
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131157/06B2B8E2072611F083F3FC75C4F9AE02/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.mft
File: Ji7CDTK8Ey19IEw0SCIpeSQhz3A.mft (raw, json)
Hash identifier: RdS9NFqvJBL6sb1c2Y0ByXul9QnQLOctFP9/lgwEuQE=
Subject key identifier: 26:39:65:DF:E6:22:75:36:C9:C7:29:45:85:53:3A:ED:00:74:55:D0
Authority key identifier: 26:2E:C2:0D:32:BC:13:2D:7D:20:4C:34:48:22:29:79:24:21:CF:70
Certificate issuer: /CN=A9131157/serialNumber=262EC20D32BC132D7D204C34482229792421CF70
Certificate serial: 0111
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131157/06B2B8E2072611F083F3FC75C4F9AE02/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.mft
Manifest number: 0108
Signing time: Mon 27 Jul 2026 08:17:36 +0000
Manifest this update: Mon 27 Jul 2026 08:17:36 +0000
Manifest next update: Mon 03 Aug 2026 08:17:36 +0000
Files and hashes: 1: Ji7CDTK8Ey19IEw0SCIpeSQhz3A.crl (hash: 0amhU41dAiDEezvwy6WixsQnwk8ZoW/ZYjowp6WyHxA=)
2: 2264A3AC083911F0B331A472C4F9AE02.roa (hash: pwNtVZGrmzrKiGVRjkeCeKqvfBMVhfXsfTuHRWtv4fs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131157/06B2B8E2072611F083F3FC75C4F9AE02/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.crl
rsync://rpki.apnic.net/member_repository/A9131157/06B2B8E2072611F083F3FC75C4F9AE02/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:17:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 273 (0x111)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131157, serialNumber=262EC20D32BC132D7D204C34482229792421CF70
Validity
Not Before: Jul 27 08:17:36 2026 GMT
Not After : Aug 3 08:17:36 2026 GMT
Subject: CN=6a671420-9ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bf:0c:66:cf:a2:ee:63:f1:3b:78:7a:6a:a4:
6e:45:41:d4:24:d5:36:95:92:a5:c7:6e:b1:40:51:
e6:f0:75:d8:bb:2b:21:05:37:db:8d:ec:6d:88:87:
be:ad:36:bd:b2:78:53:29:11:89:fd:da:a2:d4:40:
7f:7b:3d:23:13:20:6b:74:c4:4c:2a:e7:cd:00:cc:
d9:30:00:49:6a:bd:15:c1:0c:ad:f8:7b:9b:9e:86:
53:1d:79:db:d7:fb:46:a0:ac:4f:fc:83:8c:8a:9d:
ad:d1:8a:89:c6:9a:6d:f3:d2:8a:05:99:3f:91:a6:
37:af:3e:06:bc:38:9e:f7:40:a0:06:e7:52:78:1e:
83:1a:67:6d:fc:61:c6:ac:cc:89:a4:c5:44:2e:5e:
9a:6b:49:7e:f9:ba:d7:0e:35:80:38:90:ed:9e:79:
06:e7:c1:0c:c7:ef:3c:4a:22:12:91:71:97:72:50:
5b:7a:e9:81:ef:e0:c7:fa:c7:aa:5f:54:38:97:ae:
07:3e:bf:95:27:f1:9a:9d:3f:41:4e:f6:4f:95:a6:
dc:8e:88:3a:a8:da:a9:47:5e:04:1e:1c:cc:09:ff:
1c:72:60:77:a3:0d:ec:90:48:6f:59:8b:00:50:54:
34:4e:6a:9c:dd:71:42:44:af:6a:f5:b4:b6:67:97:
9f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:39:65:DF:E6:22:75:36:C9:C7:29:45:85:53:3A:ED:00:74:55:D0
X509v3 Authority Key Identifier:
