
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft
File: jZIwmM1n9tG_JM--LD3KC2Zau4w.mft (raw, json)
Hash identifier: O9O/Z9S+vrZVs9ByON2kLlTgY18P1yTB7/OUdiL3Yf8=
Subject key identifier: D3:46:E4:54:A1:C3:17:F0:1C:E6:E1:B3:35:6C:EA:AC:82:83:78:1D
Authority key identifier: 8D:92:30:98:CD:67:F6:D1:BF:24:CF:BE:2C:3D:CA:0B:66:5A:BB:8C
Certificate issuer: /CN=A9148B17/serialNumber=8D923098CD67F6D1BF24CFBE2C3DCA0B665ABB8C
Certificate serial: 021E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft
Manifest number: 0213
Signing time: Thu 23 Jul 2026 04:19:27 +0000
Manifest this update: Thu 23 Jul 2026 04:19:26 +0000
Manifest next update: Thu 30 Jul 2026 04:19:26 +0000
Files and hashes: 1: jZIwmM1n9tG_JM--LD3KC2Zau4w.crl (hash: b21LqLshrF7PDkoouOnbK62m1uV44lG1EDXg/XvKTBg=)
2: 4495F306772E11EEB7DE544FC4F9AE02.roa (hash: QMRLPWLbyJt3Y3sf3W4kTGlpvnSbMzh/1dBw79mmT2Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.crl
rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:19:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 542 (0x21e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148B17, serialNumber=8D923098CD67F6D1BF24CFBE2C3DCA0B665ABB8C
Validity
Not Before: Jul 23 04:19:26 2026 GMT
Not After : Jul 30 04:19:26 2026 GMT
Subject: CN=6a61964f-a579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d5:c8:57:23:99:27:12:fa:89:91:63:cb:e1:
56:81:ec:64:b8:43:34:ab:27:ed:d9:4e:db:8f:12:
e1:12:50:c4:8f:4c:8f:42:06:b3:0b:4b:aa:01:4c:
cf:72:d1:c3:d2:fd:31:0d:54:33:99:40:15:5c:52:
47:5e:c7:a7:bb:f7:04:0f:55:76:73:dc:a8:46:38:
f7:8a:28:ba:3b:e8:b4:d3:8b:4a:bc:4a:00:9e:ae:
d7:c0:01:39:64:b9:8d:f6:a6:8d:f0:3d:1a:01:8c:
df:16:f4:74:77:10:7d:3f:36:29:c1:90:bf:50:44:
c3:3a:8f:a5:12:4a:0a:99:9c:fb:22:57:30:6b:3e:
a5:cf:7a:c1:2a:a1:00:21:c2:ca:3c:af:4b:59:f0:
c3:bb:dc:3b:f0:66:c8:fc:79:71:63:01:86:a4:d3:
ec:ae:8f:b8:53:40:74:73:86:31:41:08:ac:be:13:
c1:ae:99:b7:32:45:f5:7c:f2:de:25:0c:c3:19:a7:
09:5f:ab:ce:5f:70:72:06:5c:b0:5b:00:f6:7d:90:
de:65:69:ef:9e:1e:d2:d6:53:64:52:da:fe:ad:31:
9c:fc:75:95:b3:b2:15:3b:92:b8:3c:c2:7e:a0:f9:
e2:c9:80:95:1c:a2:9d:07:0f:d5:13:10:7b:d9:97:
3e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:46:E4:54:A1:C3:17:F0:1C:E6:E1:B3:35:6C:EA:AC:82:83:78:1D
X509v3 Authority Key Identifier:
keyid:8D:92:30:98:CD:67:F6:D1:BF:24:CF:BE:2C:3D:CA:0B:66:5A:BB:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:48:dd:e0:19:18:7d:39:f0:74:ce:30:b5:26:bb:62:ad:29:
ea:db:31:69:5d:b2:aa:67:f5:45:75:cd:92:b6:1f:62:5a:48:
ff:0b:d0:96:85:f8:31:94:7a:87:38:0a:94:fd:e5:19:03:cb:
e8:e8:a4:3d:e4:53:ba:2d:11:74:63:91:8c:b3:e4:4d:68:9e:
b2:60:c3:f3:77:7b:fa:b4:35:a5:25:63:30:af:a8:8a:93:d2:
38:55:eb:6c:95:5d:f3:4d:9d:1a:f0:05:2d:e5:08:06:12:86:
cf:bf:fd:ad:0c:8e:80:93:aa:81:77:db:b4:22:b5:01:e4:fa:
16:34:77:ce:0a:03:9e:c3:19:7b:0a:60:e3:ad:2d:85:5d:38:
47:43:a6:89:19:0c:d1:0e:07:fd:c9:17:80:fa:dd:2f:ca:77:
14:d7:72:ed:d7:24:46:cc:22:d9:64:e3:ef:c8:01:d7:23:60:
fa:4a:68:cc:38:40:09:14:02:31:b6:e7:51:31:18:77:5a:67:
63:a4:59:7f:ee:84:d5:6b:7c:ba:b2:6f:d6:6c:31:f8:4f:1f:
77:d7:4a:2c:67:ed:d1:80:44:32:eb:44:93:75:b0:55:5d:28:
58:ff:4b:19:58:f1:de:1c:e6:e7:78:3a:8a:85:40:fb:12:49:
03:cf:63:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:50:24 2026 by rpki-client