
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft
File: JQTp-AqYQrVKSSacwvSxrCtuhUw.mft (raw, json)
Hash identifier: xj3QI1saffpEKgbPZ2R6G5PZPFQ2naBHMvRvIDOwYHI=
Subject key identifier: 35:AA:64:70:99:5E:71:FD:CF:0A:61:6B:D9:A9:18:A2:FD:D6:50:05
Authority key identifier: 25:04:E9:F8:0A:98:42:B5:4A:49:26:9C:C2:F4:B1:AC:2B:6E:85:4C
Certificate issuer: /CN=A9129B9E/serialNumber=2504E9F80A9842B54A49269CC2F4B1AC2B6E854C
Certificate serial: 10F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft
Manifest number: 10EF
Signing time: Tue 24 Mar 2026 17:10:26 +0000
Manifest this update: Tue 24 Mar 2026 17:10:26 +0000
Manifest next update: Tue 31 Mar 2026 17:10:26 +0000
Files and hashes: 1: JQTp-AqYQrVKSSacwvSxrCtuhUw.crl (hash: hRTV4eSDKEEHK/Xonnge7aRtKSL9S0T6tQwPVVCQxwM=)
2: B70383D6385411E9A0023656C4F9AE02.roa (hash: nO9q5TdEL+njfhz6y32FkIAcb7ddj0MbI0cgcnBXBes=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.crl
rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 17:10:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4345 (0x10f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129B9E, serialNumber=2504E9F80A9842B54A49269CC2F4B1AC2B6E854C
Validity
Not Before: Mar 24 17:10:26 2026 GMT
Not After : Mar 31 17:10:26 2026 GMT
Subject: CN=69c2c582-3fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8b:54:2a:c4:b5:b9:e6:33:18:12:1b:61:3b:
0f:61:89:ca:22:d2:48:a5:c4:e4:5a:b6:a9:a5:52:
8e:b6:90:8b:2d:f5:ca:95:55:ff:fb:a9:10:ba:46:
6c:68:3e:a8:a9:0b:77:03:a2:bf:77:28:92:a0:83:
60:b1:b4:c9:2f:98:6c:ac:50:a5:ef:9a:05:13:8f:
20:4f:ab:55:02:dc:49:a4:9d:8c:da:ad:09:4d:a8:
af:3a:e9:0b:69:e9:7e:bf:1a:f0:9c:53:0b:38:82:
a7:46:b6:21:27:df:6d:57:c9:e5:be:d4:3c:03:23:
4b:ff:28:1e:03:7f:a1:06:30:fc:4e:85:8d:de:ac:
f3:d4:08:6c:81:5b:8e:1b:d5:ce:cb:93:62:76:b7:
23:5c:c0:d1:29:7d:14:74:df:3f:a6:9e:12:97:5c:
45:62:90:b9:a7:0b:3e:f5:ff:f2:2a:b0:93:65:26:
bb:60:df:22:d0:33:b1:9f:ad:cf:f9:b4:61:52:4a:
ca:9b:0a:85:f8:0a:e0:70:81:06:5b:16:b8:a5:ac:
be:9b:6e:32:0e:00:5d:09:6e:a2:29:81:5e:ff:c9:
73:e8:90:db:47:56:a7:47:ea:ca:b3:db:8f:2e:31:
83:dd:27:b9:70:fc:76:cd:7d:44:2b:20:13:e4:86:
f0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AA:64:70:99:5E:71:FD:CF:0A:61:6B:D9:A9:18:A2:FD:D6:50:05
X509v3 Authority Key Identifier:
keyid:25:04:E9:F8:0A:98:42:B5:4A:49:26:9C:C2:F4:B1:AC:2B:6E:85:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:75:6b:90:30:d8:3a:42:04:84:bc:79:34:a4:39:5a:7e:2f:
a0:9a:09:68:40:3d:3b:98:be:e8:a5:aa:fe:8f:f2:d5:12:92:
65:0a:5c:57:6f:1a:e1:c3:18:09:9c:8b:aa:0c:c4:09:f7:b2:
2f:e8:f1:17:8d:40:f7:fb:dd:12:ad:60:c8:ec:19:d8:a3:88:
72:f1:52:1f:ad:81:81:9e:0b:5c:93:c2:c8:ed:14:71:7e:8f:
e5:2a:0a:85:8b:d7:52:1c:c9:59:88:29:d4:6b:00:93:2d:0f:
e9:ae:f3:ca:0a:f8:e0:7a:f2:1e:c4:1a:53:9f:a0:70:5c:33:
07:3c:d7:bc:85:ca:2f:44:d4:7a:2f:32:4c:bf:89:51:87:0a:
48:42:67:d6:0b:a1:f3:64:09:38:c0:e5:a7:f8:4c:29:e4:0c:
ca:e3:0c:d8:fb:c1:1b:9c:f7:41:b3:f1:a7:e3:65:6a:00:7f:
12:98:49:b4:c3:4b:a5:e0:bb:55:dd:2f:c0:bd:a1:6d:31:c3:
c5:0b:b3:2f:fe:99:20:92:c9:58:ed:e6:2e:53:dc:5b:09:6e:
2f:47:70:dc:32:16:76:fd:67:2e:04:e3:64:75:69:08:4a:9e:
0c:71:75:24:af:6a:01:21:7d:4a:49:d7:20:9d:37:94:2b:f9:
e4:49:4a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:48:55 2026 by rpki-client