
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.mft
File: JNqnqbrGVI2Kxs0QWBxLe_0HZGU.mft (raw, json)
Hash identifier: but40bXvghNv0r9ix5rvzkXRZAiHOIiXQ+8PmV/UBgU=
Subject key identifier: 64:FA:50:93:76:B3:8D:D2:34:A0:B4:55:0C:46:C5:9F:30:05:63:DB
Authority key identifier: 24:DA:A7:A9:BA:C6:54:8D:8A:C6:CD:10:58:1C:4B:7B:FD:07:64:65
Certificate issuer: /CN=A9119A40/serialNumber=24DAA7A9BAC6548D8AC6CD10581C4B7BFD076465
Certificate serial: 0D16
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.mft
Manifest number: 117B
Signing time: Thu 16 Apr 2026 18:04:31 +0000
Manifest this update: Thu 16 Apr 2026 18:04:30 +0000
Manifest next update: Thu 23 Apr 2026 18:04:30 +0000
Files and hashes: 1: JNqnqbrGVI2Kxs0QWBxLe_0HZGU.crl (hash: rA1IK08gLwnUwSDPJOIeo8Sietsn5r4IXRlAwl21XZE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.crl
rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:04:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3350 (0xd16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119A40, serialNumber=24DAA7A9BAC6548D8AC6CD10581C4B7BFD076465
Validity
Not Before: Apr 16 18:04:30 2026 GMT
Not After : Apr 23 18:04:30 2026 GMT
Subject: CN=69e124ae-7442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9a:c9:86:5e:65:4a:c9:d3:e1:3b:30:b0:a6:
11:d8:54:90:b6:cc:37:61:19:16:17:72:24:ad:35:
4b:a7:99:fb:9d:c5:71:16:63:6c:4c:28:26:3b:98:
23:b8:55:a8:f3:61:bb:5e:1a:f1:ed:b6:93:a5:ba:
1e:0a:2f:bf:15:db:d8:23:cd:d3:26:18:7d:37:d8:
09:08:7d:a8:ea:12:77:53:f5:f6:bb:a5:de:cf:ad:
7d:b9:28:f6:d4:6a:24:47:2a:2f:4c:34:5f:2b:3e:
62:40:d2:e8:43:5d:d7:59:fd:8e:ba:b6:44:c8:96:
29:df:65:5b:bc:95:5b:d5:2e:6f:be:20:e4:51:a8:
1a:dd:4a:a3:e9:5d:7a:8b:3d:11:e6:14:33:40:a7:
9e:5a:37:f9:51:dc:a6:7c:00:8e:a9:fc:45:bc:a2:
9b:b0:aa:db:d0:67:56:3e:d7:e7:16:24:d7:67:d2:
d7:b3:3a:b8:f5:68:7f:38:1a:ed:18:4d:e0:0c:fd:
d6:b8:83:5e:a2:7d:a1:b3:fe:cf:5d:68:26:01:05:
8d:bd:58:bd:2e:37:c8:d4:f8:68:9b:c2:f0:30:29:
69:fe:99:17:74:d6:c0:65:f5:69:fd:1f:71:94:b9:
51:ff:9f:34:5c:be:e0:da:1f:ad:c3:ee:b7:cf:0f:
82:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:FA:50:93:76:B3:8D:D2:34:A0:B4:55:0C:46:C5:9F:30:05:63:DB
X509v3 Authority Key Identifier:
keyid:24:DA:A7:A9:BA:C6:54:8D:8A:C6:CD:10:58:1C:4B:7B:FD:07:64:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:20:1b:85:f6:31:54:c4:86:16:4a:b8:3c:e4:35:63:e0:81:
2f:58:db:24:98:35:78:83:e5:5a:57:0d:da:2c:9b:c0:71:88:
0a:7f:a8:b1:c4:7e:ea:13:30:ca:02:21:f4:90:bd:fc:58:ee:
0d:74:0a:70:25:42:ad:4b:5c:6a:65:88:ca:e7:c0:fc:2f:02:
bd:d2:08:af:52:cf:15:50:f5:c6:e3:0f:cd:fe:aa:eb:df:a3:
ff:88:f1:0a:ec:3a:0a:45:fe:a5:a9:c1:92:2d:bd:6c:4a:c6:
a9:44:66:c3:ac:fa:5b:5d:5d:de:30:02:d8:28:48:97:f3:cd:
13:7c:50:73:8b:b2:71:c1:25:15:be:9e:07:f7:6f:6d:79:7f:
48:67:13:63:e4:f4:0e:2f:89:19:60:8b:e6:f3:6d:1a:d6:18:
2a:ff:e9:1b:fc:49:54:c6:9d:dc:50:c8:fc:32:86:e0:4b:60:
ab:1c:c0:03:32:4d:c6:61:67:02:80:ca:cf:55:d6:db:29:36:
9d:7b:db:92:a5:7d:a0:ca:ec:c6:04:46:d4:fe:80:8e:5d:bd:
21:6d:f0:73:d8:d9:b3:f8:ce:fa:91:9c:c9:fb:53:ed:7c:de:
a6:84:ef:fc:57:b4:cd:f0:36:39:88:25:0d:a6:a3:33:39:01:
f7:0b:08:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:06:28 2026 by rpki-client