
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.mft
File: jyLR9WKgUHsRNY8FPaQsgFLUuVU.mft (raw, json)
Hash identifier: MvxpiYY1CtgzHa/4RUe+Y/GrN/AmnruqyUAT+rbOq1Q=
Subject key identifier: F8:98:A9:BB:05:2A:25:FE:74:11:4A:0E:7A:67:E8:1E:96:F3:3F:BE
Authority key identifier: 8F:22:D1:F5:62:A0:50:7B:11:35:8F:05:3D:A4:2C:80:52:D4:B9:55
Certificate issuer: /CN=A9116C90/serialNumber=8F22D1F562A0507B11358F053DA42C8052D4B955
Certificate serial: CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyLR9WKgUHsRNY8FPaQsgFLUuVU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.mft
Manifest number: CA
Signing time: Sun 01 Mar 2026 08:00:49 +0000
Manifest this update: Sun 01 Mar 2026 08:00:48 +0000
Manifest next update: Sun 08 Mar 2026 08:00:48 +0000
Files and hashes: 1: jyLR9WKgUHsRNY8FPaQsgFLUuVU.crl (hash: ds4/XY0cuwepUvIOjAK9JakJNYB1qb4fu0rw/EkKB8g=)
2: 6C22134AE21D11EFA8E87E7DC4F9AE02.roa (hash: F72jxTcUR/Ij+JDhzrH2FoscAFJXuYuBAzmAY76TMZs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.crl
rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyLR9WKgUHsRNY8FPaQsgFLUuVU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 205 (0xcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116C90, serialNumber=8F22D1F562A0507B11358F053DA42C8052D4B955
Validity
Not Before: Mar 1 08:00:48 2026 GMT
Not After : Mar 8 08:00:48 2026 GMT
Subject: CN=69a3f231-f7b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ae:52:54:3f:f2:b8:4f:13:92:4a:2e:8c:78:
20:55:2d:71:18:c7:7b:e1:fe:2a:eb:54:90:7c:da:
4b:dc:a4:76:11:69:59:d9:74:40:1d:d8:62:70:82:
d2:22:42:8f:4f:2c:36:2d:e8:82:60:26:df:7a:a7:
97:ed:11:71:a8:27:1b:15:cb:51:ec:bb:c6:7d:7b:
1c:ec:3d:29:3c:6f:80:fa:49:6a:ed:82:80:48:3f:
79:59:a6:17:a0:3e:f7:2a:bc:a8:94:60:4f:98:2b:
5d:f3:a3:d9:12:f8:bc:6f:38:ad:26:39:aa:21:26:
05:a4:1c:46:83:a7:9e:ec:74:9b:3f:49:17:45:b6:
06:30:1c:44:f4:e9:39:d1:a1:85:bc:f8:c5:dd:e5:
75:aa:58:48:77:d3:ca:4a:7d:94:df:a2:fa:a1:8a:
63:d7:e6:10:b7:95:2d:d8:2c:02:c4:51:6a:79:12:
3a:79:5b:e8:83:7c:a5:8e:41:56:b3:37:c9:fa:a9:
44:c4:85:f8:ca:fd:e7:7d:02:56:f0:83:83:40:d8:
70:fe:59:f3:eb:0d:f6:08:81:0b:9b:5f:13:0f:29:
cf:fc:8d:be:d4:b2:32:ec:d9:bf:43:03:4a:c5:5f:
e5:c6:ef:92:e7:40:83:e5:c6:6b:da:e3:01:e6:fa:
58:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:98:A9:BB:05:2A:25:FE:74:11:4A:0E:7A:67:E8:1E:96:F3:3F:BE
X509v3 Authority Key Identifier:
keyid:8F:22:D1:F5:62:A0:50:7B:11:35:8F:05:3D:A4:2C:80:52:D4:B9:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyLR9WKgUHsRNY8FPaQsgFLUuVU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:10:e6:f0:0d:a2:ef:57:24:63:9b:d5:25:4e:3a:05:3f:23:
f2:5c:b0:2c:10:8b:eb:f1:e4:c0:9e:7b:57:71:3a:93:ec:2d:
7e:28:1b:4b:d7:dd:95:1f:2d:94:67:b2:52:3a:ed:a4:52:79:
63:6d:98:0d:f3:48:02:95:28:fc:57:31:38:66:e0:fc:ae:b6:
d1:0c:9d:c0:f5:67:49:3e:a7:1d:75:5d:7c:94:ea:e0:f4:f8:
f0:5e:1d:8a:ef:9f:2b:c6:08:be:77:9f:3c:78:66:35:98:af:
84:00:40:2c:dc:90:4f:6e:de:3c:28:72:72:85:71:35:e5:da:
ac:cd:45:bf:a2:0b:c0:c4:4d:de:de:2b:01:72:eb:96:b3:c8:
8b:36:7a:01:b4:93:bd:55:35:a2:21:a6:ae:d7:0a:7c:a7:e4:
55:de:9c:e6:8a:3f:a3:79:f9:40:29:db:f1:f3:5a:71:bc:35:
4d:e6:c9:68:48:71:4d:4b:ee:6d:e3:f2:51:8e:ee:17:1b:d9:
da:95:c4:19:62:53:80:3e:02:86:96:ca:89:65:bc:ce:0b:27:
ff:18:f3:71:96:f7:5c:33:ec:8e:f6:11:54:9a:22:11:42:e0:
95:ef:3d:2a:36:ed:d3:7b:7d:05:0e:f4:98:26:bd:8d:34:d4:
14:de:15:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:01:34 2026 by rpki-client