
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft
File: J8wSkYRVB6yvwoe3f-lP6lPdycI.mft (raw, json)
Hash identifier: Xl2QoxoVYA5gZtn2PCJSbrg7EUUZ/rjiHZgs5d5NQVM=
Subject key identifier: EE:3A:DE:CA:C0:78:DD:1B:AD:E5:F4:4D:73:1A:A9:0D:2C:F4:99:D0
Authority key identifier: 27:CC:12:91:84:55:07:AC:AF:C2:87:B7:7F:E9:4F:EA:53:DD:C9:C2
Certificate issuer: /CN=A9134CF6/serialNumber=27CC1291845507ACAFC287B77FE94FEA53DDC9C2
Certificate serial: 0CD6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft
Manifest number: 0CC5
Signing time: Thu 26 Mar 2026 18:20:34 +0000
Manifest this update: Thu 26 Mar 2026 18:20:34 +0000
Manifest next update: Thu 02 Apr 2026 18:20:34 +0000
Files and hashes: 1: J8wSkYRVB6yvwoe3f-lP6lPdycI.crl (hash: HXupG4WFyvU1VX3RzXlMxlPb5rqW/qv6V8A8/fl3o9o=)
2: 4A6A598EDB1311EB9B223B40C4F9AE02.roa (hash: g66ApfZFK5/BwJYxiIawl59WPLIsVlwdY8bAYaAobMU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.crl
rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 18:20:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3286 (0xcd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134CF6, serialNumber=27CC1291845507ACAFC287B77FE94FEA53DDC9C2
Validity
Not Before: Mar 26 18:20:34 2026 GMT
Not After : Apr 2 18:20:34 2026 GMT
Subject: CN=69c578f2-29db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cd:72:d9:8f:70:db:9f:5c:64:87:2e:47:76:
ec:8f:07:35:e3:64:1e:3b:39:7a:7d:f2:6a:59:1e:
c5:c1:f1:72:d0:aa:04:75:8c:a4:84:8a:d3:d6:22:
c5:1f:a6:d7:2c:60:9a:0e:a4:99:5d:03:fd:ba:06:
49:6b:d2:64:bf:5c:1f:c3:82:c0:a6:1f:48:48:ac:
7e:cf:f7:8d:23:d4:92:bf:6c:23:e8:65:ca:4f:6f:
b8:db:73:38:31:34:50:0b:74:ad:d3:12:80:43:9c:
d6:79:a3:07:af:cb:ce:38:c0:75:50:21:e7:c5:a7:
eb:07:71:f2:4c:5f:a3:74:82:d7:de:65:5d:19:65:
af:46:0f:c6:7f:7d:6e:27:f9:ba:18:2f:e2:01:52:
30:ff:69:e3:b0:e3:b3:ed:45:89:b6:f5:dc:b9:d7:
5b:34:ad:90:90:80:27:a3:bd:9d:b8:51:a8:4b:f4:
fd:97:55:f1:86:60:3e:d5:13:a7:70:3e:9e:e9:fe:
63:8a:ac:55:6b:23:a3:f9:96:35:72:9f:60:5e:08:
ad:54:3e:c1:aa:ea:c6:58:e7:85:11:3a:43:61:23:
f2:07:69:b6:b8:5b:ac:c4:0c:ff:17:0f:ac:e8:96:
75:02:3d:76:cb:ef:e1:0c:7c:96:ed:c0:80:41:87:
0e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:3A:DE:CA:C0:78:DD:1B:AD:E5:F4:4D:73:1A:A9:0D:2C:F4:99:D0
X509v3 Authority Key Identifier:
keyid:27:CC:12:91:84:55:07:AC:AF:C2:87:B7:7F:E9:4F:EA:53:DD:C9:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:55:98:58:d2:d1:0c:e0:82:35:89:55:e4:19:28:5b:66:c3:
22:a9:f2:86:09:3e:30:88:d3:12:85:47:4c:7b:65:e9:46:9d:
23:2d:63:9b:f6:06:76:c7:c4:f0:71:ce:27:ec:e3:d1:ee:c8:
ca:b0:2a:6c:c0:51:ca:4d:89:06:bd:3e:6f:67:24:9b:1d:8c:
60:76:06:f0:c5:10:38:21:59:f9:fa:19:45:74:67:6b:9c:64:
d6:bb:84:4b:e0:26:2d:d8:3b:2e:c9:b7:e3:8e:3e:82:70:c5:
f1:2b:71:f0:51:43:78:4b:cb:ee:3d:28:4f:91:b3:98:5b:78:
ab:2f:bf:3b:c8:d5:31:45:2b:b4:73:d8:79:e8:29:c9:d7:83:
55:f9:81:a6:30:b7:9c:76:0d:7b:a4:16:70:99:e4:42:2f:3b:
f1:ad:49:f4:ed:e7:55:7a:ea:9c:2d:a0:d5:0b:7a:68:59:5b:
04:f7:f8:80:ca:4e:b0:af:30:67:70:95:54:20:15:c0:5e:d6:
14:de:1a:ca:66:09:dc:2a:52:99:e9:b8:4c:dd:45:18:f1:14:
b1:dd:01:35:12:41:e3:19:95:7e:94:a8:bc:80:2a:b7:a7:3c:
de:ec:b3:bf:b9:1c:0a:c6:7a:69:44:54:a1:14:ed:12:a4:1a:
fd:6c:b4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:14:19 2026 by rpki-client