
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft
File: jZIwmM1n9tG_JM--LD3KC2Zau4w.mft (raw, json)
Hash identifier: c6NLlGRVPA2/zBhWptvyFG/xOLxa6e+dYi/c5N0sI1Q=
Subject key identifier: 03:36:D4:CE:18:2E:2D:A8:26:51:E2:2C:77:E2:64:7B:AF:1B:76:54
Authority key identifier: 8D:92:30:98:CD:67:F6:D1:BF:24:CF:BE:2C:3D:CA:0B:66:5A:BB:8C
Certificate issuer: /CN=A9148B17/serialNumber=8D923098CD67F6D1BF24CFBE2C3DCA0B665ABB8C
Certificate serial: 0244
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft
Manifest number: 0239
Signing time: Mon 05 Oct 2026 02:59:45 +0000
Manifest this update: Mon 05 Oct 2026 02:59:44 +0000
Manifest next update: Mon 12 Oct 2026 02:59:44 +0000
Files and hashes: 1: jZIwmM1n9tG_JM--LD3KC2Zau4w.crl (hash: TQ34TVAnKWawKSaWcSmG2YyPRQC7B1EFnqBFrqygGK0=)
2: 4495F306772E11EEB7DE544FC4F9AE02.roa (hash: QMRLPWLbyJt3Y3sf3W4kTGlpvnSbMzh/1dBw79mmT2Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.crl
rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 02:59:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 580 (0x244)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148B17, serialNumber=8D923098CD67F6D1BF24CFBE2C3DCA0B665ABB8C
Validity
Not Before: Oct 5 02:59:44 2026 GMT
Not After : Oct 12 02:59:44 2026 GMT
Subject: CN=6ac312a1-c6f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:65:bd:1c:1d:77:64:ed:c0:22:15:15:ca:41:
2a:7e:6e:40:46:b4:c0:da:c0:8b:9e:d1:41:36:fe:
97:72:0a:62:85:8c:86:70:02:67:a0:b7:b8:10:19:
76:53:3f:2e:bb:dd:af:d0:be:56:32:00:d0:74:db:
97:a8:53:5a:f7:e2:ec:d1:aa:ef:33:49:e1:87:85:
fa:be:31:a8:d3:0e:68:6e:ea:be:17:6e:cf:55:59:
71:9b:46:d1:7d:73:52:42:5c:9c:86:31:a8:a0:d4:
25:7e:c0:65:f7:ad:38:fa:d1:f7:11:ef:53:e4:05:
3b:05:33:e1:42:9c:d7:36:fb:a6:e9:29:0b:b8:e9:
5c:a3:7b:3a:32:48:16:77:67:0b:4b:94:c2:7a:72:
b7:3d:e9:e2:d9:a3:38:d2:37:b3:6b:e9:70:d7:50:
71:d4:ba:c7:dc:70:9e:33:60:ad:9b:f4:2a:a2:95:
e3:9b:11:80:cc:fd:5a:6d:a0:eb:5a:2d:21:a7:49:
b4:35:b3:3f:4c:c6:7b:d6:63:db:56:60:ff:37:0b:
2e:53:b2:e6:b4:b8:78:02:d8:4a:35:7f:48:34:12:
f1:cb:d2:1d:86:e0:fc:18:29:04:73:b6:25:72:23:
4f:e8:5a:ae:3c:72:fc:39:aa:75:15:fa:33:50:5d:
c2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:36:D4:CE:18:2E:2D:A8:26:51:E2:2C:77:E2:64:7B:AF:1B:76:54
X509v3 Authority Key Identifier:
keyid:8D:92:30:98:CD:67:F6:D1:BF:24:CF:BE:2C:3D:CA:0B:66:5A:BB:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:ae:d9:8f:64:cd:12:07:5e:05:9a:94:d7:16:8c:4b:53:ac:
