
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/JzKpmoY71iA82RXNcle10dmH6yg.mft
File: JzKpmoY71iA82RXNcle10dmH6yg.mft (raw, json)
Hash identifier: hVee1Fs4ll8Qr6W2aquxgpp5xnQQ9fLO9DTTIpJIJUw=
Subject key identifier: 89:DE:FF:39:8D:3D:34:F9:BC:03:FA:99:23:51:67:56:7B:1F:3F:42
Authority key identifier: 27:32:A9:9A:86:3B:D6:20:3C:D9:15:CD:72:57:B5:D1:D9:87:EB:28
Certificate issuer: /CN=A9142A39/serialNumber=2732A99A863BD6203CD915CD7257B5D1D987EB28
Certificate serial: 2AD9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzKpmoY71iA82RXNcle10dmH6yg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/JzKpmoY71iA82RXNcle10dmH6yg.mft
Manifest number: 2ACD
Signing time: Thu 08 Oct 2026 15:36:02 +0000
Manifest this update: Thu 08 Oct 2026 15:36:01 +0000
Manifest next update: Thu 15 Oct 2026 15:36:01 +0000
Files and hashes: 1: JzKpmoY71iA82RXNcle10dmH6yg.crl (hash: ULGW60n+nPU0VRaf6gjjmmoQWQ7jpG6QfQVzNgIpRuU=)
2: 2FF7E9A600BB11EA895E5253C4F9AE02.roa (hash: hriHnwahZFQ690sRLwz6iRs8F4NGV9dzWdCEbvzLxNM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/JzKpmoY71iA82RXNcle10dmH6yg.crl
rsync://rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/JzKpmoY71iA82RXNcle10dmH6yg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzKpmoY71iA82RXNcle10dmH6yg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 15:36:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10969 (0x2ad9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142A39, serialNumber=2732A99A863BD6203CD915CD7257B5D1D987EB28
Validity
Not Before: Oct 8 15:36:01 2026 GMT
Not After : Oct 15 15:36:01 2026 GMT
Subject: CN=6ac7b862-ff1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1e:26:d0:48:dc:68:4f:f4:1a:09:72:9c:ad:
91:46:21:f2:23:1d:2d:63:f5:b3:3f:7f:30:d5:4c:
20:93:c6:1e:a2:59:0c:71:74:33:2c:0c:33:4b:75:
f0:53:6b:f7:2a:d7:55:99:82:2d:cb:a6:b5:11:26:
1e:9d:ec:51:38:b0:7d:30:e4:f2:d7:72:32:d6:58:
e3:d0:4f:a3:c0:c7:f5:ff:15:b1:c2:59:63:62:18:
0c:84:6d:2b:82:65:aa:18:b0:12:71:46:c2:9b:e3:
7c:53:72:77:4d:80:c7:b8:1e:e1:fe:ad:a1:40:53:
36:64:bf:5c:f1:3f:8d:ec:ad:23:d0:e1:8c:ce:a2:
e7:cd:8e:ee:8c:ec:46:cf:0a:f0:a7:41:b3:bd:2b:
20:4b:ee:18:0f:47:fe:9e:da:7b:60:e1:61:20:e2:
5c:a2:71:7c:43:32:75:7a:f3:3c:74:c0:dc:80:25:
e7:d1:54:2b:ee:40:11:46:a6:25:bf:78:b9:71:13:
4a:e9:97:72:03:6f:fe:2d:ad:28:4c:a0:08:2b:ef:
f0:0f:2a:ed:c3:72:6e:9a:be:85:60:47:cd:e5:04:
ac:42:64:95:66:8d:a2:4e:90:13:b0:f5:19:9a:10:
e6:fd:13:c4:d1:92:1c:68:9f:19:aa:09:4a:3f:e6:
29:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:DE:FF:39:8D:3D:34:F9:BC:03:FA:99:23:51:67:56:7B:1F:3F:42
X509v3 Authority Key Identifier:
keyid:27:32:A9:9A:86:3B:D6:20:3C:D9:15:CD:72:57:B5:D1:D9:87:EB:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/JzKpmoY71iA82RXNcle10dmH6yg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzKpmoY71iA82RXNcle10dmH6yg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/JzKpmoY71iA82RXNcle10dmH6yg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:da:13:fb:b8:36:7b:7b:d1:aa:ab:3c:e6:58:78:a0:7c:18:
78:49:09:d1:e4:7a:e1:b2:6e:3e:68:f5:61:f5:94:3b:8e:59:
d5:62:99:f6:96:d8:a7:6a:8a:54:52:88:9a:12:50:43:01:83:
94:7e:eb:c5:c6:0c:a1:ba:3c:ab:d9:f9:f9:f4:8b:fe:ec:30:
b8:52:cc:2b:14:c8:8f:95:41:5f:e5:a6:d9:c9:35:ae:b9:94:
d1:0f:d3:06:a1:b6:73:e2:d6:aa:3e:c4:15:f8:90:4b:14:2f:
16:01:58:ec:76:76:fe:80:ae:32:9d:e3:70:0b:9c:83:e5:65:
af:14:ee:cf:88:81:0f:4d:64:4e:9f:6a:5e:54:27:6b:e2:61:
c8:5e:8d:2b:ce:28:58:6d:67:3d:22:bc:a3:33:b1:47:b9:a0:
78:36:01:bc:a8:2e:d9:27:20:55:f7:9a:0c:98:32:6d:d8:49:
3b:b6:f2:6d:a9:e3:93:e1:a5:93:ea:e2:a9:57:e8:47:bf:80:
97:f6:0f:0f:e4:d4:81:ff:cc:59:fd:b6:c6:1c:b0:39:b3:54:
32:45:ab:48:f4:23:c3:ad:5f:56:87:08:9a:ac:5c:62:2d:87:
6f:dd:a0:7f:f1:ba:e9:98:ad:40:60:26:fe:00:73:c2:20:ca:
50:9a:b9:6e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICKtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDJBMzkxMTAvBgNVBAUTKDI3MzJBOTlBODYzQkQ2MjAzQ0Q5MTVDRDcyNTdCNUQx
RDk4N0VCMjgwHhcNMjYxMDA4MTUzNjAxWhcNMjYxMDE1MTUzNjAxWjAYMRYwFAYD
VQQDEw02YWM3Yjg2Mi1mZjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyh4m0EjcaE/0GglynK2RRiHyIx0tY/WzP38w1Uwgk8YeolkMcXQzLAwzS3Xw
U2v3KtdVmYIty6a1ESYenexROLB9MOTy13Iy1ljj0E+jwMf1/xWxwlljYhgMhG0r
gmWqGLAScUbCm+N8U3J3TYDHuB7h/q2hQFM2ZL9c8T+N7K0j0OGMzqLnzY7ujOxG
zwrwp0GzvSsgS+4YD0f+ntp7YOFhIOJconF8QzJ1evM8dMDcgCXn0VQr7kARRqYl
v3i5cRNK6ZdyA2/+La0oTKAIK+/wDyrtw3Jumr6FYEfN5QSsQmSVZo2iTpATsPUZ
mhDm/RPE0ZIcaJ8ZqglKP+YprwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIne/zmN
PTT5vAP6mSNRZ1Z7Hz9CMB8GA1UdIwQYMBaAFCcyqZqGO9YgPNkVzXJXtdHZh+so
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkEzOS9BNjU5NDlCMjNC
QzQxMUU0QjVBNjNFM0JDNEY5QUUwMi9KektwbW9ZNzFpQTgyUlhOY2xlMTBkbUg2
eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0p6S3Btb1k3MWlBODJSWE5jbGUxMGRtSDZ5Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MkEzOS9BNjU5NDlCMjNCQzQxMUU0QjVBNjNFM0JDNEY5QUUwMi9KektwbW9ZNzFp
QTgyUlhOY2xlMTBkbUg2eWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZdoT+7g2e3vRqqs85lh4oHwYeEkJ0eR64bJuPmj1YfWUO45Z1WKZ9pbYp2qK
VFKImhJQQwGDlH7rxcYMobo8q9n5+fSL/uwwuFLMKxTIj5VBX+Wm2ck1rrmU0Q/T
BqG2c+LWqj7EFfiQSxQvFgFY7HZ2/oCuMp3jcAucg+VlrxTuz4iBD01kTp9qXlQn
a+JhyF6NK84oWG1nPSK8ozOxR7mgeDYBvKgu2ScgVfeaDJgybdhJO7bybanjk+Gl
k+riqVfoR7+Al/YPD+TUgf/MWf22xhywObNUMkWrSPQjw61fVocImqxcYi2Hb92g
f/G66ZitQGAm/gBzwiDKUJq5bg==
-----END CERTIFICATE-----
Generated at Sat Oct 10 14:44:12 2026 by rpki-client