
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
File: JDIOr_moILjtpZ4D5AVVxfNP78w.mft (raw, json)
Hash identifier: PxhV5zSRElAmt9aXOYD2Di8PLci7ZanvdjCpbTHTmCc=
Subject key identifier: 96:ED:94:D8:03:1F:42:2A:DE:7E:5A:8C:7E:40:4C:A9:DD:FA:10:42
Authority key identifier: 24:32:0E:AF:F9:A8:20:B8:ED:A5:9E:03:E4:05:55:C5:F3:4F:EF:CC
Certificate issuer: /CN=A9164F45/serialNumber=24320EAFF9A820B8EDA59E03E40555C5F34FEFCC
Certificate serial: 0241
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
Manifest number: 022A
Signing time: Thu 23 Jul 2026 04:00:47 +0000
Manifest this update: Thu 23 Jul 2026 04:00:46 +0000
Manifest next update: Thu 30 Jul 2026 04:00:46 +0000
Files and hashes: 1: JDIOr_moILjtpZ4D5AVVxfNP78w.crl (hash: enL5eCx7gkORcvCQtugiPCx5Ok+RqmTpA+z86IlY1K4=)
2: 7599519C42F811EEBCBA9981C4F9AE02.roa (hash: I5QliwvYU+6XY3uLDux2ljdugQkjPvN8suXRu5XZZMM=)
3: 32B9FB9C42FD11EEBC3A6810C4F9AE02.roa (hash: QXAEGZzwRw0h1gNPZ7PlUf/rgAFsJhEDsbChop9gPBY=)
4: AC1FAF84432211EEB1984F73C4F9AE02.roa (hash: 5f3PGGQ4lIHquQnRshVK4NbBoJAP65xZO5Xtmj/sUr0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.crl
rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 577 (0x241)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164F45, serialNumber=24320EAFF9A820B8EDA59E03E40555C5F34FEFCC
Validity
Not Before: Jul 23 04:00:46 2026 GMT
Not After : Jul 30 04:00:46 2026 GMT
Subject: CN=6a6191ef-3a86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cf:24:f4:3c:07:08:2f:d4:1b:ae:0d:ee:d8:
82:b0:89:79:9f:86:3c:fe:67:ac:4d:2a:d0:b1:8c:
13:9c:d2:52:8f:0f:4e:52:e5:0c:77:d7:0f:f5:f8:
00:da:1c:b0:ef:c2:e0:5c:4a:8c:51:9c:e9:e0:5d:
04:d1:f5:f3:e0:cd:78:b1:ec:bb:26:47:4c:93:12:
aa:97:16:d8:16:ed:83:be:17:11:87:30:dc:97:d9:
48:a7:5a:3b:cf:ac:68:ed:df:e5:98:56:37:de:4a:
bf:9e:ef:2d:f3:69:e7:33:27:ab:71:97:bc:57:48:
46:12:aa:e3:21:e0:ef:be:af:da:4e:28:a5:3d:93:
04:3c:91:00:c0:a2:77:b1:f3:ec:e1:ec:c2:7e:90:
14:93:cd:e2:74:4a:01:c6:ea:9a:9d:bb:ec:01:0e:
74:ea:13:a9:1b:0e:f2:95:8d:a5:0b:1a:ae:0e:1e:
e8:ed:74:58:f9:d1:62:b8:6e:4d:3e:07:c8:bc:9b:
39:2f:a0:6f:be:17:5a:63:b0:89:bf:58:10:26:d5:
ea:9b:34:96:fb:75:58:0d:a1:4e:72:70:5e:11:77:
ad:9b:ed:c1:d1:5e:d3:d2:f6:cc:c7:3d:ce:6e:c9:
ed:9c:5b:09:5f:37:b9:ce:54:86:d6:24:76:fc:d0:
53:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:ED:94:D8:03:1F:42:2A:DE:7E:5A:8C:7E:40:4C:A9:DD:FA:10:42
X509v3 Authority Key Identifier:
