
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft
File: jZIwmM1n9tG_JM--LD3KC2Zau4w.mft (raw, json)
Hash identifier: lSOoUdpceGpLrEBL3ueKt+8lmq8yv3HAzQnsyGqtn2Y=
Subject key identifier: B2:E0:EB:14:CF:41:F6:97:97:7D:E8:4B:EC:F3:E5:1A:C1:26:D9:DF
Authority key identifier: 8D:92:30:98:CD:67:F6:D1:BF:24:CF:BE:2C:3D:CA:0B:66:5A:BB:8C
Certificate issuer: /CN=A9148B17/serialNumber=8D923098CD67F6D1BF24CFBE2C3DCA0B665ABB8C
Certificate serial: 01EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft
Manifest number: 01E3
Signing time: Fri 17 Apr 2026 03:16:30 +0000
Manifest this update: Fri 17 Apr 2026 03:16:30 +0000
Manifest next update: Fri 24 Apr 2026 03:16:30 +0000
Files and hashes: 1: jZIwmM1n9tG_JM--LD3KC2Zau4w.crl (hash: +vZ5zotfH92ITtOR6Ubqku9wEdey6v0aXvvS1JfipE4=)
2: 4495F306772E11EEB7DE544FC4F9AE02.roa (hash: QMRLPWLbyJt3Y3sf3W4kTGlpvnSbMzh/1dBw79mmT2Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.crl
rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:16:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 494 (0x1ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148B17, serialNumber=8D923098CD67F6D1BF24CFBE2C3DCA0B665ABB8C
Validity
Not Before: Apr 17 03:16:30 2026 GMT
Not After : Apr 24 03:16:30 2026 GMT
Subject: CN=69e1a60e-b7c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2d:58:44:f1:01:9d:03:81:e7:31:f2:23:cc:
cd:6b:2f:d0:95:5d:15:e5:60:f6:4a:ab:b3:34:98:
56:4e:c8:36:06:c9:90:00:c3:1f:04:0a:fd:27:70:
8c:b6:78:2b:a2:c9:53:0e:12:6b:be:79:35:11:69:
b9:f7:73:f6:89:fb:c8:d2:89:04:0e:51:5c:5c:e7:
f5:e6:22:bd:08:7f:63:33:ce:00:db:e7:ee:84:01:
22:5d:a1:92:16:14:c1:53:0c:3a:35:f8:b1:89:d0:
0d:17:d8:73:c2:22:96:db:69:bb:8c:97:4a:27:0d:
22:b8:61:cf:aa:dc:50:70:35:cf:4b:25:72:88:d3:
e3:d2:16:f8:9e:74:56:63:1b:20:6b:13:17:f1:ac:
5a:de:86:1b:76:e5:8f:fe:39:62:b3:16:0b:89:58:
31:c0:37:43:4b:d7:e4:d4:2a:fe:91:05:77:89:4c:
69:e6:76:5e:e4:dc:7c:f1:f8:94:01:80:98:71:34:
4f:39:c7:d3:e8:54:bc:ab:b5:32:11:18:9e:30:97:
eb:ff:a9:6c:d7:11:d3:9b:24:1f:03:ae:15:dc:e4:
bd:e3:f1:3d:86:a8:60:4b:43:72:ad:9c:35:4c:1c:
6b:bc:b5:ab:03:c4:73:b7:2b:d0:69:90:56:45:66:
1f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E0:EB:14:CF:41:F6:97:97:7D:E8:4B:EC:F3:E5:1A:C1:26:D9:DF
X509v3 Authority Key Identifier:
keyid:8D:92:30:98:CD:67:F6:D1:BF:24:CF:BE:2C:3D:CA:0B:66:5A:BB:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:98:d8:a6:25:73:3e:41:44:23:46:83:2c:5b:7b:14:fb:6a:
