
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.mft
File: J_xj2GH0aU96L5UfsShH4H-qkHI.mft (raw, json)
Hash identifier: k08Jl9B1qjPeS/lobH7/JkR+kE+zZJVve48sXNCFHDE=
Subject key identifier: AC:69:29:C9:22:16:C0:1C:68:B3:6D:1B:C0:69:AE:9E:D7:95:E4:21
Authority key identifier: 27:FC:63:D8:61:F4:69:4F:7A:2F:95:1F:B1:28:47:E0:7F:AA:90:72
Certificate issuer: /CN=A9125F95/serialNumber=27FC63D861F4694F7A2F951FB12847E07FAA9072
Certificate serial: 1E6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_xj2GH0aU96L5UfsShH4H-qkHI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.mft
Manifest number: 1E5F
Signing time: Tue 28 Jul 2026 16:09:45 +0000
Manifest this update: Tue 28 Jul 2026 16:09:44 +0000
Manifest next update: Tue 04 Aug 2026 16:09:44 +0000
Files and hashes: 1: J_xj2GH0aU96L5UfsShH4H-qkHI.crl (hash: tC1UhnIuhAJwuNXdrb8swZWktAC66xJS8CHaw0lNWwM=)
2: C78E4E640BC111F19AB158B3293D8C67.roa (hash: UHpdeBy1a2ejJJBR1Oum4bKcILEQ59Ie3ax0oFfhz0Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.crl
rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_xj2GH0aU96L5UfsShH4H-qkHI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 16:09:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7789 (0x1e6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125F95, serialNumber=27FC63D861F4694F7A2F951FB12847E07FAA9072
Validity
Not Before: Jul 28 16:09:44 2026 GMT
Not After : Aug 4 16:09:44 2026 GMT
Subject: CN=6a68d449-edd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6e:26:6d:04:43:68:71:9b:d1:9c:37:a5:31:
4e:cc:e3:f2:0f:22:b1:78:60:a1:72:04:43:ec:60:
9e:d8:29:ad:cf:ca:4e:9e:9d:1c:18:04:5c:a3:6b:
86:78:72:e0:12:01:7c:1f:26:18:dc:2e:b9:9c:56:
61:07:00:4d:02:cc:e6:ce:b6:bb:25:e7:a9:22:b5:
98:15:cd:5a:09:31:6c:5b:2c:fe:ba:de:4b:e8:f4:
61:ac:12:9a:c3:43:54:0e:ae:9f:53:a9:bd:4c:33:
ad:0a:26:12:c0:e0:36:61:9b:83:a2:43:3f:dd:18:
14:96:6d:5f:52:be:51:6c:96:52:a2:bf:d7:46:c5:
16:a6:7c:d2:1a:80:94:22:98:2d:fe:42:8a:ca:ef:
fc:65:9e:9d:0f:28:d8:d3:5c:cb:4c:07:8b:f5:2a:
22:8f:58:ab:48:74:4e:78:b3:48:06:db:f9:3c:52:
c8:ab:6e:bc:b3:e9:58:19:e3:50:c7:1f:38:60:a4:
f1:b4:29:12:d6:b5:02:a0:c2:ba:53:8c:b9:25:cb:
34:98:6c:12:ce:2b:77:c0:29:30:3a:ff:f8:ec:df:
bc:24:a8:d2:76:a0:9d:7a:f0:65:c7:55:df:f1:77:
eb:62:77:7c:9a:34:2a:c6:2d:8c:1d:65:8d:55:2e:
57:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:69:29:C9:22:16:C0:1C:68:B3:6D:1B:C0:69:AE:9E:D7:95:E4:21
X509v3 Authority Key Identifier:
