
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft
File: J-OLvrji2ycfz6F8E0feawaDRGA.mft (raw, json)
Hash identifier: vZXzzF+/sS2TwoMKs/DHfM+0HjrFgSlkp6zq493+X3E=
Subject key identifier: 38:0F:51:64:B8:B4:4A:06:01:40:D8:D5:CE:0D:33:5E:CB:6B:9C:8B
Authority key identifier: 27:E3:8B:BE:B8:E2:DB:27:1F:CF:A1:7C:13:47:DE:6B:06:83:44:60
Certificate issuer: /CN=A9151E54/serialNumber=27E38BBEB8E2DB271FCFA17C1347DE6B06834460
Certificate serial: 0640
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-OLvrji2ycfz6F8E0feawaDRGA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft
Manifest number: 0639
Signing time: Sun 20 Sep 2026 22:34:24 +0000
Manifest this update: Sun 20 Sep 2026 22:34:23 +0000
Manifest next update: Sun 27 Sep 2026 22:34:23 +0000
Files and hashes: 1: J-OLvrji2ycfz6F8E0feawaDRGA.crl (hash: Jd2bAMz9a7hgdYvj3V9DNQ+EOg3r6/PpPavOXY0EQZQ=)
2: 7D20FF46F3E511EBB8BBF720C4F9AE02.roa (hash: V+XheScePk1AavDQ0HXjp7Jys0+s+yjGu/TYBAzZvTM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.crl
rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-OLvrji2ycfz6F8E0feawaDRGA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1600 (0x640)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151E54, serialNumber=27E38BBEB8E2DB271FCFA17C1347DE6B06834460
Validity
Not Before: Sep 20 22:34:23 2026 GMT
Not After : Sep 27 22:34:23 2026 GMT
Subject: CN=6ab05f70-4f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a9:0b:b1:f2:11:29:b6:5d:dc:a9:aa:bf:8f:
87:7a:45:be:7c:df:e3:d9:25:25:bd:75:08:a0:ed:
46:9c:d9:67:c9:a2:38:56:a3:8c:f6:be:98:1e:37:
a6:3a:c0:18:2e:5d:f3:9d:3f:de:f7:95:b8:4a:39:
2a:9b:d2:98:d0:d5:87:01:d4:5c:af:03:ab:11:64:
41:8f:cd:01:66:49:98:1a:fc:a7:38:a0:e3:c3:d0:
31:51:dd:00:2e:77:17:fb:00:e2:21:1a:30:7e:75:
bc:c6:95:8c:01:ad:58:66:5a:7a:63:dd:cf:49:ca:
bb:4c:7e:40:98:34:07:85:f3:8d:d7:6d:2d:1b:18:
f5:4f:01:3e:30:2b:5f:2b:5a:87:68:7a:70:0d:f1:
e8:60:51:68:e7:cf:ce:d8:ce:96:1d:68:b6:12:09:
4b:96:8c:16:2a:9c:b7:e1:9e:5d:b4:6a:91:bc:85:
27:95:6c:d8:89:af:71:34:83:25:1e:cf:86:3a:7d:
cf:df:b5:7b:da:f4:a4:df:f3:29:b5:cb:99:42:17:
d1:ec:ad:a3:3c:52:c5:10:ab:5c:94:95:5a:6e:b2:
ea:38:82:4c:51:0d:5a:66:4a:9f:e8:08:50:e3:be:
ec:f1:17:6f:b4:18:db:81:af:0b:7f:05:ad:07:e4:
bb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:0F:51:64:B8:B4:4A:06:01:40:D8:D5:CE:0D:33:5E:CB:6B:9C:8B
X509v3 Authority Key Identifier:
keyid:27:E3:8B:BE:B8:E2:DB:27:1F:CF:A1:7C:13:47:DE:6B:06:83:44:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-OLvrji2ycfz6F8E0feawaDRGA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:9f:d9:41:4c:4a:2c:cd:06:5f:60:db:09:3b:17:d4:12:4e:
d9:67:aa:a0:36:da:3c:50:40:ca:b1:bc:82:6f:49:80:7b:ac:
85:cb:ce:a6:ea:f3:44:b5:09:49:31:80:79:80:b3:ee:a0:5b:
86:35:60:1c:e0:75:35:e9:ba:40:6b:9e:6d:55:da:21:20:09:
11:ab:80:79:bf:d4:52:a3:52:2a:36:89:68:d1:c0:f2:93:0c:
5a:89:ad:ef:c3:8b:6a:65:c1:a3:fd:ec:0e:14:35:bd:bf:69:
f9:9c:9a:7e:b6:24:ee:e9:41:67:fb:d3:96:03:5b:21:cb:6b:
d7:f8:c5:13:66:b8:c8:43:c5:96:24:fd:5d:9f:99:15:20:5b:
99:8c:66:9b:7b:48:11:1a:c4:05:4d:d3:33:28:0c:64:7b:5f:
e7:84:01:8d:92:59:c0:ec:e9:59:75:42:91:65:80:34:96:c2:
f1:14:78:01:c5:4a:b6:c0:80:b9:25:6b:75:6d:62:52:28:b9:
96:5d:1e:51:86:18:56:62:17:08:69:bb:2a:cf:86:3e:ba:05:
53:02:d5:cb:90:c8:aa:1b:1c:1b:04:2f:83:fe:a9:95:29:75:
ae:53:c2:84:ca:e6:3e:30:58:7c:d6:f7:32:34:b0:72:73:10:
a5:52:af:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:31:10 2026 by rpki-client