
$ rpki-client -vvf rpki.apnic.net/member_repository/A9177C3F/D737437E733311F0839CDC83C4F9AE02/JGQlARmdbB3pb6P_Lr5new4DDRA.mft
File: JGQlARmdbB3pb6P_Lr5new4DDRA.mft (raw, json)
Hash identifier: Jql5zqR6ftE9A64BJqCgeTvulT3Kkg6XOQmBtM0gAn8=
Subject key identifier: 22:D2:6B:03:30:6D:48:20:0F:D3:CC:6D:7F:EC:5D:DC:32:69:BD:A7
Authority key identifier: 24:64:25:01:19:9D:6C:1D:E9:6F:A3:FF:2E:BE:67:7B:0E:03:0D:10
Certificate issuer: /CN=A9177C3F/serialNumber=24642501199D6C1DE96FA3FF2EBE677B0E030D10
Certificate serial: B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JGQlARmdbB3pb6P_Lr5new4DDRA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9177C3F/D737437E733311F0839CDC83C4F9AE02/JGQlARmdbB3pb6P_Lr5new4DDRA.mft
Manifest number: B4
Signing time: Thu 23 Jul 2026 08:55:52 +0000
Manifest this update: Thu 23 Jul 2026 08:55:51 +0000
Manifest next update: Thu 30 Jul 2026 08:55:51 +0000
Files and hashes: 1: JGQlARmdbB3pb6P_Lr5new4DDRA.crl (hash: JQP5I6A+5gzKTvEsYFHYjR2RrUhgfjIcoa7Tqy5pjiM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9177C3F/D737437E733311F0839CDC83C4F9AE02/JGQlARmdbB3pb6P_Lr5new4DDRA.crl
rsync://rpki.apnic.net/member_repository/A9177C3F/D737437E733311F0839CDC83C4F9AE02/JGQlARmdbB3pb6P_Lr5new4DDRA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JGQlARmdbB3pb6P_Lr5new4DDRA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:55:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180 (0xb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9177C3F, serialNumber=24642501199D6C1DE96FA3FF2EBE677B0E030D10
Validity
Not Before: Jul 23 08:55:51 2026 GMT
Not After : Jul 30 08:55:51 2026 GMT
Subject: CN=6a61d718-4718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:38:18:62:c6:ca:a8:e5:cc:3e:d4:c6:f8:35:
d9:4d:b2:ed:b1:19:89:12:e9:30:4d:46:a3:e0:64:
13:57:35:54:ef:03:ce:88:0f:4d:17:80:df:4e:dc:
69:66:91:4d:41:1e:be:8b:e9:d6:57:85:8b:02:76:
2a:78:d4:77:af:25:0f:ea:1f:04:dc:a8:de:10:15:
fb:67:ea:dc:71:14:c2:ab:58:0f:d9:fd:40:0b:e3:
51:ef:09:0c:c1:18:b5:ff:5a:d5:3b:ec:e9:77:7e:
33:8d:7a:23:10:88:69:0d:ac:56:e5:5f:3a:c5:4e:
76:80:c6:c8:04:80:6b:77:4a:0e:04:8b:44:3c:1e:
a8:ff:95:2e:da:14:41:a3:a9:df:d9:20:fc:9d:10:
73:37:d3:86:bd:84:d3:e5:82:49:84:a0:20:cd:43:
cf:fb:0a:02:a5:0a:f5:38:79:a7:03:37:b6:13:cf:
1e:60:71:35:cd:76:ba:90:35:16:8f:ff:e2:40:f7:
4e:6c:92:bf:cf:69:78:51:90:82:1e:2c:3d:d3:4b:
0b:7d:a1:34:76:16:96:2f:74:71:95:7b:4a:da:15:
a9:ea:19:61:b6:a2:ed:5c:18:a1:95:a0:33:1d:d8:
59:51:20:ed:89:0f:b5:d6:67:3f:92:e7:e9:3a:59:
6e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D2:6B:03:30:6D:48:20:0F:D3:CC:6D:7F:EC:5D:DC:32:69:BD:A7
X509v3 Authority Key Identifier:
keyid:24:64:25:01:19:9D:6C:1D:E9:6F:A3:FF:2E:BE:67:7B:0E:03:0D:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9177C3F/D737437E733311F0839CDC83C4F9AE02/JGQlARmdbB3pb6P_Lr5new4DDRA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JGQlARmdbB3pb6P_Lr5new4DDRA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177C3F/D737437E733311F0839CDC83C4F9AE02/JGQlARmdbB3pb6P_Lr5new4DDRA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:c8:34:f9:05:67:a8:8a:d4:d5:0c:07:b1:2f:15:87:8f:c7:
db:92:c3:a1:81:89:2b:29:6c:43:b1:c0:03:1c:3f:ac:51:f6:
7d:6b:8d:92:fc:b2:8b:99:fa:08:f3:92:92:ce:d6:03:1a:b2:
19:60:16:dc:e7:9e:a8:7a:ef:01:80:a1:c7:e3:03:93:3a:80:
a1:56:92:90:97:5f:ff:e4:c9:81:29:b2:e6:e0:47:af:6b:43:
56:fc:0f:27:18:1b:ca:fd:bb:5b:aa:e0:38:97:d1:0d:05:14:
01:e5:8b:9c:45:8b:4f:b7:0e:21:3a:ec:5d:29:d1:34:f3:aa:
6a:48:ee:f0:5b:48:c1:56:79:77:22:ba:2d:71:f4:d6:d9:85:
43:e4:9e:6e:f5:4d:80:01:be:18:30:05:2d:f7:36:d0:1e:da:
e3:1b:ed:f6:c8:0e:cb:e3:1c:ae:6b:2f:60:ef:2a:88:27:65:
58:d8:12:4d:44:e4:d4:62:58:4a:8b:dd:81:e7:ab:0c:fb:36:
29:3f:f0:79:65:39:35:b7:d0:ba:a0:39:c2:50:d5:c3:e2:08:
e8:f6:f4:36:b9:ee:e8:b1:61:8b:86:f2:41:64:b4:ba:ae:74:
b2:5a:74:eb:e2:b2:d2:44:de:5a:7d:2b:45:09:e1:a7:ff:4d:
42:f6:b0:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:47:08 2026 by rpki-client