
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft
File: jZcXcn1ujusjgHsxPAWNA1b_4WI.mft (raw, json)
Hash identifier: ZB8DQyM7jGgNgLxMS8YBlEmfqBHtzAq4ciClVD9vQ0w=
Subject key identifier: C0:C8:ED:B9:F7:CD:DD:B7:B4:C1:92:F4:D3:90:1E:FF:72:EA:39:7B
Authority key identifier: 8D:97:17:72:7D:6E:8E:EB:23:80:7B:31:3C:05:8D:03:56:FF:E1:62
Certificate issuer: /CN=A916B53B/serialNumber=8D9717727D6E8EEB23807B313C058D0356FFE162
Certificate serial: 0178
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft
Manifest number: 0171
Signing time: Thu 23 Jul 2026 06:17:20 +0000
Manifest this update: Thu 23 Jul 2026 06:17:20 +0000
Manifest next update: Thu 30 Jul 2026 06:17:20 +0000
Files and hashes: 1: jZcXcn1ujusjgHsxPAWNA1b_4WI.crl (hash: IxIF/pR+3qcprVEhvU76bfejhLPNq9MmsaiPhFrZ8ME=)
2: A7E24C00ABF411F0A0B37937C4F9AE02.roa (hash: LbBS+EYlpmA67fkMLKgg4SD3EO+91MGCCTOWRrb0obs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.crl
rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:17:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 376 (0x178)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B53B, serialNumber=8D9717727D6E8EEB23807B313C058D0356FFE162
Validity
Not Before: Jul 23 06:17:20 2026 GMT
Not After : Jul 30 06:17:20 2026 GMT
Subject: CN=6a61b1f0-7ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:36:20:11:a2:43:6a:8e:58:cb:d5:9e:b0:2b:
90:f9:09:48:4e:7b:07:98:c6:19:cf:3d:51:36:5b:
36:05:29:d2:54:b9:3a:60:53:2d:14:7e:17:9a:4e:
42:83:15:25:3f:86:62:8e:33:c7:07:30:ca:52:fd:
5f:dd:04:bd:95:47:fc:a9:98:1a:f0:25:96:bf:a2:
2c:fd:4d:f3:4d:b3:e0:42:62:de:73:bf:e1:52:9d:
b2:fa:99:b2:8d:8d:e7:fe:70:50:6d:31:fc:20:cd:
af:3d:b7:75:a7:70:24:67:55:c7:37:74:e8:1c:c7:
9a:d6:28:c4:18:3b:40:b9:30:ba:8e:70:be:23:ed:
b3:6a:c8:8e:c1:7d:59:67:31:f6:6b:7b:ca:17:81:
4c:ec:f7:62:74:a6:5d:3f:15:b0:79:97:26:83:08:
98:ea:0e:d3:cc:76:63:59:f8:24:cf:0d:ba:ff:07:
54:35:7b:4e:0c:14:fa:27:e7:0f:d2:33:1a:56:98:
24:eb:d8:f3:19:59:19:f4:d5:ff:95:be:57:3a:12:
23:03:27:90:a8:91:4b:3f:aa:4e:7e:e5:96:1c:49:
ec:cf:02:54:d1:c7:87:8d:52:c6:4b:5c:b6:2d:20:
ca:16:3e:d7:6d:a8:d6:e0:e4:c0:39:03:ea:50:7a:
38:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C8:ED:B9:F7:CD:DD:B7:B4:C1:92:F4:D3:90:1E:FF:72:EA:39:7B
X509v3 Authority Key Identifier:
keyid:8D:97:17:72:7D:6E:8E:EB:23:80:7B:31:3C:05:8D:03:56:FF:E1:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b0:91:42:af:3f:75:b1:d2:b4:0f:40:34:a8:be:4d:17:46:
8b:d3:12:d8:8c:e1:76:10:84:5d:64:af:a7:0f:76:25:55:c8:
7a:ff:80:55:2a:19:14:77:d0:e2:a8:93:c0:d3:1c:e7:0d:20:
b2:31:c9:40:38:cf:05:2a:f8:95:a9:92:a7:cf:25:c8:9b:33:
19:c5:84:ab:64:26:0c:ad:fe:28:e0:0d:30:32:cd:48:7c:68:
b7:16:ba:b0:cc:75:ed:37:60:d4:3a:a6:44:52:bc:84:57:69:
44:ca:83:a5:f2:89:e4:12:42:bc:77:4c:88:ea:20:d7:94:6c:
19:47:49:c1:f3:0e:c2:45:99:98:a8:d2:3a:b4:60:50:cd:18:
9e:e4:5d:33:e1:df:ad:fa:52:39:ae:15:82:a9:88:42:31:e3:
25:4f:1f:5c:93:4d:7d:88:52:15:c7:7b:5a:64:ed:a8:c3:96:
ef:52:8c:ab:dc:f5:f6:1c:15:98:12:9a:45:39:6c:38:3e:1b:
13:82:a0:aa:e8:36:59:56:43:70:8a:a6:51:60:ad:2e:99:75:
82:67:68:9f:4e:32:a4:9c:8c:38:8e:b2:97:20:e6:46:36:c0:
ac:fa:38:f5:8b:5f:80:95:89:a6:aa:64:21:7b:3d:9a:4a:92:
b5:f1:69:fd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkI1M0IxMTAvBgNVBAUTKDhEOTcxNzcyN0Q2RThFRUIyMzgwN0IzMTNDMDU4RDAz
NTZGRkUxNjIwHhcNMjYwNzIzMDYxNzIwWhcNMjYwNzMwMDYxNzIwWjAYMRYwFAYD
VQQDEw02YTYxYjFmMC03ZWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0jYgEaJDao5Yy9WesCuQ+QlITnsHmMYZzz1RNls2BSnSVLk6YFMtFH4Xmk5C
gxUlP4ZijjPHBzDKUv1f3QS9lUf8qZga8CWWv6Is/U3zTbPgQmLec7/hUp2y+pmy
jY3n/nBQbTH8IM2vPbd1p3AkZ1XHN3ToHMea1ijEGDtAuTC6jnC+I+2zasiOwX1Z
ZzH2a3vKF4FM7PdidKZdPxWweZcmgwiY6g7TzHZjWfgkzw26/wdUNXtODBT6J+cP
0jMaVpgk69jzGVkZ9NX/lb5XOhIjAyeQqJFLP6pOfuWWHEnszwJU0ceHjVLGS1y2
LSDKFj7XbajW4OTAOQPqUHo4/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMDI7bn3
zd23tMGS9NOQHv9y6jl7MB8GA1UdIwQYMBaAFI2XF3J9bo7rI4B7MTwFjQNW/+Fi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjUzQi8yMDMyM0E4MjU5
REQxMUVGQkFENEMyODZDNEY5QUUwMi9qWmNYY24xdWp1c2pnSHN4UEFXTkExYl80
V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2paY1hjbjF1anVzamdIc3hQQVdOQTFiXzRXSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QjUzQi8yMDMyM0E4MjU5REQxMUVGQkFENEMyODZDNEY5QUUwMi9qWmNYY24xdWp1
c2pnSHN4UEFXTkExYl80V0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALbCRQq8/dbHStA9ANKi+TRdGi9MS2IzhdhCEXWSvpw92JVXIev+AVSoZFHfQ
4qiTwNMc5w0gsjHJQDjPBSr4lamSp88lyJszGcWEq2QmDK3+KOANMDLNSHxotxa6
sMx17Tdg1DqmRFK8hFdpRMqDpfKJ5BJCvHdMiOog15RsGUdJwfMOwkWZmKjSOrRg
UM0YnuRdM+HfrfpSOa4VgqmIQjHjJU8fXJNNfYhSFcd7WmTtqMOW71KMq9z19hwV
mBKaRTlsOD4bE4Kgqug2WVZDcIqmUWCtLpl1gmdon04ypJyMOI6ylyDmRjbArPo4
9YtfgJWJpqpkIXs9mkqStfFp/Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:49:52 2026 by rpki-client