
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft
File: jZIwmM1n9tG_JM--LD3KC2Zau4w.mft (raw, json)
Hash identifier: ad3mCb2ySF9iU8Yx/+0LEl1H2SaDeJW6AJxUtJoPJXY=
Subject key identifier: 1C:B5:3E:AB:D4:E0:3D:4C:1A:D5:29:3B:AC:4C:B1:5E:BF:1F:A7:CC
Authority key identifier: 8D:92:30:98:CD:67:F6:D1:BF:24:CF:BE:2C:3D:CA:0B:66:5A:BB:8C
Certificate issuer: /CN=A9148B17/serialNumber=8D923098CD67F6D1BF24CFBE2C3DCA0B665ABB8C
Certificate serial: 01FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft
Manifest number: 01F0
Signing time: Wed 13 May 2026 03:28:49 +0000
Manifest this update: Wed 13 May 2026 03:28:49 +0000
Manifest next update: Wed 20 May 2026 03:28:49 +0000
Files and hashes: 1: jZIwmM1n9tG_JM--LD3KC2Zau4w.crl (hash: e0VCbDCtolhlBkuumHTU578NUuNteWAqchnmSnnfmd8=)
2: 4495F306772E11EEB7DE544FC4F9AE02.roa (hash: QMRLPWLbyJt3Y3sf3W4kTGlpvnSbMzh/1dBw79mmT2Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.crl
rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 03:28:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 507 (0x1fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148B17, serialNumber=8D923098CD67F6D1BF24CFBE2C3DCA0B665ABB8C
Validity
Not Before: May 13 03:28:49 2026 GMT
Not After : May 20 03:28:49 2026 GMT
Subject: CN=6a03eff1-5b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c0:e3:08:71:d4:82:7c:4b:dd:82:69:14:8f:
ed:02:1e:2f:62:17:ec:0b:3c:63:64:cb:bd:61:09:
e8:65:58:aa:62:1a:96:74:0b:11:1f:65:77:c8:1e:
db:77:31:4d:1c:d8:92:7b:5c:a9:48:cb:f7:c1:0e:
f0:24:40:00:18:2b:09:96:36:0e:a1:33:b4:5c:c2:
f8:1e:15:5e:05:99:45:da:72:57:3f:99:6e:96:37:
32:ec:60:57:93:8e:8c:76:ad:eb:9c:22:2d:fa:d2:
c7:cd:c5:ff:21:d8:7f:d5:e5:fc:cd:88:f4:14:08:
63:7f:9c:32:69:26:2e:91:3e:e1:ff:e7:2e:98:b1:
7a:d8:58:b4:e4:f1:8b:76:ef:e9:a0:26:44:e0:27:
48:20:72:df:c4:73:92:04:45:3f:27:71:d8:47:7b:
84:f8:0e:a4:88:f0:b9:7a:14:09:6e:45:4f:6f:f1:
bf:cc:83:f4:57:74:bb:c5:8c:44:f3:75:e3:10:d1:
29:73:32:eb:14:65:e5:1b:51:ed:a4:24:b8:48:c0:
a4:79:0f:16:09:cf:57:97:9f:f5:7b:8b:c3:be:64:
e5:16:d8:10:e6:5e:9b:eb:90:92:73:3f:1e:b3:b8:
69:5b:d1:61:1e:d3:a9:37:d9:88:d9:30:76:c6:f5:
eb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B5:3E:AB:D4:E0:3D:4C:1A:D5:29:3B:AC:4C:B1:5E:BF:1F:A7:CC
X509v3 Authority Key Identifier:
keyid:8D:92:30:98:CD:67:F6:D1:BF:24:CF:BE:2C:3D:CA:0B:66:5A:BB:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:3a:00:1d:8c:ae:ec:92:24:fe:f4:4b:1a:f3:db:e0:12:96:
22:43:d0:a1:c8:0b:18:95:21:97:1b:48:68:47:b4:8d:9b:f2:
22:36:37:41:0b:f8:4b:07:7a:8d:6b:6a:39:97:0b:a5:cf:12:
23:8a:bb:27:c0:79:e5:a1:06:56:44:05:42:16:72:94:23:08:
a3:0d:97:e9:53:8d:ab:cc:ce:2c:36:48:1c:27:bd:31:20:29:
91:a4:dc:53:5b:c4:af:b8:03:3c:b2:a3:3a:6f:82:cb:d1:a9:
59:59:8c:bc:da:ce:64:3d:53:a4:19:60:07:97:02:08:21:66:
a9:9a:94:40:e9:28:1f:13:be:65:6a:ae:84:e6:ca:f9:d3:0e:
1e:4e:90:d9:ed:0d:c8:8c:3e:28:c3:a6:f0:c3:27:4e:61:3a:
29:ee:41:ee:99:82:7e:ad:ec:02:b8:b8:d4:a0:2f:34:25:a5:
8c:b3:34:4b:a0:b3:95:22:82:b8:2a:76:04:8b:23:9e:5e:66:
25:6e:ea:af:1a:a8:89:ad:7c:69:cf:a0:79:eb:bc:0d:9b:95:
8d:aa:24:95:4d:bd:dd:ae:54:32:ef:c3:41:e3:7e:d0:c7:f1:
21:4e:82:ba:10:86:4d:73:d2:bc:23:a6:8c:01:8b:79:8b:fd:
19:3c:83:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:02:49 2026 by rpki-client