
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft
File: Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft (raw, json)
Hash identifier: 2c2ltOyczBpfCu9cw7DsIB98GEkwpu0hZ4vjXM/h0qw=
Subject key identifier: B4:47:42:DB:01:0F:7D:43:98:FC:19:12:A6:B1:C4:AF:F6:55:E3:17
Authority key identifier: 26:DF:4E:CF:93:8C:49:82:D3:57:7E:12:21:EE:B1:B6:AD:22:C3:46
Certificate issuer: /CN=A9161CEF/serialNumber=26DF4ECF938C4982D3577E1221EEB1B6AD22C346
Certificate serial: 0BC8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft
Manifest number: 0C55
Signing time: Tue 12 May 2026 19:05:32 +0000
Manifest this update: Tue 12 May 2026 19:05:31 +0000
Manifest next update: Tue 19 May 2026 19:05:31 +0000
Files and hashes: 1: Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.crl (hash: naU7sVRJn71xUjz1cOlEpv8uRp5QLX4/q4dlukCzUAk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.crl
rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3016 (0xbc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161CEF, serialNumber=26DF4ECF938C4982D3577E1221EEB1B6AD22C346
Validity
Not Before: May 12 19:05:31 2026 GMT
Not After : May 19 19:05:31 2026 GMT
Subject: CN=6a0379fc-415b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ce:d0:7b:eb:01:7a:1c:25:4c:fe:cd:1d:2d:
59:14:a3:77:7b:50:b3:6f:52:d1:4f:95:f1:62:67:
9c:44:32:b9:b7:04:65:18:c8:a6:8b:f7:9e:52:68:
81:b4:bf:71:ca:b8:6f:7b:53:af:33:20:02:dd:09:
e9:a7:62:7e:f1:8c:d6:55:29:af:32:e9:67:a8:aa:
49:86:f2:6a:44:52:a8:14:dc:0d:ba:84:e1:e8:ae:
26:b2:e3:c0:2d:46:33:b3:1e:c1:3a:42:ec:1b:ec:
86:9b:90:75:01:46:f0:98:5b:73:85:67:2d:5c:1a:
4e:ca:d8:6a:5a:ec:dc:4f:90:6f:9e:97:35:0b:1b:
9e:8c:87:64:d7:31:00:72:9c:ae:92:1b:e1:58:13:
2c:94:e3:f4:33:01:dd:26:d7:33:b9:f5:44:24:fa:
c7:a8:ee:cc:25:c7:9f:49:a6:e0:6f:e3:97:3a:9d:
d0:f4:db:5d:5e:e7:c9:02:7c:de:ee:15:71:f4:9e:
2b:ef:56:33:3d:85:96:35:14:b7:f1:2b:14:c8:8c:
0a:7c:e7:f8:49:23:ad:93:9e:45:ef:65:07:19:64:
51:73:98:a3:07:13:41:b4:57:36:d9:56:8e:37:30:
9d:5c:43:45:4c:4e:aa:23:09:33:7c:15:57:20:f9:
a1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:47:42:DB:01:0F:7D:43:98:FC:19:12:A6:B1:C4:AF:F6:55:E3:17
X509v3 Authority Key Identifier:
keyid:26:DF:4E:CF:93:8C:49:82:D3:57:7E:12:21:EE:B1:B6:AD:22:C3:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:65:fb:ca:8a:c3:90:43:23:37:fb:b0:70:d7:91:d2:a7:bf:
75:2d:4a:2f:dd:76:eb:c1:06:ba:b8:8c:83:ff:00:28:94:71:
7b:a2:4b:8d:84:fd:de:3d:a6:43:4a:26:67:f7:a8:a5:05:3f:
63:e3:51:b6:86:b3:bb:44:14:6c:21:01:89:39:96:50:b2:e5:
6d:7c:3e:0d:9b:fc:6a:ac:57:c6:fc:c9:d0:88:7e:d3:56:1b:
e0:e9:fe:ac:8c:a5:ac:66:83:f2:af:b4:6e:8e:ab:ff:b7:f3:
ad:40:62:d6:77:c6:36:83:f3:a1:1b:0d:98:6b:62:07:0d:66:
ab:af:22:69:17:45:5d:33:12:e0:97:cc:6a:c5:d3:c5:13:ff:
ea:14:43:3d:ea:e8:6d:5a:d4:9a:50:cd:a8:05:4a:df:3e:b2:
39:17:20:7a:ed:50:bd:dd:1e:d6:54:31:43:78:e4:80:d3:b4:
d5:21:25:8a:a4:50:d7:d9:bd:57:58:8d:57:30:5f:d0:45:6a:
2e:54:86:94:6b:ae:a4:97:71:5f:d2:4d:64:4d:a8:ec:ca:2d:
87:ae:28:ad:14:6f:68:23:9e:4d:88:d1:8c:97:d0:d8:9f:90:
88:16:27:36:3a:ff:76:d1:c0:51:ee:83:ae:80:86:f2:07:34:
8c:18:16:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:01:43 2026 by rpki-client