9b:68:c7:fb:87:50:67:51:c1:47:1e:eb:b4:14:61:1c:7f:59:
00:74:89:b3:c1:f5:7b:99:cd:93:a1:49:65:49:9b:39:cd:ea:
b8:17:d7:38:48:ea:21:9e:87:76:01:b4:07:19:c9:c0:c6:8c:
1d:49:fd:bf:b3:2e:d3:f2:d9:bc:c6:66:b9:ab:57:71:f0:55:
d5:07:8d:46:c9:7e:3d:ce:c3:42:ed:f0:c2:4b:f4:1d:6d:ea:
7d:70:5a:19:d1:c4:f9:1d:9c:8d:7e:11:64:a9:d5:ca:e6:47:
d3:16:e7:fe:68:bd:b6:7d:84:99:82:f0:e3:b2:5a:8e:00:9f:
86:96:bd:27:f0:a8:f6:1f:be:48:d4:e1:ce:a0:7b:c5:b5:29:
ba:6e:52:4a:f4:25:71:96:4f:13:93:64:0b:9c:f6:59:08:22:
a0:df:2c:dc:6f:22:70:d5:8c:ad:b3:0f:c1:fb:db:ef:06:b2:
c1:36:e9:ad:34:1c:2a:f3:4c:02:fc:a4:42:9d:90:76:91:4a:
c1:98:60:59:03:7b:73:a9:9e:3a:a1:fb:45:40:e7:04:58:36:
10:4a:4f:7c:14:0e:21:a1:49:7d:15:89:22:a1:ad:ed:eb:90:
da:44:be:ec
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDhCMTcxMTAvBgNVBAUTKDhEOTIzMDk4Q0Q2N0Y2RDFCRjI0Q0ZCRTJDM0RDQTBC
NjY1QUJCOEMwHhcNMjYxMDA1MDI1OTQ0WhcNMjYxMDEyMDI1OTQ0WjAYMRYwFAYD
VQQDEw02YWMzMTJhMS1jNmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkWW9HB13ZO3AIhUVykEqfm5ARrTA2sCLntFBNv6XcgpihYyGcAJnoLe4EBl2
Uz8uu92v0L5WMgDQdNuXqFNa9+Ls0arvM0nhh4X6vjGo0w5obuq+F27PVVlxm0bR
fXNSQlychjGooNQlfsBl9604+tH3Ee9T5AU7BTPhQpzXNvum6SkLuOlco3s6MkgW
d2cLS5TCenK3Peni2aM40jeza+lw11Bx1LrH3HCeM2Ctm/QqopXjmxGAzP1abaDr
Wi0hp0m0NbM/TMZ71mPbVmD/NwsuU7LmtLh4AthKNX9INBLxy9IdhuD8GCkEc7Yl
ciNP6FquPHL8Oap1FfozUF3CoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAM21M4Y
Li2oJlHiLHfiZHuvG3ZUMB8GA1UdIwQYMBaAFI2SMJjNZ/bRvyTPviw9ygtmWruM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEIxNy9FQTRCMTY1RTY4
RUQxMUVFQjRCNUQzNjJDNEY5QUUwMi9qWkl3bU0xbjl0R19KTS0tTEQzS0MyWmF1
NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2paSXdtTTFuOXRHX0pNLS1MRDNLQzJaYXU0dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
OEIxNy9FQTRCMTY1RTY4RUQxMUVFQjRCNUQzNjJDNEY5QUUwMi9qWkl3bU0xbjl0
R19KTS0tTEQzS0MyWmF1NHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAh67Zj2TNEgdeBZqU1xaMS1Osm2jH+4dQZ1HBRx7rtBRhHH9ZAHSJs8H1e5nN
k6FJZUmbOc3quBfXOEjqIZ6HdgG0BxnJwMaMHUn9v7Mu0/LZvMZmuatXcfBV1QeN
Rsl+Pc7DQu3wwkv0HW3qfXBaGdHE+R2cjX4RZKnVyuZH0xbn/mi9tn2EmYLw47Ja
jgCfhpa9J/Co9h++SNThzqB7xbUpum5SSvQlcZZPE5NkC5z2WQgioN8s3G8icNWM
rbMPwfvb7waywTbprTQcKvNMAvykQp2QdpFKwZhgWQN7c6meOqH7RUDnBFg2EEpP
fBQOIaFJfRWJIqGt7euQ2kS+7A==
-----END CERTIFICATE-----
Generated at Tue Oct 6 22:16:55 2026 by rpki-client