:e7:2a:c0:38:0e:14:f1:
54:4d:19:3c:45:55:ae:cc:c6:63:c7:a7:0b:4c:67:
31:af:f7:51:36:a9:5d:c7:78:ae:b0:23:0a:c4:78:
af:af:05:6a:0f:1b:d9:ba:f9:90:38:77:94:49:7c:
9e:74:f6:14:e7:a0:48:8a:e9:ea:46:8f:65:40:60:
52:2b:e9:af:d2:6e:37:3b:6e:96:f7:c4:1a:1f:fc:
68:26:56:86:b6:99:84:4b:12:9b:9a:f7:6c:1a:f7:
bc:cd:04:f1:46:35:a8:20:0c:1f:56:a6:66:b6:dd:
7b:24:eb:14:a6:78:27:47:e0:9d:5e:86:97:7f:8c:
54:77:b3:07:86:bb:87:49:44:bc:ea:dd:19:78:6b:
14:99:03:e9:2f:ec:e5:d8:bb:34:f3:d6:1f:7d:84:
65:da:81:ce:06:69:2e:9c:ce:6b:ac:14:0b:e2:92:
8e:28:df:c6:3a:76:22:ad:0b:9e:88:8a:ad:6a:09:
76:49:82:c3:74:a1:d7:46:7f:72:e5:7d:43:4f:a1:
dd:75:61:5a:67:c7:23:6a:06:a7:3f:07:78:7b:a9:
e8:16:e3:bc:c4:97:f8:6d:ee:0b:af:68:62:d4:12:
05:76:40:e9:fc:3d:e3:4f:49:b7:99:8d:e1:65:5d:
56:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:20:D9:27:80:29:92:A2:EB:69:00:86:B0:E1:49:91:CA:30:FC:47
X509v3 Authority Key Identifier:
keyid:8F:2B:D4:C1:26:36:F0:05:9B:40:8D:07:16:AF:32:C8:F5:40:69:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvUwSY28AWbQI0HFq8yyPVAaaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:3b:fb:3b:60:a5:a9:0c:f6:f9:cf:cd:d3:1f:c1:5e:6d:4f:
c2:19:0b:f8:f7:b4:a4:e3:e7:57:41:e0:08:5d:91:c6:03:da:
2a:88:32:29:0d:de:ea:5f:bd:fa:e3:7b:d6:fc:8d:b4:5b:53:
9e:1b:0f:9d:9c:a2:be:56:c5:eb:24:e1:bf:13:f1:e5:47:a9:
02:ce:ba:af:13:7a:ee:dd:24:39:32:67:b1:3c:01:86:03:56:
d9:3d:45:9b:3a:17:db:8c:11:6a:e9:f2:c4:89:c2:e6:c7:cb:
30:86:44:82:6d:7c:7f:e2:06:1d:dc:cf:b3:12:75:8d:38:53:
69:30:42:c5:b2:48:de:1b:d1:23:17:33:c5:28:be:f8:08:c9:
32:99:7f:13:33:28:f9:8a:fc:38:33:0c:17:14:c8:50:58:c2:
3c:70:11:28:e3:a1:aa:4f:70:ae:21:87:3d:92:60:0c:d2:9a:
6e:17:eb:89:20:cd:cd:d7:79:ba:60:8a:bf:00:32:31:d9:cb:
e9:b8:64:bb:c5:2b:43:df:1f:82:b2:43:1a:44:a7:3a:13:34:
e0:16:b5:08:d8:7b:22:86:f3:22:19:14:66:34:ce:47:a6:26:
d1:a3:bf:5f:70:e6:1f:60:fa:44:27:a2:fb:64:4f:c0:d3:b8:
f6:ac:1f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:53:45 2026 by rpki-client