keyid:27:FC:63:D8:61:F4:69:4F:7A:2F:95:1F:B1:28:47:E0:7F:AA:90:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_xj2GH0aU96L5UfsShH4H-qkHI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:55:86:06:78:cf:f7:fc:65:ec:c3:e8:3e:42:64:31:97:8a:
4c:9e:4c:d9:74:54:8a:96:e3:f6:ca:6b:df:89:24:ec:2c:d5:
01:43:97:0e:d5:b4:c2:fb:8e:46:f0:ed:f1:b9:ed:db:87:cb:
c5:02:9a:2e:24:6e:b1:e1:a6:7f:71:34:af:71:72:d8:16:5f:
eb:bc:61:ea:52:4a:87:2f:c5:ef:df:05:10:f8:ab:8c:4e:3e:
78:17:76:62:63:8c:49:c2:02:a6:a6:59:8c:7b:2d:4f:96:aa:
7a:b4:4f:4b:5a:a7:f0:e5:98:86:91:e4:e4:dc:99:4a:d2:30:
0c:2d:82:ce:ee:44:a9:1a:ae:a3:3d:a7:0f:95:12:92:0c:37:
e3:a7:86:e1:ed:98:ce:38:25:aa:e7:17:37:02:44:c8:cc:92:
2e:44:f8:4e:49:85:c5:4b:b2:3e:d3:a7:6a:93:a4:e3:f8:ed:
85:58:0f:ae:e0:37:58:84:7a:72:1d:85:ac:f0:ca:49:62:d0:
a3:b1:16:12:0a:75:ac:e9:ea:fc:aa:f2:ed:d9:ee:ff:75:a7:
d4:fd:10:9b:81:10:a0:8d:3d:d5:e7:09:a5:51:22:4c:5a:88:
34:24:2f:9c:83:77:f6:e2:2a:a5:9c:45:5e:a1:6c:20:72:3f:
d5:ac:d4:ce
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjVGOTUxMTAvBgNVBAUTKDI3RkM2M0Q4NjFGNDY5NEY3QTJGOTUxRkIxMjg0N0Uw
N0ZBQTkwNzIwHhcNMjYwNzI4MTYwOTQ0WhcNMjYwODA0MTYwOTQ0WjAYMRYwFAYD
VQQDEw02YTY4ZDQ0OS1lZGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA424mbQRDaHGb0Zw3pTFOzOPyDyKxeGChcgRD7GCe2Cmtz8pOnp0cGARco2uG
eHLgEgF8HyYY3C65nFZhBwBNAszmzra7JeepIrWYFc1aCTFsWyz+ut5L6PRhrBKa
w0NUDq6fU6m9TDOtCiYSwOA2YZuDokM/3RgUlm1fUr5RbJZSor/XRsUWpnzSGoCU
Ipgt/kKKyu/8ZZ6dDyjY01zLTAeL9Soij1irSHROeLNIBtv5PFLIq268s+lYGeNQ
xx84YKTxtCkS1rUCoMK6U4y5Jcs0mGwSzit3wCkwOv/47N+8JKjSdqCdevBlx1Xf
8XfrYnd8mjQqxi2MHWWNVS5XtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKxpKcki
FsAcaLNtG8Bprp7XleQhMB8GA1UdIwQYMBaAFCf8Y9hh9GlPei+VH7EoR+B/qpBy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUY5NS9DRTJBRkM0NkEy
NzUxMUU2OUVCMTc3NzRDNEY5QUUwMi9KX3hqMkdIMGFVOTZMNVVmc1NoSDRILXFr
SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pfeGoyR0gwYVU5Nkw1VWZzU2hINEgtcWtISS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NUY5NS9DRTJBRkM0NkEyNzUxMUU2OUVCMTc3NzRDNEY5QUUwMi9KX3hqMkdIMGFV
OTZMNVVmc1NoSDRILXFrSEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmFWGBnjP9/xl7MPoPkJkMZeKTJ5M2XRUipbj9spr34kk7CzVAUOXDtW0wvuO
RvDt8bnt24fLxQKaLiRuseGmf3E0r3Fy2BZf67xh6lJKhy/F798FEPirjE4+eBd2
YmOMScICpqZZjHstT5aqerRPS1qn8OWYhpHk5NyZStIwDC2Czu5EqRquoz2nD5US
kgw346eG4e2YzjglqucXNwJEyMySLkT4TkmFxUuyPtOnapOk4/jthVgPruA3WIR6
ch2FrPDKSWLQo7EWEgp1rOnq/Kry7dnu/3Wn1P0Qm4EQoI091ecJpVEiTFqINCQv
nIN39uIqpZxFXqFsIHI/1azUzg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:16:48 2026 by rpki-client