
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft
File: -JdCLlAQBtJgHYWlAXlTJrr-c4g.mft (raw, json)
Hash identifier: ibXge3sLBeuUm5tg/kL+SgVViXZ5FUAl/X3Dh/JYuY4=
Subject key identifier: 8D:B8:1E:79:4E:0D:D3:6E:99:FB:28:26:12:13:49:EC:49:10:7B:30
Authority key identifier: F8:97:42:2E:50:10:06:D2:60:1D:85:A5:01:79:53:26:BA:FE:73:88
Certificate issuer: /CN=A9170829/serialNumber=F897422E501006D2601D85A501795326BAFE7388
Certificate serial: 0288
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft
Manifest number: 079F
Signing time: Sat 14 Nov 2026 23:18:38 +0000
Manifest this update: Sat 14 Nov 2026 23:18:37 +0000
Manifest next update: Sat 21 Nov 2026 23:18:37 +0000
Files and hashes: 1: -JdCLlAQBtJgHYWlAXlTJrr-c4g.crl (hash: XlCr3WvDSlnArjscRX1x58sSDWiWlFbDWe0nrRex/14=)
2: C5C77866584111EE85E40820C4F9AE02.roa (hash: o09B0PsJspIE7YM1wHmZQROS9GUS/vHR3P6a96Hv63k=)
3: C44DEE8E584111EE85E40820C4F9AE02.roa (hash: KPudjn9fAIyxH6iO+Vq+v5F8LqajNGVdpDuC+DrMuA0=)
4: C4D7F9DA584111EE85E40820C4F9AE02.roa (hash: B9f80EoI0x+BIg2AFxeHEGvINQTmjdsYocZpJvfDc0A=)
5: C55784DE584111EE85E40820C4F9AE02.roa (hash: HVeRuKGPvgRMfPHsqbyGBs/7U9hBE+gCk7rxayLwau8=)
6: F2706122D16E11F08E21851DC4F9AE02.roa (hash: U5FE2Jl9i12aLoYdhP4eL42j8vYOgjImKvyyJ7bw++c=)
7: 14553DF893F711F18D8243663911F970.roa (hash: tj2oOYMVOIbsggb7cEy4mKeuFf8hW8OpJ6SdrtBFAtY=)
8: E6C709BAEADD11F088D8AEF6666F56BC.roa (hash: vC4STLzHVCOMzh9f2GrOs/JinLrCWg2GfnKg/8s/U3g=)
9: 60579226AE0711F1AD8899954B11F970.roa (hash: 3jDhj2Pq9BBqQFus0YIz2v6pAN3jD4Crnk6VKCZLZhg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.crl
rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 23:18:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 648 (0x288)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170829, serialNumber=F897422E501006D2601D85A501795326BAFE7388
Validity
Not Before: Nov 14 23:18:37 2026 GMT
Not After : Nov 21 23:18:37 2026 GMT
Subject: CN=6af8ec4e-ffd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:70:17:eb:83:ce:dd:a3:c4:d6:ea:d0:98:3b:
93:9f:5a:65:11:ea:fd:ed:62:9e:63:27:fd:50:3b:
75:83:19:9f:ee:99:53:b3:06:a3:75:c5:51:c9:ac:
57:bb:62:3f:6b:8c:d3:a2:15:2d:65:9c:85:d4:7d:
b2:91:10:c9:26:d1:78:1c:1b:45:2c:a4:f7:fd:25:
4b:55:27:24:f6:77:7b:6e:2b:79:5b:bb:08:71:6b:
b5:5f:95:77:21:1b:9a:0a:a9:40:d9:86:83:55:cb:
8d:46:a0:d8:21:6f:1c:44:1b:ab:50:4c:26:d3:4c:
86:29:d3:73:d5:37:1f:85:80:63:62:1a:33:6d:76:
e5:c5:7c:8e:54:89:f2:58:e3:7b:5e:ca:bd:cf:48:
0b:9b:37:d7:5d:cc:b1:b7:d5:54:ae:26:31:06:37:
59:1b:55:d7:66:e2:74:45:cd:a6:1f:e7:0d:e8:13:
0d:01:cc:be:b8:4a:3b:f9:f2:53:47:02:f7:38:68:
fd:09:11:4d:f4:d4:00:41:28:61:f3:91:f0:41:b2:
87:3c:c1:80:81:e7:9a:01:4c:32:68:a7:74:18:37:
33:3c:92:ae:67:a4:46:91:b5:28:7f:f6:98:a2:1c:
04:66:1e:7d:9c:f8:6c:36:65:70:28:3d:c5:50:ea:
84:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B8:1E:79:4E:0D:D3:6E:99:FB:28:26:12:13:49:EC:49:10:7B:30
X509v3 Authority Key Identifier:
keyid:F8:97:42:2E:50:10:06:D2:60:1D:85:A5:01:79:53:26:BA:FE:73:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:2c:3d:ab:0a:7f:65:6c:9a:0e:a2:f2:63:91:c9:d7:92:ff:
77:82:a6:cd:5a:71:1a:ee:97:7d:eb:48:04:05:15:10:35:22:
56:8a:6a:48:bf:e7:b8:3f:10:27:f8:e6:98:e5:59:05:32:0f:
eb:a8:2e:7a:62:46:20:e0:7d:81:5f:d1:c9:6d:e9:c8:dd:84:
a0:bb:fc:dd:6a:93:10:76:5b:65:40:ea:ca:69:ed:87:43:81:
a4:2a:34:77:2e:8a:e9:4c:11:4e:4e:99:19:2a:ed:8b:61:f4:
7a:15:58:ab:c4:29:67:e3:53:d5:dc:ec:f4:42:ef:0e:b6:04:
d1:65:5a:17:15:cf:e0:66:b5:7e:24:64:a9:ce:31:59:24:fc:
60:38:c5:48:af:40:76:aa:d2:bb:dd:48:47:a1:80:23:b8:d7:
e1:36:fc:33:fa:a7:24:f2:06:1b:59:a6:c9:fe:a8:7f:92:7b:
58:7d:40:7e:2d:75:52:ed:4a:84:f7:1b:6b:a2:c0:4d:10:b9:
4f:58:2e:ee:ad:83:ed:22:18:28:91:3f:05:90:ce:15:f0:dd:
75:ff:10:30:96:94:6e:0c:2a:90:d2:6a:48:28:99:23:fd:99:
8f:98:a5:15:1a:11:37:06:37:4e:a0:5e:85:26:01:02:78:ea:
b5:2b:f5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:37:41 2026 by rpki-client