keyid:24:32:0E:AF:F9:A8:20:B8:ED:A5:9E:03:E4:05:55:C5:F3:4F:EF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:c1:8c:0f:25:27:92:1e:14:b9:b3:c8:da:ea:62:63:9d:ec:
81:49:87:2c:7a:9f:4c:20:4c:b2:f2:a1:84:ea:df:63:66:dc:
d3:87:d1:35:c5:df:0d:6f:89:1c:ee:f2:90:e4:58:1f:93:01:
7a:57:7a:21:2a:71:14:9a:38:6a:63:e7:84:bd:18:94:86:88:
f4:ab:3f:dd:ab:e3:d6:7c:15:73:f9:93:81:47:8b:2a:25:0b:
6e:1d:cc:35:3b:11:80:29:03:2a:ce:29:bf:13:16:1f:b8:a0:
ab:73:c7:44:91:99:10:71:3a:8e:16:85:23:ee:d6:7e:1e:80:
0c:ec:a1:70:ad:a5:5d:d4:a7:4c:0e:b8:93:59:c6:d7:31:70:
34:9b:6e:57:51:0d:ad:75:ec:29:94:b5:d7:8c:cb:73:dd:ee:
b6:28:64:ba:b2:36:06:f2:3b:01:30:ef:69:8e:89:cf:f2:af:
33:44:3b:58:8c:ef:86:0d:d0:76:b3:77:0c:97:8f:50:99:c7:
37:2b:8a:56:a2:86:a8:76:99:72:89:50:39:d1:a4:c1:a6:79:
9f:e3:5b:b3:ab:57:8b:22:62:2d:ed:84:79:e3:e6:c0:61:8c:
88:f1:0c:b8:33:41:a2:a5:0b:f3:e7:42:8f:f9:f6:31:10:72:
bf:49:2f:95
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjRGNDUxMTAvBgNVBAUTKDI0MzIwRUFGRjlBODIwQjhFREE1OUUwM0U0MDU1NUM1
RjM0RkVGQ0MwHhcNMjYwNzIzMDQwMDQ2WhcNMjYwNzMwMDQwMDQ2WjAYMRYwFAYD
VQQDEw02YTYxOTFlZi0zYTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq88k9DwHCC/UG64N7tiCsIl5n4Y8/mesTSrQsYwTnNJSjw9OUuUMd9cP9fgA
2hyw78LgXEqMUZzp4F0E0fXz4M14sey7JkdMkxKqlxbYFu2DvhcRhzDcl9lIp1o7
z6xo7d/lmFY33kq/nu8t82nnMyercZe8V0hGEqrjIeDvvq/aTiilPZMEPJEAwKJ3
sfPs4ezCfpAUk83idEoBxuqanbvsAQ506hOpGw7ylY2lCxquDh7o7XRY+dFiuG5N
PgfIvJs5L6BvvhdaY7CJv1gQJtXqmzSW+3VYDaFOcnBeEXetm+3B0V7T0vbMxz3O
bsntnFsJXze5zlSG1iR2/NBT1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJbtlNgD
H0Iq3n5ajH5ATKnd+hBCMB8GA1UdIwQYMBaAFCQyDq/5qCC47aWeA+QFVcXzT+/M
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEY0NS8zMzYxMTlDNDQy
RjYxMUVFQTI1MjRENjNDNEY5QUUwMi9KRElPcl9tb0lManRwWjRENUFWVnhmTlA3
OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pESU9yX21vSUxqdHBaNEQ1QVZWeGZOUDc4dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NEY0NS8zMzYxMTlDNDQyRjYxMUVFQTI1MjRENjNDNEY5QUUwMi9KRElPcl9tb0lM
anRwWjRENUFWVnhmTlA3OHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQMGMDyUnkh4UubPI2upiY53sgUmHLHqfTCBMsvKhhOrfY2bc04fRNcXfDW+J
HO7ykORYH5MBeld6ISpxFJo4amPnhL0YlIaI9Ks/3avj1nwVc/mTgUeLKiULbh3M
NTsRgCkDKs4pvxMWH7igq3PHRJGZEHE6jhaFI+7Wfh6ADOyhcK2lXdSnTA64k1nG
1zFwNJtuV1ENrXXsKZS114zLc93utihkurI2BvI7ATDvaY6Jz/KvM0Q7WIzvhg3Q
drN3DJePUJnHNyuKVqKGqHaZcolQOdGkwaZ5n+Nbs6tXiyJiLe2EeePmwGGMiPEM
uDNBoqUL8+dCj/n2MRByv0kvlQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:39:23 2026 by rpki-client