
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.mft
File: JIouzMcPnj6YS7RvsZ3NOqmtkV8.mft (raw, json)
Hash identifier: pvKLIFOf2Lb0xqxqPi5tz0exKXS3R0Fi47Gb3leQgWY=
Subject key identifier: 9F:EA:E5:CC:8C:9B:F4:50:7A:4B:1D:82:90:F6:A0:2A:09:63:4B:99
Authority key identifier: 24:8A:2E:CC:C7:0F:9E:3E:98:4B:B4:6F:B1:9D:CD:3A:A9:AD:91:5F
Certificate issuer: /CN=A9198F67/serialNumber=248A2ECCC70F9E3E984BB46FB19DCD3AA9AD915F
Certificate serial: A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JIouzMcPnj6YS7RvsZ3NOqmtkV8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.mft
Manifest number: A5
Signing time: Wed 25 Mar 2026 06:29:47 +0000
Manifest this update: Wed 25 Mar 2026 06:29:46 +0000
Manifest next update: Wed 01 Apr 2026 06:29:46 +0000
Files and hashes: 1: JIouzMcPnj6YS7RvsZ3NOqmtkV8.crl (hash: Nya6Fxq0nJ3aCrA922ArfZ+kIUP3PJtNF3PeAmm8TFk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.crl
rsync://rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JIouzMcPnj6YS7RvsZ3NOqmtkV8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165 (0xa5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9198F67, serialNumber=248A2ECCC70F9E3E984BB46FB19DCD3AA9AD915F
Validity
Not Before: Mar 25 06:29:46 2026 GMT
Not After : Apr 1 06:29:46 2026 GMT
Subject: CN=69c380db-1a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:37:2d:3b:8c:ff:06:5b:5f:b0:f1:33:6a:29:
eb:7b:a2:31:e5:8e:86:57:7f:f5:b6:a7:b7:85:bf:
e9:9d:6c:4e:56:9f:56:81:5f:69:65:5a:76:ef:ec:
a9:c7:2e:c1:a2:5d:0f:80:80:3a:4f:c7:dc:5a:e5:
73:e8:1b:20:fb:77:69:32:26:32:d8:59:06:e0:07:
cf:60:9a:94:58:2c:9a:64:c4:96:83:bf:e6:07:b8:
ac:a5:33:25:dc:17:e8:82:a1:64:e6:87:65:cd:65:
cb:4e:7c:86:81:f3:8a:a8:1f:00:1d:76:7e:5c:af:
b5:8e:80:c5:d4:75:37:54:97:61:7f:14:6c:5a:1b:
5b:a8:b3:05:5d:83:f0:44:85:ea:bb:05:20:f0:44:
f3:45:51:c3:36:f8:cd:b0:77:2c:87:ab:fe:cb:aa:
b9:79:20:43:e9:f4:f7:e7:ac:60:b7:5e:72:44:fe:
15:8c:dd:bc:fb:97:61:d7:56:70:09:d5:e2:ea:e7:
88:95:cd:52:78:42:b6:07:c7:99:43:be:b3:95:42:
53:63:42:db:71:90:be:51:16:1d:56:a2:56:c5:c1:
b5:7c:a3:90:fc:fe:0d:ea:a3:5a:6d:c3:13:2a:51:
c2:2c:58:bd:1f:e8:44:a4:fb:b6:d3:74:19:27:d0:
36:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:EA:E5:CC:8C:9B:F4:50:7A:4B:1D:82:90:F6:A0:2A:09:63:4B:99
X509v3 Authority Key Identifier:
keyid:24:8A:2E:CC:C7:0F:9E:3E:98:4B:B4:6F:B1:9D:CD:3A:A9:AD:91:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JIouzMcPnj6YS7RvsZ3NOqmtkV8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:bd:07:25:58:48:47:0e:48:17:b1:16:bc:c8:8b:76:bf:e6:
60:84:a9:90:f1:46:0c:82:c0:55:6b:db:c6:7a:4f:bd:0c:d3:
40:fc:25:2b:5a:16:9f:94:d5:11:3c:6c:cd:61:92:47:47:4b:
17:34:0b:c7:b4:d2:fa:41:2d:6a:41:cd:0e:24:68:02:2e:1c:
ff:f1:80:e8:9a:8f:10:c5:f0:08:df:c3:7c:28:e0:a4:f1:fc:
28:83:33:f1:18:c8:46:ec:7f:ce:fd:5c:48:e1:14:01:4d:47:
6c:08:24:70:3f:98:16:de:15:9e:dd:22:24:9e:ff:43:9c:b5:
16:5a:97:f9:4a:d5:a3:00:6c:00:37:17:8f:fa:72:e4:f8:1f:
d6:f6:3a:63:c8:f2:bf:e3:0c:28:43:b1:a7:29:88:87:0e:8d:
5a:0d:4c:c1:d9:a0:ad:f9:57:7c:e5:04:fe:04:9a:47:df:2f:
77:fe:37:22:dd:4e:17:8f:8b:7f:8d:f9:eb:97:8b:3b:99:66:
a8:94:c2:25:53:1d:61:e9:17:88:74:ce:cc:23:06:80:8b:cd:
4f:ee:c8:b7:f3:5a:70:15:89:f4:7a:aa:60:5b:2f:f4:35:a9:
2b:d0:82:c3:01:ac:6a:46:a9:b2:c1:a7:86:0d:e9:40:0b:fb:
cf:7c:40:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:04:53 2026 by rpki-client