
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/JLD8GMGnr_U_g8qyYGJTXSzF7m8.mft
File: JLD8GMGnr_U_g8qyYGJTXSzF7m8.mft (raw, json)
Hash identifier: lTTowge9VyUWAlpuZdHwNuFL3STtdOa2kTXEuikrYQU=
Subject key identifier: 28:69:D8:3F:2F:D2:18:A5:6C:87:A7:10:1B:3C:8D:BB:D4:A8:E9:68
Authority key identifier: 24:B0:FC:18:C1:A7:AF:F5:3F:83:CA:B2:60:62:53:5D:2C:C5:EE:6F
Certificate issuer: /CN=A9150A9C/serialNumber=24B0FC18C1A7AFF53F83CAB26062535D2CC5EE6F
Certificate serial: 4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLD8GMGnr_U_g8qyYGJTXSzF7m8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/JLD8GMGnr_U_g8qyYGJTXSzF7m8.mft
Manifest number: 09D7
Signing time: Tue 24 Mar 2026 19:48:22 +0000
Manifest this update: Tue 24 Mar 2026 19:48:21 +0000
Manifest next update: Tue 31 Mar 2026 19:48:21 +0000
Files and hashes: 1: JLD8GMGnr_U_g8qyYGJTXSzF7m8.crl (hash: 1R+nJM9v6486n96NnbmbHtkC3eTlw3cH5fzGsbFK2nE=)
2: 9DBC04A4C03111F0BF336D44C4F9AE02.roa (hash: tvE5Jolpx8UkjMKWhVQozMkKRe4EsitNFWalcpGE9V0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/JLD8GMGnr_U_g8qyYGJTXSzF7m8.crl
rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/JLD8GMGnr_U_g8qyYGJTXSzF7m8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLD8GMGnr_U_g8qyYGJTXSzF7m8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:48:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78 (0x4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150A9C, serialNumber=24B0FC18C1A7AFF53F83CAB26062535D2CC5EE6F
Validity
Not Before: Mar 24 19:48:21 2026 GMT
Not After : Mar 31 19:48:21 2026 GMT
Subject: CN=69c2ea86-c773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:fc:1b:c6:3b:04:ad:d5:4e:92:c9:f8:60:f7:
41:b7:dc:85:b1:f8:e3:49:93:b1:d5:f4:8a:f5:93:
fe:b3:3d:cf:1f:26:7b:a2:64:9d:72:1e:42:81:3c:
ee:45:49:b4:d7:8b:03:e4:3c:74:b0:38:bb:c2:e1:
79:17:60:ff:66:94:ec:39:b9:a2:a0:07:06:11:8f:
0b:d5:2d:ab:5f:c8:4c:93:be:17:ba:b9:78:7f:5e:
60:18:76:4d:8a:35:bb:2b:31:da:69:8f:56:60:b3:
67:d5:46:6a:ff:77:45:00:3b:49:79:d3:a0:12:66:
75:d7:2f:5c:60:66:ee:91:c0:02:81:07:09:e3:49:
bc:14:b8:6a:99:76:5c:9f:46:2c:53:da:41:f4:53:
49:1b:a2:27:6a:1c:93:e2:95:de:ab:c9:00:0e:0f:
55:af:e9:02:f1:8e:c6:d5:b2:e0:81:ba:50:41:b0:
6b:d5:9e:b3:6b:c2:d2:90:b3:17:a7:85:da:fe:cb:
af:8c:47:69:5b:c9:ec:fc:f5:2e:b9:db:57:48:42:
56:3b:6f:2b:76:a5:d8:f0:5b:3d:36:8f:d8:b2:da:
ac:d7:a1:9e:af:ea:13:f1:a2:7b:85:3e:2f:d6:6c:
5f:6b:4d:34:34:6f:8c:a2:a7:6e:8d:ba:99:37:03:
db:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:69:D8:3F:2F:D2:18:A5:6C:87:A7:10:1B:3C:8D:BB:D4:A8:E9:68
X509v3 Authority Key Identifier:
