
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9177C3F/D737437E733311F0839CDC83C4F9AE02/JGQlARmdbB3pb6P_Lr5new4DDRA.mft
File: JGQlARmdbB3pb6P_Lr5new4DDRA.mft (raw, json)
Hash identifier: dKwJ35Bt42XStZSFvli1fv8I1LnjYF6TpavwoZXdrGM=
Subject key identifier: 77:64:FE:E8:43:81:CB:45:46:57:41:BF:F8:29:F3:0B:06:C9:0B:A4
Authority key identifier: 24:64:25:01:19:9D:6C:1D:E9:6F:A3:FF:2E:BE:67:7B:0E:03:0D:10
Certificate issuer: /CN=A9177C3F/serialNumber=24642501199D6C1DE96FA3FF2EBE677B0E030D10
Certificate serial: D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JGQlARmdbB3pb6P_Lr5new4DDRA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9177C3F/D737437E733311F0839CDC83C4F9AE02/JGQlARmdbB3pb6P_Lr5new4DDRA.mft
Manifest number: D3
Signing time: Mon 21 Sep 2026 06:40:51 +0000
Manifest this update: Mon 21 Sep 2026 06:40:51 +0000
Manifest next update: Mon 28 Sep 2026 06:40:51 +0000
Files and hashes: 1: JGQlARmdbB3pb6P_Lr5new4DDRA.crl (hash: ICJ78oAYlNtPC+3JHbB6aHgh+ZbVfUJhpQF4pS0cnkk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9177C3F/D737437E733311F0839CDC83C4F9AE02/JGQlARmdbB3pb6P_Lr5new4DDRA.crl
rsync://rpki.apnic.net/member_repository/A9177C3F/D737437E733311F0839CDC83C4F9AE02/JGQlARmdbB3pb6P_Lr5new4DDRA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JGQlARmdbB3pb6P_Lr5new4DDRA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 06:40:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 211 (0xd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9177C3F, serialNumber=24642501199D6C1DE96FA3FF2EBE677B0E030D10
Validity
Not Before: Sep 21 06:40:51 2026 GMT
Not After : Sep 28 06:40:51 2026 GMT
Subject: CN=6ab0d173-d6bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a6:ab:67:28:71:ea:44:ea:d0:ee:cc:b3:46:
cc:76:30:80:75:bc:6f:85:eb:c3:07:e7:9c:c4:bd:
8c:7d:34:2e:40:68:f7:2d:52:c2:0d:81:97:56:94:
31:51:a5:fb:3e:6f:97:02:08:ea:b8:31:d1:b1:64:
fc:c3:6d:73:35:a1:68:2b:52:c5:9d:e9:ab:f2:27:
55:c2:90:41:e0:35:ba:be:38:6e:19:2e:8e:40:67:
fb:7e:f4:ca:50:4f:a7:01:fb:8e:9a:7a:86:e5:b7:
54:ce:ac:46:0d:1f:65:ed:e5:56:de:6f:4f:71:26:
07:9e:4c:77:bf:30:20:d7:db:1d:63:21:33:2e:d5:
4d:02:98:6f:49:3e:ef:79:c6:3c:84:4a:d7:28:98:
29:40:a2:ac:c5:45:8b:b0:c0:2c:6e:8f:d2:8d:92:
9d:48:6b:44:55:13:8d:66:bc:06:7b:0b:fe:58:c9:
6e:69:88:e7:e5:98:53:ce:35:12:dc:d5:7d:fd:65:
0c:c6:8d:37:4f:50:27:24:7d:3e:c3:35:b7:9d:57:
de:12:f1:9f:35:a5:94:b7:1b:38:10:fc:f5:7e:da:
a3:e1:ac:92:e1:c3:2b:ff:77:72:38:7e:87:bc:7a:
6e:05:88:39:0d:e2:f5:5a:49:04:8f:2e:e5:09:5d:
a6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:64:FE:E8:43:81:CB:45:46:57:41:BF:F8:29:F3:0B:06:C9:0B:A4
X509v3 Authority Key Identifier:
keyid:24:64:25:01:19:9D:6C:1D:E9:6F:A3:FF:2E:BE:67:7B:0E:03:0D:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9177C3F/D737437E733311F0839CDC83C4F9AE02/JGQlARmdbB3pb6P_Lr5new4DDRA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JGQlARmdbB3pb6P_Lr5new4DDRA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177C3F/D737437E733311F0839CDC83C4F9AE02/JGQlARmdbB3pb6P_Lr5new4DDRA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:0a:92:75:b8:d5:65:f0:ae:a7:2e:a6:f9:72:8f:ed:00:78:
7c:a0:40:c5:ec:bf:a6:9c:4f:79:2d:98:95:20:3c:89:28:5a:
11:a7:22:ec:e7:75:a1:40:cf:45:51:9b:cd:97:82:51:2c:ab:
88:44:f3:37:0b:0c:c2:87:f5:fc:dd:e0:df:8c:4c:c1:50:32:
b6:39:dc:0c:ab:04:25:f1:4d:e3:3a:ba:8f:0f:db:f6:c4:40:
fb:d5:14:ba:eb:cb:20:2e:ca:d1:1e:50:1c:23:d1:56:d1:90:
68:6c:eb:3c:df:80:96:be:78:6f:7d:3c:79:24:c0:c7:ab:a5:
58:97:17:d2:c9:18:4d:dc:ea:5f:2b:2a:15:44:15:f1:c0:be:
0a:30:85:3f:85:d9:cc:79:27:23:79:38:b2:80:c4:1a:34:96:
b9:91:55:ca:4c:0b:6c:0a:cf:3d:a3:20:e2:b2:73:13:c3:10:
05:e2:b3:f4:db:08:68:95:35:49:86:cf:98:e8:c7:7f:28:48:
c4:d4:bb:15:97:f2:dd:99:01:59:49:26:7e:27:04:fe:2b:db:
73:58:f0:17:69:c8:3f:77:47:d8:ab:92:de:7a:6e:a6:23:d0:
c3:4d:8d:a0:8b:c1:d6:8f:33:f3:fa:7f:1c:0b:9f:0e:e1:66:
37:41:e4:23
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzdDM0YxMTAvBgNVBAUTKDI0NjQyNTAxMTk5RDZDMURFOTZGQTNGRjJFQkU2NzdC
MEUwMzBEMTAwHhcNMjYwOTIxMDY0MDUxWhcNMjYwOTI4MDY0MDUxWjAYMRYwFAYD
VQQDEw02YWIwZDE3My1kNmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1aarZyhx6kTq0O7Ms0bMdjCAdbxvhevDB+ecxL2MfTQuQGj3LVLCDYGXVpQx
UaX7Pm+XAgjquDHRsWT8w21zNaFoK1LFnemr8idVwpBB4DW6vjhuGS6OQGf7fvTK
UE+nAfuOmnqG5bdUzqxGDR9l7eVW3m9PcSYHnkx3vzAg19sdYyEzLtVNAphvST7v
ecY8hErXKJgpQKKsxUWLsMAsbo/SjZKdSGtEVRONZrwGewv+WMluaYjn5ZhTzjUS
3NV9/WUMxo03T1AnJH0+wzW3nVfeEvGfNaWUtxs4EPz1ftqj4ayS4cMr/3dyOH6H
vHpuBYg5DeL1WkkEjy7lCV2mCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHdk/uhD
gctFRldBv/gp8wsGyQukMB8GA1UdIwQYMBaAFCRkJQEZnWwd6W+j/y6+Z3sOAw0Q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3N0MzRi9ENzM3NDM3RTcz
MzMxMUYwODM5Q0RDODNDNEY5QUUwMi9KR1FsQVJtZGJCM3BiNlBfTHI1bmV3NERE
UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pHUWxBUm1kYkIzcGI2UF9McjVuZXc0RERSQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
N0MzRi9ENzM3NDM3RTczMzMxMUYwODM5Q0RDODNDNEY5QUUwMi9KR1FsQVJtZGJC
M3BiNlBfTHI1bmV3NEREUkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfgqSdbjVZfCupy6m+XKP7QB4fKBAxey/ppxPeS2YlSA8iShaEaci7Od1oUDP
RVGbzZeCUSyriETzNwsMwof1/N3g34xMwVAytjncDKsEJfFN4zq6jw/b9sRA+9UU
uuvLIC7K0R5QHCPRVtGQaGzrPN+Alr54b308eSTAx6ulWJcX0skYTdzqXysqFUQV
8cC+CjCFP4XZzHknI3k4soDEGjSWuZFVykwLbArPPaMg4rJzE8MQBeKz9NsIaJU1
SYbPmOjHfyhIxNS7FZfy3ZkBWUkmficE/ivbc1jwF2nIP3dH2KuS3npupiPQw02N
oIvB1o8z8/p/HAufDuFmN0HkIw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 00:29:05 2026 by rpki-client