
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft
File: -JdCLlAQBtJgHYWlAXlTJrr-c4g.mft (raw, json)
Hash identifier: MwFzKBuggRVukRoy72sYSq3uBk2bykAwtdm1q1/jSR0=
Subject key identifier: 7D:1E:3E:9F:FF:DF:8A:A2:6C:BF:C5:6F:26:C3:95:E9:AD:20:81:B4
Authority key identifier: F8:97:42:2E:50:10:06:D2:60:1D:85:A5:01:79:53:26:BA:FE:73:88
Certificate issuer: /CN=A9170829/serialNumber=F897422E501006D2601D85A501795326BAFE7388
Certificate serial: 021D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft
Manifest number: 06DC
Signing time: Tue 12 May 2026 23:55:33 +0000
Manifest this update: Tue 12 May 2026 23:55:33 +0000
Manifest next update: Tue 19 May 2026 23:55:33 +0000
Files and hashes: 1: -JdCLlAQBtJgHYWlAXlTJrr-c4g.crl (hash: thG1aTZJ1EGKtTNife2ffv3B+O+ciX9EMgHeRfGaxKg=)
2: E6C709BAEADD11F088D8AEF6666F56BC.roa (hash: ueTxaPk78zjdZo1qLabhrCKtO42F+1HdGQgNXdtwiaQ=)
3: C4D7F9DA584111EE85E40820C4F9AE02.roa (hash: K10RKm2RSVVX5jRTjbz83WeVsyTCfxe5LfA+X5JE7CE=)
4: F2706122D16E11F08E21851DC4F9AE02.roa (hash: 1RGEPGDWabAXSvxah2bqU7tFm/fhcCPZyMNrSv04Ww4=)
5: C55784DE584111EE85E40820C4F9AE02.roa (hash: dtbPC1LWkATZlWdm2gMIZVIAO5KQs+qcNNvbOqGnkko=)
6: C5C77866584111EE85E40820C4F9AE02.roa (hash: gZq4hO6KlqIzQ0dht+JPwOzELy4HWyKu7Y+1DMZFb3o=)
7: C44DEE8E584111EE85E40820C4F9AE02.roa (hash: Df3ID6kB/M7JFh6AAV2Z24ovoongS5kXo66yU3B/CNw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.crl
rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:55:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 541 (0x21d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170829, serialNumber=F897422E501006D2601D85A501795326BAFE7388
Validity
Not Before: May 12 23:55:33 2026 GMT
Not After : May 19 23:55:33 2026 GMT
Subject: CN=6a03bdf5-3ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c1:7e:23:9f:1b:32:0c:20:58:f3:21:01:c0:
17:05:97:85:58:21:dd:47:17:81:24:18:68:f0:6e:
95:49:5b:a5:6e:9e:3f:a6:37:df:08:d1:31:8a:6e:
bf:96:1a:ff:7a:7e:4c:8c:37:d1:15:e6:cb:06:6e:
94:7c:89:72:1e:c0:bc:f5:e8:c0:2a:15:ae:12:02:
b1:13:d4:61:4b:47:ff:ec:c9:85:c5:b6:43:c5:a2:
d9:cd:e1:77:bc:9b:42:d1:7f:41:e2:1c:8a:3f:f2:
56:62:b5:e1:24:71:77:c4:e8:34:01:7e:04:76:12:
bf:33:6d:0b:b4:4f:48:6f:d2:a3:f5:f3:cc:e1:1f:
03:c3:e2:b7:f6:14:fd:a0:29:ab:35:35:be:15:f6:
c1:87:ea:ab:38:3f:aa:fb:19:d7:e9:e9:b3:ad:30:
b5:f1:2c:f6:2e:ed:71:f6:2a:2d:33:21:e3:6a:fc:
5c:59:a9:63:51:dc:b0:25:2a:76:5a:24:d4:38:be:
a8:62:f5:3a:35:b0:f2:57:f5:7c:55:76:38:12:58:
95:8e:d4:9b:4d:10:7c:88:15:6b:e2:6b:78:c1:08:
53:70:5d:0a:27:10:4a:76:89:9a:d9:05:ce:b3:1c:
b1:4d:cf:a2:ac:1a:d0:54:44:62:45:c8:cd:e7:d1:
b1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:1E:3E:9F:FF:DF:8A:A2:6C:BF:C5:6F:26:C3:95:E9:AD:20:81:B4
X509v3 Authority Key Identifier:
keyid:F8:97:42:2E:50:10:06:D2:60:1D:85:A5:01:79:53:26:BA:FE:73:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:94:82:bc:91:45:3e:dc:35:f9:8a:2c:a3:d1:b3:70:3a:c3:
ef:9c:da:de:8a:a9:9c:ba:1c:39:4a:d4:57:ec:dc:7f:73:02:
f5:14:c2:c8:5b:2d:e2:2c:cd:84:2d:48:e4:c9:bb:61:47:9b:
9e:d5:41:60:c3:a5:a2:ba:ea:ce:72:c3:2f:d9:69:b6:b0:42:
f7:63:19:db:35:87:95:20:cd:d1:34:44:80:43:90:41:d3:35:
a7:53:57:e6:c3:9b:d7:c8:60:dd:da:5e:1a:34:44:d8:43:b7:
b5:aa:7d:71:87:54:6d:88:01:0b:84:1f:b5:3d:af:93:bc:0f:
f5:bd:8e:74:7a:e9:18:88:f0:64:19:2c:dc:64:de:54:59:34:
16:9d:3a:51:dc:59:96:b4:0c:54:31:03:57:2d:bf:41:cd:7c:
e4:14:3b:fe:fc:92:56:5a:09:1e:1a:17:6a:6c:26:94:3a:78:
ed:8a:94:ca:4f:82:2a:54:d3:8e:00:d6:7a:bb:4a:51:f7:9f:
ea:1b:61:48:99:86:3d:e8:ed:86:6c:4c:7f:73:45:ad:68:fc:
01:84:94:42:52:eb:88:ae:ae:5e:2b:32:c3:80:ac:8d:f1:01:
d8:7d:c9:0f:16:d2:22:c1:a9:d2:25:4f:66:70:e1:48:22:1e:
d7:26:8b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:07:16 2026 by rpki-client