
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.mft
File: JZaec6mNmfQurIlCbGuUk8hdMxo.mft (raw, json)
Hash identifier: xxBGDeKHOfDquQkCYDDtRaXUorL0Y3qF4Hv/mCTepdo=
Subject key identifier: 49:68:7F:56:8B:28:B0:57:EC:6B:4A:93:B8:13:D7:75:AE:F0:7D:7E
Authority key identifier: 25:96:9E:73:A9:8D:99:F4:2E:AC:89:42:6C:6B:94:93:C8:5D:33:1A
Certificate issuer: /CN=A9175911/serialNumber=25969E73A98D99F42EAC89426C6B9493C85D331A
Certificate serial: 01DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZaec6mNmfQurIlCbGuUk8hdMxo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.mft
Manifest number: 01D5
Signing time: Wed 25 Mar 2026 02:52:36 +0000
Manifest this update: Wed 25 Mar 2026 02:52:35 +0000
Manifest next update: Wed 01 Apr 2026 02:52:35 +0000
Files and hashes: 1: JZaec6mNmfQurIlCbGuUk8hdMxo.crl (hash: WvL5j/tJLucnBca0rDIyDbMlCXKM7NUPR9uzMwKhj9A=)
2: 06BD1FD4D76F11F0A9A4AAFE78D3641D.roa (hash: k0sV/nnMTcQ+QZMYrJ6bGT81fOOkNRl5QVlsLUS2Ohc=)
3: 07C2DDD0597011EE9C188A29C4F9AE02.roa (hash: iN39+EnjVXuf/m4HO8/ulEYF1izhl5IiYm+rBDnwUN4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.crl
rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZaec6mNmfQurIlCbGuUk8hdMxo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:52:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 475 (0x1db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175911, serialNumber=25969E73A98D99F42EAC89426C6B9493C85D331A
Validity
Not Before: Mar 25 02:52:35 2026 GMT
Not After : Apr 1 02:52:35 2026 GMT
Subject: CN=69c34df4-1a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:af:1d:3a:09:76:eb:9b:7b:a3:77:e6:56:63:
8c:54:82:cc:d7:06:0a:ec:46:13:30:1d:f5:1a:a9:
dc:f8:e3:b0:3e:ef:5d:5e:91:2f:d2:41:79:8c:07:
c8:4f:a7:8d:e4:4e:3c:9e:7c:e1:4e:78:87:3c:52:
6f:fe:bc:e7:a9:57:3a:f3:a2:99:cd:42:c8:5a:a2:
f6:f3:8c:7a:e5:9b:01:77:88:fc:bb:d1:dc:2b:88:
c6:6e:67:fd:c3:32:39:eb:07:6a:80:63:c8:ff:2b:
68:2b:5f:ac:23:7b:32:98:a7:9a:23:01:2c:f6:bf:
8e:09:cf:9f:af:7d:eb:13:d3:2b:8c:6b:35:df:16:
d9:e9:a9:4e:86:16:b1:fb:f3:d1:19:00:fe:64:ac:
b6:98:3d:31:2a:23:65:51:bd:55:ed:86:51:8e:62:
85:3e:84:b6:49:7f:38:0b:2b:d9:bf:19:cc:83:e9:
cb:25:c3:62:4d:d3:a5:0a:67:93:bf:46:f5:08:34:
24:f6:a0:17:da:63:ec:39:a9:93:c0:c8:9a:e0:bb:
24:65:5f:05:6d:d9:db:42:66:b3:16:34:79:31:0a:
1e:65:37:61:b4:fd:e3:4c:e2:24:99:fc:f1:c9:c1:
e4:8d:84:71:8d:57:5b:9f:7a:5a:96:0b:0c:82:25:
ca:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:68:7F:56:8B:28:B0:57:EC:6B:4A:93:B8:13:D7:75:AE:F0:7D:7E
X509v3 Authority Key Identifier:
keyid:25:96:9E:73:A9:8D:99:F4:2E:AC:89:42:6C:6B:94:93:C8:5D:33:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZaec6mNmfQurIlCbGuUk8hdMxo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:89:ee:91:ef:99:53:18:fc:88:41:46:12:ad:ff:d1:47:52:
a0:b3:8e:90:69:53:17:4b:85:7c:8a:3b:9b:2b:b4:c5:a8:40:
21:af:35:75:1d:76:3f:64:fb:87:54:5c:d9:8b:d7:65:50:ae:
d9:f4:e6:9f:86:9a:1a:b2:c4:52:5b:a4:07:b4:a8:a1:2f:4f:
78:26:2e:82:8e:ff:70:8a:6e:d5:45:1c:40:b2:f4:af:7b:ba:
bd:88:5e:67:52:94:3e:a4:9c:62:c4:76:3a:9c:6d:72:72:61:
03:9a:3a:b5:15:e4:35:25:27:ad:a5:a8:e2:da:69:77:a0:06:
8e:76:14:30:ae:90:d6:76:b9:3d:f5:56:c5:52:59:51:f3:df:
47:e7:83:e7:34:5c:28:78:c7:0d:71:2a:e0:03:3c:21:5f:58:
d5:5d:3f:a9:b4:76:d3:4a:56:0c:dd:7e:8c:18:96:7c:e8:4a:
5f:7b:67:a8:11:a3:a2:29:01:47:b0:36:49:94:82:78:6d:b3:
b4:55:4b:33:da:5c:68:12:fd:cb:83:d7:62:87:3c:fb:9e:73:
2a:99:38:b6:ca:26:e0:26:75:66:ff:99:fa:41:92:8f:6d:db:
6f:0c:a1:49:45:79:c4:23:44:ec:62:cf:de:bf:59:94:dc:c0:
ad:bb:b5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:52:00 2026 by rpki-client