
$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/JCI9DH0QHbetfjy43bFwYpNlyu4.mft
File: JCI9DH0QHbetfjy43bFwYpNlyu4.mft (raw, json)
Hash identifier: QPNmMzY6gLEklEz3QEdnwZQnquxNM0ZS7CqgmscIA10=
Subject key identifier: 6D:5B:2E:13:3D:6B:A8:A1:05:31:2D:74:C6:DA:59:2F:60:C9:41:B3
Authority key identifier: 24:22:3D:0C:7D:10:1D:B7:AD:7E:3C:B8:DD:B1:70:62:93:65:CA:EE
Certificate issuer: /CN=A911AE24/serialNumber=24223D0C7D101DB7AD7E3CB8DDB170629365CAEE
Certificate serial: 0222
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCI9DH0QHbetfjy43bFwYpNlyu4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/JCI9DH0QHbetfjy43bFwYpNlyu4.mft
Manifest number: 0217
Signing time: Sun 01 Mar 2026 03:44:39 +0000
Manifest this update: Sun 01 Mar 2026 03:44:38 +0000
Manifest next update: Sun 08 Mar 2026 03:44:38 +0000
Files and hashes: 1: JCI9DH0QHbetfjy43bFwYpNlyu4.crl (hash: CgGP9ripNQzovr5XoiitEcuK6agFXj1DeaVYyKOP3Fo=)
2: EDDDD55C252E11EEB91A8941C4F9AE02.roa (hash: y2CRuE70MquHCIr0B6b6CP/AdGdh0+ETsyjf8zknJdU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/JCI9DH0QHbetfjy43bFwYpNlyu4.crl
rsync://rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/JCI9DH0QHbetfjy43bFwYpNlyu4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCI9DH0QHbetfjy43bFwYpNlyu4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 03:44:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 546 (0x222)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AE24, serialNumber=24223D0C7D101DB7AD7E3CB8DDB170629365CAEE
Validity
Not Before: Mar 1 03:44:38 2026 GMT
Not After : Mar 8 03:44:38 2026 GMT
Subject: CN=69a3b627-3b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:4a:8a:9c:d7:2c:25:84:af:cf:b4:2e:57:4e:
44:14:20:ea:d7:1f:09:7e:67:39:13:38:7a:34:d9:
22:0e:c2:ae:bf:b1:c1:58:28:ef:0c:a1:e9:cf:25:
1f:87:a7:e4:37:6a:5f:47:ec:9b:b3:0f:f2:7e:97:
5d:e0:9a:ae:bc:02:56:a5:56:d6:10:ca:56:5b:0a:
79:37:31:b0:76:c2:83:05:77:22:a4:5f:51:cd:7f:
52:69:eb:87:af:ac:11:03:fb:51:5f:38:a1:76:91:
11:92:74:c7:58:22:f3:fd:c9:24:01:25:c0:09:68:
ca:4c:49:ec:49:60:72:7b:50:c8:36:76:97:ef:7a:
71:38:e3:06:e0:9d:11:90:69:32:77:a9:3b:f9:40:
f9:cf:6a:61:c9:fc:4c:e6:c9:30:23:9b:9c:d0:a9:
03:cd:07:d4:c8:83:20:3e:c0:a7:af:2a:72:48:b2:
92:ce:c9:81:4a:f8:9d:b2:ec:3f:c9:91:57:03:ce:
2b:68:7e:b5:1a:e1:cb:8c:65:01:d1:10:ab:23:28:
29:43:81:da:29:f0:cd:a1:20:6e:5a:d3:09:10:5b:
2d:2d:a8:9a:93:7a:ad:f4:e7:10:91:45:3b:bf:00:
0e:ce:c6:48:e6:f4:1c:52:f1:03:5a:0a:ef:7d:15:
98:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:5B:2E:13:3D:6B:A8:A1:05:31:2D:74:C6:DA:59:2F:60:C9:41:B3
X509v3 Authority Key Identifier:
keyid:24:22:3D:0C:7D:10:1D:B7:AD:7E:3C:B8:DD:B1:70:62:93:65:CA:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/JCI9DH0QHbetfjy43bFwYpNlyu4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCI9DH0QHbetfjy43bFwYpNlyu4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/JCI9DH0QHbetfjy43bFwYpNlyu4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c7:76:9c:38:c9:0f:e6:85:7b:14:c2:e2:c3:a9:b5:5d:fd:69:
b8:22:e4:54:be:0f:bb:25:bd:82:4a:cb:d4:6e:16:04:c3:04:
f5:1d:d6:51:7c:37:75:55:ed:7a:81:34:e7:93:5b:63:66:01:
af:6b:93:d5:fb:23:3e:0c:40:2c:a4:95:a3:af:fa:95:7c:03:
66:4a:f2:17:55:ec:58:57:c5:8c:3d:12:07:bf:5b:a9:f0:c6:
a8:8c:28:e5:9c:81:a5:12:2c:48:b0:ae:6c:7d:8c:50:5e:6f:
4b:51:48:b9:4a:75:43:d0:14:0b:e9:a5:71:06:70:0e:21:f7:
a7:a6:08:09:fc:d9:96:97:18:02:78:2e:bd:82:b7:71:1d:0c:
3b:f8:56:16:ec:00:43:eb:6d:1a:31:3c:02:5d:c0:d6:a3:e3:
40:03:11:08:2f:fd:98:a2:bf:5a:b6:ca:dd:d5:c0:08:33:61:
54:23:5a:3b:7f:8b:43:4c:df:80:85:2d:fa:84:52:17:37:51:
a6:8d:69:5a:ee:95:4a:81:ea:7c:e9:87:f8:16:14:ec:49:c1:
95:83:da:80:a1:4d:bd:1f:1a:ab:ee:ed:03:41:60:08:51:9e:
85:b2:85:6d:18:18:c0:d9:0f:72:ae:2d:91:82:44:9e:d9:80:
c8:55:42:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:28:23 2026 by rpki-client