9d:5e:3b:e4:3d:cc:f2:6a:e8:c3:58:22:8a:68:5c:5e:b5:fb:
0b:06:d8:67:1b:56:9a:47:f7:4b:b6:02:dd:9b:53:62:cd:9f:
f4:b0:c4:64:85:78:1a:d6:9c:79:5d:43:0c:5b:e7:dc:57:f4:
57:29:c9:02:f4:a7:08:16:64:66:ff:6a:8d:33:30:40:cf:cf:
81:ce:c8:0d:c3:ef:b4:b1:5c:cd:ae:bb:19:23:db:e4:4a:df:
a5:2a:8c:92:3d:3f:73:b3:39:ff:fa:b6:c7:f9:48:6e:86:ad:
1e:d7:62:87:70:39:83:9c:b0:bf:fa:e0:35:74:80:a4:32:dc:
78:40:5f:cd:e8:16:25:45:11:2d:f3:d6:53:6d:27:27:23:58:
3b:74:ad:91:c4:53:48:67:a7:d1:8a:44:ad:30:91:51:f0:cb:
79:08:b4:dd:38:06:86:1f:30:39:04:23:df:4c:d6:3a:70:ff:
4d:39:68:95:af:b8:59:4f:29:9e:d6:dd:94:2f:19:54:05:43:
3a:31:ea:df:21:3f:83:18:5a:25:78:9d:2b:c0:ad:bb:13:2a:
ee:ee:16:1a:9e:be:b2:30:24:bf:9b:ba:b9:a1:25:a4:22:7a:
f2:f9:c1:c9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDhCMTcxMTAvBgNVBAUTKDhEOTIzMDk4Q0Q2N0Y2RDFCRjI0Q0ZCRTJDM0RDQTBC
NjY1QUJCOEMwHhcNMjYwNDE3MDMxNjMwWhcNMjYwNDI0MDMxNjMwWjAYMRYwFAYD
VQQDEw02OWUxYTYwZS1iN2M5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvC1YRPEBnQOB5zHyI8zNay/QlV0V5WD2SquzNJhWTsg2BsmQAMMfBAr9J3CM
tngroslTDhJrvnk1EWm593P2ifvI0okEDlFcXOf15iK9CH9jM84A2+fuhAEiXaGS
FhTBUww6NfixidANF9hzwiKW22m7jJdKJw0iuGHPqtxQcDXPSyVyiNPj0hb4nnRW
YxsgaxMX8axa3oYbduWP/jlisxYLiVgxwDdDS9fk1Cr+kQV3iUxp5nZe5Nx88fiU
AYCYcTRPOcfT6FS8q7UyERieMJfr/6ls1xHTmyQfA64V3OS94/E9hqhgS0NyrZw1
TBxrvLWrA8RztyvQaZBWRWYf8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLLg6xTP
QfaXl33oS+zz5RrBJtnfMB8GA1UdIwQYMBaAFI2SMJjNZ/bRvyTPviw9ygtmWruM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEIxNy9FQTRCMTY1RTY4
RUQxMUVFQjRCNUQzNjJDNEY5QUUwMi9qWkl3bU0xbjl0R19KTS0tTEQzS0MyWmF1
NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2paSXdtTTFuOXRHX0pNLS1MRDNLQzJaYXU0dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
OEIxNy9FQTRCMTY1RTY4RUQxMUVFQjRCNUQzNjJDNEY5QUUwMi9qWkl3bU0xbjl0
R19KTS0tTEQzS0MyWmF1NHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjpjYpiVzPkFEI0aDLFt7FPtqnV475D3M8mrow1giimhcXrX7CwbYZxtWmkf3
S7YC3ZtTYs2f9LDEZIV4GtaceV1DDFvn3Ff0VynJAvSnCBZkZv9qjTMwQM/Pgc7I
DcPvtLFcza67GSPb5ErfpSqMkj0/c7M5//q2x/lIboatHtdih3A5g5ywv/rgNXSA
pDLceEBfzegWJUURLfPWU20nJyNYO3StkcRTSGen0YpErTCRUfDLeQi03TgGhh8w
OQQj30zWOnD/TTlola+4WU8pntbdlC8ZVAVDOjHq3yE/gxhaJXidK8CtuxMq7u4W
Gp6+sjAkv5u6uaElpCJ68vnByQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:23:15 2026 by rpki-client