
$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/JCI9DH0QHbetfjy43bFwYpNlyu4.mft
File: JCI9DH0QHbetfjy43bFwYpNlyu4.mft (raw, json)
Hash identifier: //mbAzWYW2UaM/Pxj0vhQkL/FkD78vqcIbmJK/s0nJk=
Subject key identifier: 25:E6:70:B5:97:24:C4:E6:6B:81:AB:A2:F5:12:4D:43:73:05:0A:A9
Authority key identifier: 24:22:3D:0C:7D:10:1D:B7:AD:7E:3C:B8:DD:B1:70:62:93:65:CA:EE
Certificate issuer: /CN=A911AE24/serialNumber=24223D0C7D101DB7AD7E3CB8DDB170629365CAEE
Certificate serial: 023E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCI9DH0QHbetfjy43bFwYpNlyu4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/JCI9DH0QHbetfjy43bFwYpNlyu4.mft
Manifest number: 0231
Signing time: Fri 17 Apr 2026 02:29:04 +0000
Manifest this update: Fri 17 Apr 2026 02:29:03 +0000
Manifest next update: Fri 24 Apr 2026 02:29:03 +0000
Files and hashes: 1: JCI9DH0QHbetfjy43bFwYpNlyu4.crl (hash: 5iZSoFQzSR6sF7t/q7a3GJntrX3fzbEpGPIjiAYlA5M=)
2: EDDDD55C252E11EEB91A8941C4F9AE02.roa (hash: aUI4dz0ep/X08ebs/cz0TIEaXmB18GWOcBQgi/DyPNg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/JCI9DH0QHbetfjy43bFwYpNlyu4.crl
rsync://rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/JCI9DH0QHbetfjy43bFwYpNlyu4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCI9DH0QHbetfjy43bFwYpNlyu4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:29:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 574 (0x23e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AE24, serialNumber=24223D0C7D101DB7AD7E3CB8DDB170629365CAEE
Validity
Not Before: Apr 17 02:29:03 2026 GMT
Not After : Apr 24 02:29:03 2026 GMT
Subject: CN=69e19af0-6bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:47:8b:c1:c6:7d:0f:a4:06:55:46:e7:2f:26:
b5:d9:4b:2c:8e:2e:ec:96:25:dd:cf:ce:00:51:02:
42:04:2c:67:09:57:f1:f6:20:9f:a1:f6:3b:1a:04:
ec:8d:ad:a9:65:fd:da:65:f0:8c:18:87:a6:cb:dc:
70:a4:77:36:dd:ba:01:7f:4a:1a:7c:71:36:a3:0d:
0c:74:a9:91:a5:41:38:58:7b:f5:07:70:a0:9e:b7:
4d:a3:87:69:79:d5:03:e7:7d:13:82:16:eb:4c:9f:
59:fe:5e:49:dd:d7:2b:17:05:c3:3b:54:80:6c:da:
01:69:b3:0a:90:db:fe:cc:be:49:54:25:35:cb:56:
59:5b:03:d3:e7:16:0a:14:a5:40:0e:ed:dc:69:14:
8a:61:0a:2e:85:91:b7:3c:e9:fb:29:04:14:cf:ba:
41:2e:ea:a2:7d:b2:eb:15:4f:7a:57:9c:e1:8d:8d:
34:9d:f6:e1:76:7d:31:47:7f:24:b7:e8:bf:b6:3c:
92:3f:e0:38:02:95:15:88:d8:2e:51:2d:02:f2:98:
ec:5b:c4:00:b9:af:f9:df:0e:6f:5d:48:cc:cc:20:
76:a0:04:83:14:df:d0:d6:12:30:24:43:85:13:38:
96:ed:d4:0c:b1:73:a7:8b:43:b4:e0:f5:b6:06:37:
a3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E6:70:B5:97:24:C4:E6:6B:81:AB:A2:F5:12:4D:43:73:05:0A:A9
X509v3 Authority Key Identifier:
keyid:24:22:3D:0C:7D:10:1D:B7:AD:7E:3C:B8:DD:B1:70:62:93:65:CA:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/JCI9DH0QHbetfjy43bFwYpNlyu4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCI9DH0QHbetfjy43bFwYpNlyu4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/JCI9DH0QHbetfjy43bFwYpNlyu4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:07:37:28:91:11:e2:d3:a5:e9:50:ba:80:9c:ad:87:5a:72:
40:58:e9:9f:ce:b7:22:8b:2e:d1:22:1a:df:35:8a:5a:04:45:
fa:27:a1:0e:38:9f:f3:3b:c6:27:65:cd:7a:bc:9b:68:58:a8:
b7:ed:fa:3a:d1:10:27:01:b2:b6:f3:2e:e4:aa:de:bd:b3:05:
60:aa:51:06:8e:50:a1:50:49:47:75:62:a0:8e:5f:e5:df:33:
0f:d8:d8:07:92:c6:73:1a:09:4a:45:1c:a7:d8:87:cb:70:3e:
7a:18:76:aa:a2:b5:3a:d2:a8:69:18:75:d0:3a:30:5f:52:1a:
5a:47:87:e9:74:49:1e:50:4e:44:d3:57:db:53:2a:01:a4:fe:
8a:95:46:2d:10:a7:03:24:59:b8:54:b0:43:5e:09:e7:63:67:
fe:dc:8f:1b:c7:b2:e2:6c:d9:bf:d2:75:44:02:a7:2c:8a:69:
ff:32:6c:b9:b1:03:71:a8:65:fc:ad:a8:13:fc:db:1a:d3:ca:
10:16:c7:34:21:77:78:70:34:40:47:31:90:6c:38:6f:0d:61:
92:63:f2:19:58:4d:de:56:df:af:aa:b0:50:68:94:9f:c0:f9:
d0:fc:fc:59:3a:c8:13:e7:23:13:2c:64:15:f6:89:2f:3d:e2:
75:8c:47:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:55:01 2026 by rpki-client