keyid:26:2E:C2:0D:32:BC:13:2D:7D:20:4C:34:48:22:29:79:24:21:CF:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131157/06B2B8E2072611F083F3FC75C4F9AE02/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131157/06B2B8E2072611F083F3FC75C4F9AE02/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:d5:b6:d5:07:94:4b:50:42:b8:47:f8:d3:2e:4f:05:51:57:
d4:8a:ca:54:c4:f8:3b:ac:f9:61:d0:19:b0:4e:35:0e:98:56:
db:74:fb:d9:0c:47:b8:fa:2a:47:f7:58:7c:53:9d:5c:11:e7:
bb:bd:9c:ea:04:de:01:05:cb:27:b0:ec:8b:c7:11:bd:70:91:
bd:1e:e4:3b:04:79:bc:2e:63:be:27:80:53:d8:0f:cc:47:e7:
6f:21:52:6f:87:32:ab:71:30:2d:8b:92:a3:61:8a:13:6b:22:
18:7a:5e:8b:04:04:a7:0d:b2:ef:bf:a8:4c:81:10:23:2c:88:
7d:5e:43:2a:cd:73:3a:64:20:a0:41:86:93:56:1d:8c:04:68:
00:96:0a:e3:b1:0d:5f:4e:87:79:d8:35:be:cc:c5:f1:df:b8:
a5:3f:68:50:10:04:16:23:d8:3a:2c:61:34:bb:d4:96:83:51:
66:3e:c0:ef:63:20:d5:e7:b7:88:15:e8:24:b5:4a:66:a3:fa:
25:77:0f:17:ed:cf:07:82:28:e2:fe:26:7a:66:32:73:a3:01:
8b:66:5d:6f:ac:54:14:25:b4:ab:d9:1b:d0:29:60:b6:04:9d:
c1:d1:6b:e8:93:c8:ef:67:6d:17:66:1e:3d:6b:26:65:dc:8a:
c8:aa:7c:d8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzExNTcxMTAvBgNVBAUTKDI2MkVDMjBEMzJCQzEzMkQ3RDIwNEMzNDQ4MjIyOTc5
MjQyMUNGNzAwHhcNMjYwNzI3MDgxNzM2WhcNMjYwODAzMDgxNzM2WjAYMRYwFAYD
VQQDEw02YTY3MTQyMC05ZWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArr8MZs+i7mPxO3h6aqRuRUHUJNU2lZKlx26xQFHm8HXYuyshBTfbjextiIe+
rTa9snhTKRGJ/dqi1EB/ez0jEyBrdMRMKufNAMzZMABJar0VwQyt+HubnoZTHXnb
1/tGoKxP/IOMip2t0YqJxppt89KKBZk/kaY3rz4GvDie90CgBudSeB6DGmdt/GHG
rMyJpMVELl6aa0l++brXDjWAOJDtnnkG58EMx+88SiISkXGXclBbeumB7+DH+seq
X1Q4l64HPr+VJ/GanT9BTvZPlabcjog6qNqpR14EHhzMCf8ccmB3ow3skEhvWYsA
UFQ0Tmqc3XFCRK9q9bS2Z5efEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCY5Zd/m
InU2yccpRYVTOu0AdFXQMB8GA1UdIwQYMBaAFCYuwg0yvBMtfSBMNEgiKXkkIc9w
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTE1Ny8wNkIyQjhFMjA3
MjYxMUYwODNGM0ZDNzVDNEY5QUUwMi9KaTdDRFRLOEV5MTlJRXcwU0NJcGVTUWh6
M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ppN0NEVEs4RXkxOUlFdzBTQ0lwZVNRaHozQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MTE1Ny8wNkIyQjhFMjA3MjYxMUYwODNGM0ZDNzVDNEY5QUUwMi9KaTdDRFRLOEV5
MTlJRXcwU0NJcGVTUWh6M0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMNW21QeUS1BCuEf40y5PBVFX1IrKVMT4O6z5YdAZsE41DphW23T72QxHuPoq
R/dYfFOdXBHnu72c6gTeAQXLJ7Dsi8cRvXCRvR7kOwR5vC5jvieAU9gPzEfnbyFS
b4cyq3EwLYuSo2GKE2siGHpeiwQEpw2y77+oTIEQIyyIfV5DKs1zOmQgoEGGk1Yd
jARoAJYK47ENX06Hedg1vszF8d+4pT9oUBAEFiPYOixhNLvUloNRZj7A72Mg1ee3
iBXoJLVKZqP6JXcPF+3PB4Io4v4memYyc6MBi2Zdb6xUFCW0q9kb0ClgtgSdwdFr
6JPI72dtF2YePWsmZdyKyKp82A==
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:30:55 2026 by rpki-client