keyid:24:B0:FC:18:C1:A7:AF:F5:3F:83:CA:B2:60:62:53:5D:2C:C5:EE:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/JLD8GMGnr_U_g8qyYGJTXSzF7m8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLD8GMGnr_U_g8qyYGJTXSzF7m8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/JLD8GMGnr_U_g8qyYGJTXSzF7m8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:d2:17:3d:89:51:2c:cb:f7:68:ba:4b:3a:90:9c:d0:d7:1c:
0f:40:56:2a:f9:df:5b:d4:39:91:09:18:9b:0c:40:fa:0b:ad:
dc:5e:96:c6:e2:93:a0:55:19:a0:f8:15:98:b1:52:19:47:d0:
8b:5f:2d:9d:bf:06:d4:eb:6b:c7:c0:83:83:4f:bf:bf:69:48:
ed:41:5d:a6:da:93:6d:0b:79:c7:a3:6d:06:ed:a0:86:c1:6b:
f2:15:f9:d8:1a:01:de:9b:a7:b9:9d:25:2b:eb:3c:b5:90:9c:
66:23:9b:5c:f3:bb:68:6f:77:b7:7f:3f:5d:c7:ba:3f:20:ac:
c2:99:60:05:af:68:a5:d5:9e:49:8c:70:08:df:b0:e0:1b:8e:
5b:23:0c:c8:3d:97:14:63:47:40:ff:f7:84:63:b5:b9:5a:2b:
8a:30:27:bd:a4:70:19:8e:dc:9f:b9:92:69:ba:9d:4a:49:b4:
f1:cf:81:a3:e1:65:a1:55:84:9b:fc:70:77:d7:ab:91:de:78:
ce:b0:35:52:7f:9b:56:c1:e7:d7:42:29:48:10:20:5c:32:00:
74:12:1f:f2:58:93:98:48:56:53:86:6c:83:50:c3:1d:ce:7a:
6e:05:80:21:7a:63:6b:7f:c3:05:ef:e0:55:d5:fb:6d:ac:3c:
72:d1:26:fd
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
MEE5QzExMC8GA1UEBRMoMjRCMEZDMThDMUE3QUZGNTNGODNDQUIyNjA2MjUzNUQy
Q0M1RUU2RjAeFw0yNjAzMjQxOTQ4MjFaFw0yNjAzMzExOTQ4MjFaMBgxFjAUBgNV
BAMTDTY5YzJlYTg2LWM3NzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDf/BvGOwSt1U6Syfhg90G33IWx+ONJk7HV9Ir1k/6zPc8fJnuiZJ1yHkKBPO5F
SbTXiwPkPHSwOLvC4XkXYP9mlOw5uaKgBwYRjwvVLatfyEyTvhe6uXh/XmAYdk2K
NbsrMdppj1Zgs2fVRmr/d0UAO0l506ASZnXXL1xgZu6RwAKBBwnjSbwUuGqZdlyf
RixT2kH0U0kboidqHJPild6ryQAOD1Wv6QLxjsbVsuCBulBBsGvVnrNrwtKQsxen
hdr+y6+MR2lbyez89S6521dIQlY7byt2pdjwWz02j9iy2qzXoZ6v6hPxonuFPi/W
bF9rTTQ0b4yip26Nupk3A9t1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUKGnYPy/S
GKVsh6cQGzyNu9So6WgwHwYDVR0jBBgwFoAUJLD8GMGnr/U/g8qyYGJTXSzF7m8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUwQTlDLzJBMjk0ODRDQUJB
ODExRUE5NUNFMkMxNkM0RjlBRTAyL0pMRDhHTUducl9VX2c4cXlZR0pUWFN6Rjdt
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvSkxEOEdNR25yX1VfZzhxeVlHSlRYU3pGN204LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUw
QTlDLzJBMjk0ODRDQUJBODExRUE5NUNFMkMxNkM0RjlBRTAyL0pMRDhHTUducl9V
X2c4cXlZR0pUWFN6RjdtOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBQ0hc9iVEsy/douks6kJzQ1xwPQFYq+d9b1DmRCRibDED6C63cXpbG4pOgVRmg
+BWYsVIZR9CLXy2dvwbU62vHwIODT7+/aUjtQV2m2pNtC3nHo20G7aCGwWvyFfnY
GgHem6e5nSUr6zy1kJxmI5tc87tob3e3fz9dx7o/IKzCmWAFr2il1Z5JjHAI37Dg
G45bIwzIPZcUY0dA//eEY7W5WiuKMCe9pHAZjtyfuZJpup1KSbTxz4Gj4WWhVYSb
/HB316uR3njOsDVSf5tWwefXQilIECBcMgB0Eh/yWJOYSFZThmyDUMMdznpuBYAh
emNrf8MF7+BV1fttrDxy0Sb9
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:46:21 2026 by rpki-client