
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/jL6d1Zk0ya0gX85q-O9NuAHx0-s.mft
File: jL6d1Zk0ya0gX85q-O9NuAHx0-s.mft (raw, json)
Hash identifier: nnvgP5kvro0Htizq1sQBj1naUvuvfAVOByVedpGe3JE=
Subject key identifier: 41:76:3B:BF:6E:F3:8D:7F:C5:64:47:CB:C8:BF:47:86:EC:75:C1:25
Authority key identifier: 8C:BE:9D:D5:99:34:C9:AD:20:5F:CE:6A:F8:EF:4D:B8:01:F1:D3:EB
Certificate issuer: /CN=A915B202/serialNumber=8CBE9DD59934C9AD205FCE6AF8EF4DB801F1D3EB
Certificate serial: 02A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jL6d1Zk0ya0gX85q-O9NuAHx0-s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/jL6d1Zk0ya0gX85q-O9NuAHx0-s.mft
Manifest number: 0296
Signing time: Wed 25 Mar 2026 01:09:47 +0000
Manifest this update: Wed 25 Mar 2026 01:09:47 +0000
Manifest next update: Wed 01 Apr 2026 01:09:47 +0000
Files and hashes: 1: jL6d1Zk0ya0gX85q-O9NuAHx0-s.crl (hash: V2EQFJzbvzcR+6v9a6NYDOwxQ5EChr0wS4IIYC+FOxk=)
2: 9A859F8A480611EDBC63AD52C4F9AE02.roa (hash: wF4QZyfLj/lu9oPTV1o0DkfBCR57vW77Xsm6jbQbIuY=)
3: 001EB4A284C911EFA902172CC4F9AE02.roa (hash: zhtgaYOP2t9BTocwcz6jeVnShJg9nciVYPAVq1zX9xk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/jL6d1Zk0ya0gX85q-O9NuAHx0-s.crl
rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/jL6d1Zk0ya0gX85q-O9NuAHx0-s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jL6d1Zk0ya0gX85q-O9NuAHx0-s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:09:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 678 (0x2a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B202, serialNumber=8CBE9DD59934C9AD205FCE6AF8EF4DB801F1D3EB
Validity
Not Before: Mar 25 01:09:47 2026 GMT
Not After : Apr 1 01:09:47 2026 GMT
Subject: CN=69c335db-3f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a5:ae:1e:44:d3:07:81:4d:2c:b7:57:47:5d:
74:d0:83:96:51:f5:bd:e6:56:ca:cf:f5:11:a8:61:
89:24:41:16:0c:bf:58:44:32:72:ba:c3:cf:e8:f6:
4d:9c:3f:c1:5a:cf:ac:5e:89:3b:44:d5:3d:76:c8:
de:0e:ad:48:d3:f7:64:da:00:91:df:28:23:1c:83:
cb:16:8b:89:02:33:34:38:84:a2:71:94:ce:1b:63:
1f:bd:e6:7e:b6:f6:df:b1:e7:77:b2:96:59:61:e2:
46:26:c9:2d:9a:c0:49:38:14:83:fe:3d:44:87:9d:
27:84:9c:e5:d7:7f:a2:51:4f:9c:61:59:c4:c3:7a:
74:c3:dc:4e:13:ff:0a:10:3d:64:24:a8:a4:9c:32:
45:aa:c4:6b:e4:d5:a5:a6:b5:39:71:35:7d:de:7e:
f6:94:2e:32:cd:fe:5d:ec:0b:35:fb:89:a1:da:eb:
81:aa:77:97:33:51:20:e9:79:94:14:2a:27:0d:b7:
15:a5:f1:59:4e:be:e2:9e:48:95:cb:df:59:a5:19:
71:93:80:2e:c8:79:15:90:57:dd:df:b4:54:f7:7b:
bb:ee:6a:26:1b:74:cc:ca:94:60:da:af:49:9b:be:
a0:cc:98:d6:73:83:b7:8b:ab:f7:81:2b:16:7a:2e:
f8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:76:3B:BF:6E:F3:8D:7F:C5:64:47:CB:C8:BF:47:86:EC:75:C1:25
X509v3 Authority Key Identifier:
keyid:8C:BE:9D:D5:99:34:C9:AD:20:5F:CE:6A:F8:EF:4D:B8:01:F1:D3:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/jL6d1Zk0ya0gX85q-O9NuAHx0-s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jL6d1Zk0ya0gX85q-O9NuAHx0-s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/jL6d1Zk0ya0gX85q-O9NuAHx0-s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:11:30:1c:31:1e:7a:fe:eb:7b:e1:8c:41:b9:e2:fe:21:8b:
df:a4:5c:b0:a2:36:50:bf:d2:87:78:a2:c6:53:4e:b6:55:dd:
f1:95:98:41:e3:25:86:ae:78:bb:8c:8b:34:07:7c:f3:ae:1b:
d5:8b:03:99:60:75:c5:fe:49:91:d7:07:a1:ff:68:01:37:89:
a6:45:03:26:a2:5a:16:28:05:7a:8b:5c:4e:14:f4:b9:87:b6:
04:c2:c7:11:f2:e8:2d:e9:b9:85:0b:04:43:16:f2:c8:61:48:
d4:45:f5:91:9a:63:f1:2b:0b:62:4f:ee:d2:06:48:49:bb:a1:
3c:0b:4f:d8:9a:07:19:93:c2:03:6c:3d:5d:b5:1e:6b:e3:9b:
1f:9c:46:02:09:d2:a0:fc:f5:fb:1c:6e:11:17:76:fe:13:1d:
11:40:b1:c0:cb:54:7d:73:f6:be:9a:70:1f:d1:7c:9d:e3:3b:
5a:f5:b4:a2:b0:f6:7c:bf:b3:93:31:42:fa:77:0b:73:fd:5d:
33:4a:8f:56:af:74:d4:6e:f6:dc:cb:88:bb:16:cc:03:93:cd:
eb:f3:54:34:05:e8:24:d1:be:1f:a0:3b:11:52:40:02:b5:9e:
46:56:35:00:95:71:b4:d6:8f:7a:3f:75:b7:27:20:e8:be:33:
3b:72:2c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:34:20 2026 by rpki-client