
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.mft
File: JaQw8WuofbvVFVMhuA-CAeVt6v0.mft (raw, json)
Hash identifier: m0PCgJKH6laTzdIZg3JwXDjlThgn7qHrOhy2RPNf3OQ=
Subject key identifier: 09:3F:15:3B:D8:D9:C5:D1:54:06:05:CB:1A:83:0C:28:8B:57:A9:9E
Authority key identifier: 25:A4:30:F1:6B:A8:7D:BB:D5:15:53:21:B8:0F:82:01:E5:6D:EA:FD
Certificate issuer: /CN=A9175F5F/serialNumber=25A430F16BA87DBBD5155321B80F8201E56DEAFD
Certificate serial: 0BA7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaQw8WuofbvVFVMhuA-CAeVt6v0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.mft
Manifest number: 0B9E
Signing time: Tue 24 Mar 2026 18:52:02 +0000
Manifest this update: Tue 24 Mar 2026 18:52:02 +0000
Manifest next update: Tue 31 Mar 2026 18:52:02 +0000
Files and hashes: 1: JaQw8WuofbvVFVMhuA-CAeVt6v0.crl (hash: lYmbiKPK8DT5YM9lY2KS9/algp5r0mjAwtII32ikw3s=)
2: 49CE816E430A11EAA674EA74C4F9AE02.roa (hash: nzu6xGAZVwQN3sFL3XLygbLgrfyY1tLxmnEus1wus5o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.crl
rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaQw8WuofbvVFVMhuA-CAeVt6v0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:52:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2983 (0xba7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175F5F, serialNumber=25A430F16BA87DBBD5155321B80F8201E56DEAFD
Validity
Not Before: Mar 24 18:52:02 2026 GMT
Not After : Mar 31 18:52:02 2026 GMT
Subject: CN=69c2dd52-a7ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4c:ea:14:a3:cd:7d:7f:5f:47:56:78:f5:f8:
89:bf:fd:a2:c0:0c:fe:85:83:65:ea:d3:38:7b:5a:
18:03:bf:d9:76:71:29:dc:c0:31:83:15:51:e2:a3:
51:84:21:97:94:49:4c:b4:65:4a:68:5b:bd:3b:31:
37:e7:d9:a1:94:86:50:3a:fe:0a:e4:52:6f:b4:f3:
d2:15:ac:b3:dc:53:a1:83:1c:0b:e2:07:8f:11:32:
8f:e6:a4:1d:ef:b6:08:ed:7a:e9:17:b0:55:10:3b:
3a:e6:94:e0:c0:5e:b7:69:61:61:f3:73:35:67:d2:
0d:39:ad:fc:02:80:c0:71:99:5b:29:dd:77:14:3d:
0f:02:5e:50:4a:11:f1:b7:bf:1d:32:eb:a2:7a:66:
09:ad:a3:63:6b:4b:75:7b:93:50:7b:a3:ba:0c:ed:
97:cd:5a:7e:fd:01:2e:a9:05:a6:70:d2:96:df:61:
35:2e:e6:ec:b0:f2:b3:7d:75:7a:85:43:44:89:b1:
96:7b:f4:6f:41:c9:7c:e1:5e:44:73:fa:0f:d9:09:
16:d8:10:4c:d9:59:4f:e1:61:94:7d:98:15:7d:09:
af:c4:1a:51:0a:38:97:9d:dd:c0:a6:b0:81:00:3c:
0a:3b:6d:80:f7:4c:ac:63:eb:f5:e6:25:74:9c:aa:
7a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:3F:15:3B:D8:D9:C5:D1:54:06:05:CB:1A:83:0C:28:8B:57:A9:9E
X509v3 Authority Key Identifier:
keyid:25:A4:30:F1:6B:A8:7D:BB:D5:15:53:21:B8:0F:82:01:E5:6D:EA:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaQw8WuofbvVFVMhuA-CAeVt6v0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:1b:93:a4:38:f1:2a:4d:ed:8c:9f:c4:2b:5e:2c:54:16:98:
6c:19:09:3a:07:9f:a4:3b:73:34:95:7f:bc:3b:03:3d:77:5a:
aa:c4:af:db:f5:2f:7f:bb:9c:8d:42:66:27:86:2f:89:30:e1:
27:2d:89:6e:9f:30:2b:9f:23:7a:15:6e:23:73:6e:5c:3f:ed:
a6:0d:b1:77:f7:bb:c2:b7:e7:aa:e2:b3:81:7b:28:3e:66:81:
c4:91:a5:b6:98:b3:f0:83:e7:ff:8d:95:4b:0c:5a:a4:fb:a3:
e3:c9:e7:d3:12:3b:e9:fb:00:31:0c:e2:71:f3:79:c0:1d:e7:
ad:e9:f7:78:0a:e3:96:3e:b7:f1:56:71:7c:7a:5f:d1:93:10:
58:20:cd:57:4b:67:26:f5:31:0b:e2:21:a1:7c:42:1b:5a:28:
59:67:27:e4:11:21:9e:42:c0:07:e3:b9:91:58:a5:4a:ea:56:
28:f4:75:2f:65:7f:54:bf:b5:d8:14:ef:9d:d0:2a:9a:c0:33:
4d:34:e4:8b:f8:a2:58:94:a8:db:98:42:d0:6b:de:dd:08:ae:
28:9d:1c:9f:16:b9:85:cc:36:d4:05:84:29:d3:d6:1f:8f:13:
05:e3:05:eb:0a:ad:af:ae:7a:a6:e2:73:ac:7a:07:12:81:0a:
ac:fa:d8:ca
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC6cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzVGNUYxMTAvBgNVBAUTKDI1QTQzMEYxNkJBODdEQkJENTE1NTMyMUI4MEY4MjAx
RTU2REVBRkQwHhcNMjYwMzI0MTg1MjAyWhcNMjYwMzMxMTg1MjAyWjAYMRYwFAYD
VQQDEw02OWMyZGQ1Mi1hN2FiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv0zqFKPNfX9fR1Z49fiJv/2iwAz+hYNl6tM4e1oYA7/ZdnEp3MAxgxVR4qNR
hCGXlElMtGVKaFu9OzE359mhlIZQOv4K5FJvtPPSFayz3FOhgxwL4gePETKP5qQd
77YI7XrpF7BVEDs65pTgwF63aWFh83M1Z9INOa38AoDAcZlbKd13FD0PAl5QShHx
t78dMuuiemYJraNja0t1e5NQe6O6DO2XzVp+/QEuqQWmcNKW32E1LubssPKzfXV6
hUNEibGWe/RvQcl84V5Ec/oP2QkW2BBM2VlP4WGUfZgVfQmvxBpRCjiXnd3AprCB
ADwKO22A90ysY+v15iV0nKp64wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAk/FTvY
2cXRVAYFyxqDDCiLV6meMB8GA1UdIwQYMBaAFCWkMPFrqH271RVTIbgPggHlber9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUY1Ri83MDExRkRCMjQz
MDgxMUVBODE5NEE2NkVDNEY5QUUwMi9KYVF3OFd1b2ZidlZGVk1odUEtQ0FlVnQ2
djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0phUXc4V3VvZmJ2VkZWTWh1QS1DQWVWdDZ2MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NUY1Ri83MDExRkRCMjQzMDgxMUVBODE5NEE2NkVDNEY5QUUwMi9KYVF3OFd1b2Zi
dlZGVk1odUEtQ0FlVnQ2djAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfRuTpDjxKk3tjJ/EK14sVBaYbBkJOgefpDtzNJV/vDsDPXdaqsSv2/Uvf7uc
jUJmJ4YviTDhJy2Jbp8wK58jehVuI3NuXD/tpg2xd/e7wrfnquKzgXsoPmaBxJGl
tpiz8IPn/42VSwxapPuj48nn0xI76fsAMQzicfN5wB3nren3eArjlj638VZxfHpf
0ZMQWCDNV0tnJvUxC+IhoXxCG1ooWWcn5BEhnkLAB+O5kVilSupWKPR1L2V/VL+1
2BTvndAqmsAzTTTki/iiWJSo25hC0Gve3QiuKJ0cnxa5hcw21AWEKdPWH48TBeMF
6wqtr656puJzrHoHEoEKrPrYyg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:19:38 2026 by rpki-client