
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.mft
File: jgK1xN61PytxL_B33gSQg3XoE9s.mft (raw, json)
Hash identifier: 5jikgbZTfhwTTjmPdmFiFDGUdjnjBw3f/tQ3V2JJ6u8=
Subject key identifier: 93:71:04:B1:A3:C0:C3:C1:88:76:AC:B2:C8:4A:5D:1A:FA:D6:0D:3A
Authority key identifier: 8E:02:B5:C4:DE:B5:3F:2B:71:2F:F0:77:DE:04:90:83:75:E8:13:DB
Certificate issuer: /CN=A9185B6D/serialNumber=8E02B5C4DEB53F2B712FF077DE04908375E813DB
Certificate serial: 0182
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jgK1xN61PytxL_B33gSQg3XoE9s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.mft
Manifest number: 017B
Signing time: Wed 25 Mar 2026 03:55:38 +0000
Manifest this update: Wed 25 Mar 2026 03:55:37 +0000
Manifest next update: Wed 01 Apr 2026 03:55:37 +0000
Files and hashes: 1: jgK1xN61PytxL_B33gSQg3XoE9s.crl (hash: ydaBhA0lB8T2wBm/iFCSIb2brTI5+/B/dDMsgK1PFqk=)
2: 6F09FF784B3111F0AED6945EC4F9AE02.roa (hash: 9h9Wk9aH9jFwNi1AyO/YADoC/2y5/5H+OC8YAZoQcg8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.crl
rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jgK1xN61PytxL_B33gSQg3XoE9s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:55:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 386 (0x182)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185B6D, serialNumber=8E02B5C4DEB53F2B712FF077DE04908375E813DB
Validity
Not Before: Mar 25 03:55:37 2026 GMT
Not After : Apr 1 03:55:37 2026 GMT
Subject: CN=69c35cba-da36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f7:91:f0:0f:50:a9:5d:e1:ae:d5:e1:d5:1c:
b8:a0:3a:da:ea:e3:c9:16:73:4e:e9:1f:62:86:86:
60:06:90:55:93:03:8d:f2:45:a8:58:2f:18:df:99:
c4:3a:46:1b:9b:75:89:a8:05:7a:ad:38:59:45:1e:
40:41:c0:68:53:53:b1:ac:9c:60:eb:76:62:45:6c:
47:46:83:1f:f9:8d:50:ca:02:2b:20:b5:33:37:83:
c3:1d:12:58:7d:1f:bf:81:b1:5a:cb:ce:19:04:ac:
d8:e2:d6:77:7e:2d:97:4a:e6:8e:54:ce:c0:97:77:
d6:eb:80:91:18:77:0a:d4:36:7a:e3:73:b1:0b:91:
4b:ee:47:27:4f:5c:19:fa:ce:c3:18:2e:3d:c6:fe:
75:6a:d9:57:6e:15:6d:10:93:41:03:e4:98:db:39:
01:44:02:e9:d6:cb:16:81:0f:67:f7:5a:04:ec:96:
90:31:ba:d6:b1:33:4a:a7:3b:0b:fb:d4:f7:fc:13:
c8:7c:c2:dd:12:ff:08:6e:12:fa:cd:78:79:86:f6:
b9:df:48:e0:b1:37:d7:8e:81:8f:fe:61:98:d0:4f:
6e:0e:ca:cf:c3:65:91:78:a6:27:f0:97:20:2a:49:
92:6c:8a:46:7d:4d:84:17:a1:41:5c:87:01:26:0d:
77:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:71:04:B1:A3:C0:C3:C1:88:76:AC:B2:C8:4A:5D:1A:FA:D6:0D:3A
X509v3 Authority Key Identifier:
keyid:8E:02:B5:C4:DE:B5:3F:2B:71:2F:F0:77:DE:04:90:83:75:E8:13:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jgK1xN61PytxL_B33gSQg3XoE9s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b2:9b:14:45:fe:7e:d1:0b:50:b3:93:e4:20:87:52:e9:83:
79:04:51:03:a8:2d:c5:a9:ce:29:ae:aa:fe:89:99:94:06:b4:
f2:75:ea:5c:eb:8d:a1:b6:37:be:ed:36:2c:af:04:15:c4:f2:
5c:84:bd:6f:58:8d:ba:44:e8:12:af:99:17:a9:53:9c:1e:57:
25:30:7a:ff:b8:36:bc:f8:73:cc:84:cb:4b:1e:7f:12:06:3c:
2f:ce:81:d4:8c:8c:62:52:a5:c8:fc:b0:ce:aa:f5:dc:24:f0:
34:9a:74:75:fd:f1:31:75:8c:b7:74:8b:7c:fb:47:82:17:07:
f7:6d:f1:be:62:57:74:d6:43:42:d2:c5:e0:23:bd:dd:ba:06:
e2:7b:e6:9a:02:dd:c4:6a:a5:00:fb:d9:26:ee:99:9e:37:5c:
5a:3a:84:61:93:48:85:9a:cc:44:ac:80:5e:a0:13:0b:ec:c0:
90:8a:87:6c:00:38:60:4c:ed:50:1d:6a:0a:78:23:0a:08:64:
aa:11:18:9c:8e:cf:74:92:59:cf:63:47:97:57:5a:b8:f7:37:
7e:de:2f:55:be:ba:f2:1f:67:49:76:4a:56:94:16:42:a9:19:
83:da:b1:74:fe:0a:83:44:3d:bc:f9:49:10:e5:d6:b5:b7:db:
e7:57:2e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:09:59 2026 by rpki-client