
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft
File: -JdCLlAQBtJgHYWlAXlTJrr-c4g.mft (raw, json)
Hash identifier: p52HQ3afHFMZH/Vg0e+bmTEUBvYuckqCE8nYck1IL3M=
Subject key identifier: DC:F8:C6:C2:AA:4B:3E:46:D7:E8:00:AA:AF:1B:56:77:6C:6F:7C:96
Authority key identifier: F8:97:42:2E:50:10:06:D2:60:1D:85:A5:01:79:53:26:BA:FE:73:88
Certificate issuer: /CN=A9170829/serialNumber=F897422E501006D2601D85A501795326BAFE7388
Certificate serial: 0249
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft
Manifest number: 0727
Signing time: Thu 23 Jul 2026 00:31:28 +0000
Manifest this update: Thu 23 Jul 2026 00:31:27 +0000
Manifest next update: Thu 30 Jul 2026 00:31:27 +0000
Files and hashes: 1: -JdCLlAQBtJgHYWlAXlTJrr-c4g.crl (hash: q8DjuLM3btWeFGdAFCBkGpKjVuP8zOimoSzFzo9as9I=)
2: C44DEE8E584111EE85E40820C4F9AE02.roa (hash: KPudjn9fAIyxH6iO+Vq+v5F8LqajNGVdpDuC+DrMuA0=)
3: F2706122D16E11F08E21851DC4F9AE02.roa (hash: U5FE2Jl9i12aLoYdhP4eL42j8vYOgjImKvyyJ7bw++c=)
4: C4D7F9DA584111EE85E40820C4F9AE02.roa (hash: B9f80EoI0x+BIg2AFxeHEGvINQTmjdsYocZpJvfDc0A=)
5: C55784DE584111EE85E40820C4F9AE02.roa (hash: HVeRuKGPvgRMfPHsqbyGBs/7U9hBE+gCk7rxayLwau8=)
6: C5C77866584111EE85E40820C4F9AE02.roa (hash: o09B0PsJspIE7YM1wHmZQROS9GUS/vHR3P6a96Hv63k=)
7: E6C709BAEADD11F088D8AEF6666F56BC.roa (hash: vC4STLzHVCOMzh9f2GrOs/JinLrCWg2GfnKg/8s/U3g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.crl
rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:31:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 585 (0x249)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170829, serialNumber=F897422E501006D2601D85A501795326BAFE7388
Validity
Not Before: Jul 23 00:31:27 2026 GMT
Not After : Jul 30 00:31:27 2026 GMT
Subject: CN=6a6160df-2567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c3:62:58:b8:9d:2c:74:91:8a:80:b2:d6:05:
67:ed:f9:9c:a6:20:dd:46:ee:3f:18:5c:12:c2:3e:
35:87:55:0f:c7:ba:a5:9a:59:81:93:35:28:17:e8:
ac:18:fa:ee:ce:58:08:62:6e:7b:5c:2c:5e:7d:61:
20:3e:85:3e:f7:a2:6b:5c:4a:48:37:f4:7f:c6:95:
22:cd:d6:ef:96:45:23:ad:87:ad:ab:c1:6f:0a:b7:
64:b3:2b:a5:4e:89:ae:3b:31:ca:0e:21:f1:ef:bc:
c0:61:62:31:71:2b:e1:a2:ca:15:79:79:34:d9:27:
de:e5:b6:81:83:2d:ee:cf:05:8a:1f:6c:fe:e5:52:
96:c8:0b:6a:1f:cd:d4:60:f8:0a:f8:02:ca:9c:91:
fd:00:96:a1:d8:bd:20:0b:e3:7b:a2:4d:6a:c4:49:
86:c0:87:54:26:ee:e1:93:fb:1a:b2:18:f6:f4:48:
a9:d2:82:4e:a0:a6:f8:65:1c:80:79:90:3a:cc:06:
58:d2:05:58:28:c8:25:97:b3:65:bc:f5:d9:c4:11:
24:68:ee:96:fa:29:e7:35:62:e7:6e:a1:24:fe:89:
fe:c3:33:7a:e6:48:de:8a:b8:dc:55:84:25:d4:bf:
a8:17:e4:9c:77:cf:b5:83:ba:ac:8d:69:bd:8e:6a:
8e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F8:C6:C2:AA:4B:3E:46:D7:E8:00:AA:AF:1B:56:77:6C:6F:7C:96
X509v3 Authority Key Identifier:
keyid:F8:97:42:2E:50:10:06:D2:60:1D:85:A5:01:79:53:26:BA:FE:73:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:1d:14:0b:d4:b9:1e:7b:c9:2f:9c:35:63:24:6d:50:66:63:
7a:15:48:a3:69:d1:7f:1b:ab:05:72:cd:8c:4c:ef:93:93:f9:
2d:ab:0b:54:b8:3b:07:5e:b1:42:04:e9:43:cd:33:bd:a1:b6:
f0:3d:8c:a2:b6:09:cd:ef:64:98:cc:c2:bf:79:e4:7c:d8:63:
7a:ca:e5:f6:89:c5:f8:53:c5:3c:2d:1e:8b:8e:7e:75:bb:f4:
8d:e3:e9:17:6d:71:24:c8:01:f4:a9:7d:df:89:74:31:87:6d:
df:1d:af:d1:27:81:e0:fa:e5:80:35:bf:58:7f:94:03:d5:04:
48:6e:f1:17:e6:8f:9a:6d:47:74:2b:c3:72:93:f2:26:90:09:
3d:96:aa:2c:3a:b1:fd:7e:16:e5:0d:72:9b:e3:9e:83:ac:54:
e1:92:43:70:1d:c2:a0:ff:82:56:b2:59:d5:d4:2e:a5:61:5e:
fe:1a:92:81:d7:43:d5:cc:2e:ce:64:26:40:22:2f:be:ce:51:
9e:c3:f3:0d:a2:ee:55:b5:8b:89:4e:75:b8:0a:45:51:f4:e4:
11:98:3e:0a:f6:6d:51:35:c9:86:67:5f:01:50:c9:9d:cc:2f:
bc:7f:0a:1d:92:18:1b:4f:2c:1f:d1:cb:13:14:be:5b:69:63:
8d:5e:01:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:49:12 2026 by rpki-client