
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
File: JDIOr_moILjtpZ4D5AVVxfNP78w.mft (raw, json)
Hash identifier: Fx9WGTLJYtU1FqdjMjTEyMVZRL3KmI6wQcw4ncO5www=
Subject key identifier: 97:45:78:90:00:6F:23:06:DB:C0:5E:51:E2:E1:96:15:1C:B7:BF:55
Authority key identifier: 24:32:0E:AF:F9:A8:20:B8:ED:A5:9E:03:E4:05:55:C5:F3:4F:EF:CC
Certificate issuer: /CN=A9164F45/serialNumber=24320EAFF9A820B8EDA59E03E40555C5F34FEFCC
Certificate serial: 021D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
Manifest number: 0206
Signing time: Mon 11 May 2026 03:08:46 +0000
Manifest this update: Mon 11 May 2026 03:08:45 +0000
Manifest next update: Mon 18 May 2026 03:08:45 +0000
Files and hashes: 1: JDIOr_moILjtpZ4D5AVVxfNP78w.crl (hash: L+pbM/i3uclwZYwXCNMzOA8jBabtUa0HQElra/DA0yk=)
2: AC1FAF84432211EEB1984F73C4F9AE02.roa (hash: 5f3PGGQ4lIHquQnRshVK4NbBoJAP65xZO5Xtmj/sUr0=)
3: 32B9FB9C42FD11EEBC3A6810C4F9AE02.roa (hash: QXAEGZzwRw0h1gNPZ7PlUf/rgAFsJhEDsbChop9gPBY=)
4: 7599519C42F811EEBCBA9981C4F9AE02.roa (hash: I5QliwvYU+6XY3uLDux2ljdugQkjPvN8suXRu5XZZMM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.crl
rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 03:08:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 541 (0x21d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164F45, serialNumber=24320EAFF9A820B8EDA59E03E40555C5F34FEFCC
Validity
Not Before: May 11 03:08:45 2026 GMT
Not After : May 18 03:08:45 2026 GMT
Subject: CN=6a01483e-6fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8d:53:3f:bd:22:90:1d:b0:35:fb:33:79:04:
1e:55:c2:9e:76:a1:eb:a9:0a:08:c5:f2:1f:b7:2b:
80:db:60:75:ee:6d:6c:06:36:8d:b0:17:2e:24:79:
40:1b:fa:68:0f:bf:58:49:8a:d4:82:be:98:0e:71:
c5:4b:27:f8:70:35:f2:66:a5:63:bc:ae:d3:94:ba:
a6:e1:4f:16:ee:db:f8:40:9b:d6:9a:4a:99:46:3f:
53:52:20:c5:b8:9b:18:0b:47:d6:b5:a8:12:eb:bb:
ef:bd:61:63:f0:38:cc:da:ce:c5:a1:1a:cd:c0:a8:
11:bf:80:4d:21:42:0e:75:79:5b:86:7a:b3:ff:dc:
c2:43:a9:59:64:ca:31:a3:0b:2e:50:83:21:ed:4c:
74:f5:1d:86:99:11:12:5e:20:2e:8d:c5:1f:c8:06:
b6:8f:96:e8:a5:6a:0f:93:8b:d9:d9:bb:3d:ba:74:
45:61:14:51:d0:69:02:a0:2e:2b:53:86:0d:84:ee:
37:3a:07:85:d7:8a:67:b4:d6:5a:44:0f:ac:e7:56:
86:2e:0f:d0:62:1a:8f:74:1e:8c:a8:ee:bd:b4:a7:
30:d7:df:6b:42:96:4a:b3:62:cf:72:d9:20:03:41:
6e:16:69:91:80:a0:8d:90:c9:62:0a:b7:0a:f5:19:
bc:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:45:78:90:00:6F:23:06:DB:C0:5E:51:E2:E1:96:15:1C:B7:BF:55
X509v3 Authority Key Identifier:
keyid:24:32:0E:AF:F9:A8:20:B8:ED:A5:9E:03:E4:05:55:C5:F3:4F:EF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:9b:7d:b6:f6:a9:b5:39:8f:22:f1:1f:47:75:88:61:4b:e2:
2e:50:f8:73:57:89:eb:79:a0:b1:47:73:1f:4e:7a:8e:1b:91:
32:d2:4c:e8:be:d7:17:3c:8d:e2:f6:fc:b6:a1:e5:ee:02:76:
cf:5b:af:db:69:b8:0b:9f:83:ca:54:d1:3a:94:d5:4e:19:aa:
53:e1:13:1b:bc:53:ad:e7:3d:9b:11:93:e2:83:01:de:46:e6:
48:46:ba:5b:ff:69:01:9c:3e:41:c6:22:42:c4:af:d1:c9:2b:
74:f4:a9:b2:61:63:fd:cc:89:78:57:ea:39:5b:2c:f1:db:d7:
65:4c:f4:6e:4b:f1:92:97:54:0d:42:8a:01:af:1e:43:01:2e:
f7:28:8f:ae:03:8c:4f:fd:e0:c1:17:83:30:d0:b7:ba:ba:44:
72:f2:6b:2b:26:08:38:ff:30:d3:e3:04:1c:76:b8:b0:66:2c:
8b:c5:b2:1b:f0:93:5b:60:3f:b5:79:3a:1f:80:c2:31:4f:8f:
d4:d3:21:fe:7b:b5:66:92:f0:9c:a2:dd:ae:32:e3:4c:d2:e5:
c0:c0:20:54:0b:4a:37:d2:35:4e:b3:78:66:62:1b:60:72:33:
48:4a:65:21:9f:91:7a:df:0e:c3:6b:3f:44:94:4c:71:8f:ae:
e8:c4:87:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:53:58 2026 by rpki-client