
$ rpki-client -vvf rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft
File: jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft (raw, json)
Hash identifier: DtWSUTgGQb6TVJpp6T4rRX6f2aP3zyaKDXq0HDwjNIQ=
Subject key identifier: A1:3A:3B:12:2F:FC:A0:44:9E:6A:6F:20:89:5E:7A:7D:F6:C3:44:3A
Authority key identifier: 8D:CD:E5:2B:9B:8B:05:22:BE:26:71:3A:41:86:56:70:A6:1E:E8:6D
Certificate issuer: /CN=A9181375/serialNumber=8DCDE52B9B8B0522BE26713A41865670A61EE86D
Certificate serial: 016A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft
Manifest number: 0163
Signing time: Wed 25 Mar 2026 04:17:10 +0000
Manifest this update: Wed 25 Mar 2026 04:17:09 +0000
Manifest next update: Wed 01 Apr 2026 04:17:09 +0000
Files and hashes: 1: jc3lK5uLBSK-JnE6QYZWcKYe6G0.crl (hash: X3NLkDZ6maSpzwQZnTufgMCPNPlySaxz7pvJF/VIHks=)
2: A51B73A01F0711EFB7C30655C4F9AE02.roa (hash: gywHrBDOisk4NwQExOTjeY31/f6L9eZJuRiuNkwPekg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.crl
rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:17:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 362 (0x16a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9181375, serialNumber=8DCDE52B9B8B0522BE26713A41865670A61EE86D
Validity
Not Before: Mar 25 04:17:09 2026 GMT
Not After : Apr 1 04:17:09 2026 GMT
Subject: CN=69c361c5-6a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a0:1e:e8:bc:5f:26:4b:e1:07:63:fd:8c:f5:
a3:d7:44:ca:5a:bf:72:b1:cf:1b:9a:2e:d0:ee:4f:
73:fb:7e:b9:db:ae:a0:36:9a:49:72:12:08:46:9e:
31:01:07:8c:07:b8:d3:d6:97:c5:04:53:b2:14:e1:
33:fc:58:06:42:58:a4:46:19:be:91:bb:94:5c:73:
96:ad:88:b3:d9:97:58:1e:3c:07:1d:91:c2:4b:ff:
e5:08:db:50:32:1e:10:13:47:35:f0:80:67:38:ed:
df:90:30:16:92:ce:f9:08:7c:ae:ac:68:92:b7:f3:
63:0d:b6:98:21:3e:79:1d:e2:08:7a:0b:e9:81:71:
27:ba:81:e9:82:2a:d5:58:f2:b0:eb:01:be:e6:16:
a7:e0:38:9e:f7:58:c1:02:59:80:e7:5a:54:54:4a:
9e:c1:f1:c9:ec:82:41:07:f5:b4:e3:bf:75:2a:1b:
d2:57:0b:2a:b4:ed:82:36:ea:0f:bb:a1:34:d6:7d:
d0:13:c9:da:8e:19:ab:9f:94:b2:f9:ee:3d:3e:c4:
77:4a:a4:25:23:c3:93:2a:c0:58:12:25:a7:b0:e0:
8b:cb:fd:85:71:ed:da:6e:30:c5:53:e9:8c:b0:01:
9d:c6:3f:44:5e:d1:0c:86:af:56:cb:20:eb:28:ae:
e3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:3A:3B:12:2F:FC:A0:44:9E:6A:6F:20:89:5E:7A:7D:F6:C3:44:3A
X509v3 Authority Key Identifier:
keyid:8D:CD:E5:2B:9B:8B:05:22:BE:26:71:3A:41:86:56:70:A6:1E:E8:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:c3:aa:85:c2:e8:67:09:84:8a:22:b6:45:17:b2:9b:53:80:
ee:47:b8:08:db:ab:d1:14:3a:81:5c:ac:af:7d:b0:7e:1d:ce:
6d:ad:33:16:a0:12:07:1b:79:c3:e5:b4:f0:f2:35:f9:34:9f:
a2:1a:1c:d9:35:72:8f:4d:59:d9:55:c4:cc:c7:8e:ba:a0:51:
5a:13:de:cb:a1:2e:0f:ee:bb:1f:89:1f:f2:d1:67:c4:a8:8b:
a6:16:c7:3b:71:db:32:d1:3f:03:05:15:df:81:d4:17:1f:d3:
dd:ff:fd:43:a3:21:af:89:3d:d2:00:ee:fe:35:8a:c7:06:0f:
c6:05:5a:25:80:b3:01:74:9e:d5:48:d6:a1:14:8a:4a:d0:4d:
d9:b6:da:97:4a:ef:03:95:26:34:2d:e5:37:ee:19:42:e7:7d:
3e:b5:63:ea:18:09:b6:61:fe:42:68:26:6f:3f:41:be:4c:00:
64:4b:ef:da:08:d4:75:a7:da:cb:ed:7e:d6:78:51:8c:ad:b5:
b3:9e:d4:e7:a2:80:78:2d:16:36:70:3a:24:bc:a1:97:b5:c7:
69:e6:8f:81:ed:a2:5f:69:cf:ac:20:6f:23:98:f5:b3:22:5a:
23:9c:e3:41:ce:d2:dc:2b:c4:92:da:49:ee:ea:70:e3:2f:00:
da:05:16:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:59:09 2026 by rpki-client