
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft
File: jZcXcn1ujusjgHsxPAWNA1b_4WI.mft (raw, json)
Hash identifier: WoXao/4tgb95AENeCrNJw3AdsqFczfbNpUHFodeQBDo=
Subject key identifier: 15:EA:0F:58:49:1C:4E:60:FD:B7:F5:75:5B:F1:BF:FA:E6:29:A4:70
Authority key identifier: 8D:97:17:72:7D:6E:8E:EB:23:80:7B:31:3C:05:8D:03:56:FF:E1:62
Certificate issuer: /CN=A916B53B/serialNumber=8D9717727D6E8EEB23807B313C058D0356FFE162
Certificate serial: 013C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft
Manifest number: 0135
Signing time: Wed 25 Mar 2026 04:41:40 +0000
Manifest this update: Wed 25 Mar 2026 04:41:39 +0000
Manifest next update: Wed 01 Apr 2026 04:41:39 +0000
Files and hashes: 1: jZcXcn1ujusjgHsxPAWNA1b_4WI.crl (hash: Be29ACdty44i/8HC59Pcb3RqFNsG1bltJEPXX6ARlWQ=)
2: A7E24C00ABF411F0A0B37937C4F9AE02.roa (hash: LbBS+EYlpmA67fkMLKgg4SD3EO+91MGCCTOWRrb0obs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.crl
rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:41:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 316 (0x13c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B53B, serialNumber=8D9717727D6E8EEB23807B313C058D0356FFE162
Validity
Not Before: Mar 25 04:41:39 2026 GMT
Not After : Apr 1 04:41:39 2026 GMT
Subject: CN=69c36784-e4d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:38:b5:ae:6b:a1:8e:98:b5:91:6a:2d:15:ab:
e1:80:29:df:60:24:7c:2d:6a:11:b3:f4:86:33:0f:
bd:5a:6e:1f:4f:13:f3:97:e6:81:5c:49:29:86:c2:
35:d9:f5:a2:93:fb:58:48:3c:55:9c:56:7a:38:8f:
9d:2d:55:85:22:ed:17:09:9f:39:ff:36:3b:ad:f8:
50:b9:f6:5a:08:55:10:d9:5d:e4:d1:79:08:7c:3f:
db:e7:69:8f:ad:3a:70:8d:83:f5:7f:50:79:97:af:
59:74:fc:ac:ee:bb:6c:6c:09:a3:f1:53:36:83:f6:
d3:8e:91:d1:43:0a:2d:25:d6:0a:58:9e:dc:fb:18:
3c:9a:31:56:9c:26:4d:d4:a5:c9:12:e5:1f:cf:4e:
0c:f1:32:65:12:83:29:52:57:81:86:f1:b5:62:59:
28:6c:4f:b6:6c:38:1b:da:f8:e8:4d:f4:18:9a:9c:
b2:e2:e5:03:9a:98:5b:eb:ba:61:59:8d:26:e1:55:
e8:85:77:93:af:e4:51:57:aa:7b:9d:fa:a7:10:f2:
36:fb:01:37:12:bd:0b:39:0d:ee:40:ed:68:b7:b0:
1e:95:9d:68:eb:b2:f2:c4:93:2f:56:c4:b3:42:6c:
34:84:e0:5f:18:1d:dc:5a:89:a9:50:66:0c:62:02:
db:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:EA:0F:58:49:1C:4E:60:FD:B7:F5:75:5B:F1:BF:FA:E6:29:A4:70
X509v3 Authority Key Identifier:
keyid:8D:97:17:72:7D:6E:8E:EB:23:80:7B:31:3C:05:8D:03:56:FF:E1:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:9f:e7:f6:c0:86:5f:2c:5d:72:5d:3f:45:1d:70:cb:92:83:
9c:7a:44:c2:c8:36:c1:84:ac:a4:cf:95:f6:f7:97:5d:81:53:
11:77:ee:46:76:43:1f:61:e2:2a:59:de:5b:9c:69:87:0b:61:
7a:41:25:98:82:c6:d6:7b:3d:7e:11:18:d8:81:16:ce:b9:9b:
c3:1b:fe:15:2c:91:aa:30:e9:a2:27:00:18:40:ee:a9:05:08:
60:bd:c7:30:63:64:44:85:ab:a7:ae:3d:ab:3f:6b:8a:86:ef:
a3:39:d8:09:67:13:24:cd:bb:4f:1b:4f:f8:93:1a:8d:fa:74:
b3:d8:5f:f8:19:30:ee:79:97:85:63:5f:77:80:60:df:eb:79:
cb:61:91:b9:68:c1:58:51:53:b9:29:16:00:f6:ee:99:bf:2b:
cd:87:36:21:41:3b:34:c6:fe:b8:5d:4f:30:88:eb:b8:16:c0:
0b:48:b1:2d:b3:db:30:7f:f2:89:b1:b4:15:43:0f:21:9e:bd:
8b:a0:dd:18:1d:e9:54:24:ff:ec:9a:a5:08:d9:74:43:d1:5d:
bc:88:c8:b4:4c:2b:88:78:fd:8c:33:ca:5c:ad:f7:23:6d:af:
cf:86:02:40:41:89:ba:09:fb:50:95:e4:8a:d2:b3:65:5b:f8:
78:ec:fe:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:55:07 2026 by rpki-client