
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft
File: jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft (raw, json)
Hash identifier: H/4nUARmr+bBJBsWPecA9yJJqRbxwBXojoz5si/SBcw=
Subject key identifier: ED:2C:BA:7B:53:1C:5A:83:53:92:C6:28:E2:7F:E1:36:CF:3B:DB:9A
Authority key identifier: 8E:52:61:23:EF:52:CF:84:95:58:26:A2:72:8A:33:07:57:F1:E8:0C
Certificate issuer: /CN=A917A2D1/serialNumber=8E526123EF52CF84955826A2728A330757F1E80C
Certificate serial: 0141
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft
Manifest number: 013C
Signing time: Wed 25 Mar 2026 04:34:57 +0000
Manifest this update: Wed 25 Mar 2026 04:34:56 +0000
Manifest next update: Wed 01 Apr 2026 04:34:56 +0000
Files and hashes: 1: jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl (hash: mPhoYGm9f6ogJI7cV38QDShU/rU2SBQO/nRaB61jeeE=)
2: 29703A0645A911EF965B5A37C4F9AE02.roa (hash: 4wQRTSw2OhfPX3cX/N9IwTaFMJyIxBXNPos7xtpMpfE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl
rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:34:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 321 (0x141)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A2D1, serialNumber=8E526123EF52CF84955826A2728A330757F1E80C
Validity
Not Before: Mar 25 04:34:56 2026 GMT
Not After : Apr 1 04:34:56 2026 GMT
Subject: CN=69c365f1-390b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:13:01:28:33:f3:cc:30:a7:9f:b1:34:9f:d9:
a6:c7:9e:cb:9d:a2:4e:1d:76:48:05:6d:5d:09:ed:
d6:44:18:a7:62:e5:5c:7c:0c:52:99:39:a0:d2:5a:
62:cf:2b:71:3d:1c:42:f0:61:25:07:b1:2c:18:ce:
c4:65:e1:de:63:01:03:8d:46:10:a6:78:f4:e6:87:
8d:c6:ba:ba:e9:e3:82:ea:67:10:19:8a:3c:7f:64:
ee:b5:38:5e:34:33:c5:a0:be:b6:62:13:d4:78:98:
e4:91:25:b0:ee:a9:88:74:67:a0:92:03:f1:27:45:
a7:ac:db:98:f3:d0:fb:55:ae:29:63:d0:17:31:f3:
52:14:47:27:b2:9a:b3:50:f0:9d:71:3b:82:4a:af:
e2:99:23:7d:d0:b9:5a:b5:17:18:af:8a:c3:68:12:
49:fc:02:30:72:b5:a8:53:6a:a2:f2:13:88:7d:a6:
07:6a:a2:28:43:3a:a0:58:1f:62:8c:54:b1:86:e4:
c9:b9:da:d7:95:1b:7e:06:5c:d9:dd:4c:2a:9b:23:
e7:9e:fd:4a:c7:e4:07:a1:2f:1f:92:dd:af:17:a5:
c8:37:71:a0:6e:54:17:83:b1:2f:84:5e:ca:b8:87:
65:fa:d0:76:7f:11:1b:47:fa:4c:df:55:55:0b:4c:
b8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:2C:BA:7B:53:1C:5A:83:53:92:C6:28:E2:7F:E1:36:CF:3B:DB:9A
X509v3 Authority Key Identifier:
keyid:8E:52:61:23:EF:52:CF:84:95:58:26:A2:72:8A:33:07:57:F1:E8:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:de:40:2f:5d:aa:67:67:32:62:47:d1:2f:44:b2:2b:33:03:
e8:ae:d6:24:3d:dc:de:bc:a8:d5:cc:e5:89:a4:d5:82:4b:46:
7e:07:46:cc:c4:64:47:26:bc:a2:a3:c5:0f:df:21:bb:0b:99:
2f:47:8d:16:11:28:d5:64:72:f3:b8:2c:25:fc:96:52:ac:f6:
9f:6e:f9:f5:90:e8:7b:db:f2:82:9c:e1:ae:38:3f:8c:f4:ef:
e2:34:aa:8e:de:c3:ee:8f:a5:cb:39:c6:42:c0:b2:03:c5:51:
e7:93:75:c6:18:a4:1c:6f:62:ec:70:11:ca:67:5d:17:49:40:
4a:7c:0b:aa:a2:48:06:80:4a:5f:b8:0c:81:ae:2e:e2:ce:b3:
6c:cd:da:07:42:d2:4b:c0:61:d4:60:be:e2:df:46:91:62:f2:
cc:5e:51:f9:a7:8b:19:26:e0:cb:79:ee:d0:fd:fa:30:d8:5d:
28:ba:26:d4:a3:85:56:b3:74:e3:4f:26:8c:74:49:fc:f7:4b:
76:02:e2:5a:bc:da:c1:e1:e7:be:db:d6:dc:dd:86:64:40:0c:
05:02:10:4a:ae:d3:65:86:9b:7b:cb:af:ec:47:ae:19:b3:38:
66:1a:06:f1:28:a1:e1:5b:02:01:02:1b:ca:48:ea:0a:49:cc:
2f:e2:ef:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:54:55 2026 by rpki-client