
$ rpki-client -vvf rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft
File: J-OLvrji2ycfz6F8E0feawaDRGA.mft (raw, json)
Hash identifier: Fe/6H+xQMg1Rm9FcAkkNnm6TJW1YXYEjUnZZ7/7um/U=
Subject key identifier: 81:A0:6E:44:6D:AD:82:91:85:01:06:03:65:EC:5F:98:2A:85:12:BB
Authority key identifier: 27:E3:8B:BE:B8:E2:DB:27:1F:CF:A1:7C:13:47:DE:6B:06:83:44:60
Certificate issuer: /CN=A9151E54/serialNumber=27E38BBEB8E2DB271FCFA17C1347DE6B06834460
Certificate serial: 05D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-OLvrji2ycfz6F8E0feawaDRGA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft
Manifest number: 05CD
Signing time: Sat 28 Feb 2026 23:34:37 +0000
Manifest this update: Sat 28 Feb 2026 23:34:36 +0000
Manifest next update: Sat 07 Mar 2026 23:34:36 +0000
Files and hashes: 1: J-OLvrji2ycfz6F8E0feawaDRGA.crl (hash: 4S/zuI4Jks2MQHfHkb/zFRT1Bbm4g5tjgTR+/lFUDNU=)
2: 7D20FF46F3E511EBB8BBF720C4F9AE02.roa (hash: C7jDphWDYFgMA4L/08ep7MPFd0RKLP2oweu77NqfdxM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.crl
rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-OLvrji2ycfz6F8E0feawaDRGA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 23:34:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1490 (0x5d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151E54, serialNumber=27E38BBEB8E2DB271FCFA17C1347DE6B06834460
Validity
Not Before: Feb 28 23:34:36 2026 GMT
Not After : Mar 7 23:34:36 2026 GMT
Subject: CN=69a37b8d-cdb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:46:b1:a2:55:28:b4:9a:e7:21:38:4f:46:21:
07:64:53:e3:1e:8e:d5:de:b9:8e:ee:c3:e7:5c:a4:
41:f1:17:72:36:4a:0a:ae:68:02:89:38:b1:f6:88:
77:22:e9:d8:94:9f:76:c3:04:83:10:fd:4e:92:0b:
c7:e7:3a:2c:64:77:ec:a9:d6:16:a9:22:a2:0a:cf:
51:64:cf:14:d4:1d:da:73:54:89:4c:0f:4a:86:7a:
43:ac:8e:b3:e9:f8:e9:03:4b:41:3b:e7:c2:43:fa:
b6:85:ff:9a:62:4b:98:b2:b2:17:b4:3a:c9:ec:3c:
68:db:66:92:9d:e4:72:d2:63:82:8d:c2:88:52:5d:
d9:c7:a1:8e:2a:55:4d:6c:d9:a0:88:ef:4a:55:a8:
c8:9f:eb:0d:70:b7:b6:d2:ff:39:7b:0b:81:ad:14:
0c:0c:d7:02:79:53:62:67:15:3d:89:29:50:e2:09:
cd:c3:06:2c:11:c5:36:90:8f:c6:4c:ed:ec:7d:86:
b2:0f:b9:0f:d8:65:0e:ce:40:90:f6:12:17:08:79:
3f:bf:d4:a8:d6:59:e8:a0:a8:f9:ba:60:92:64:91:
ce:97:58:fd:1d:7d:c1:2e:9a:26:5f:97:4c:d5:29:
88:2c:96:73:aa:3d:e4:f8:91:09:7c:de:68:61:f9:
ea:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A0:6E:44:6D:AD:82:91:85:01:06:03:65:EC:5F:98:2A:85:12:BB
X509v3 Authority Key Identifier:
keyid:27:E3:8B:BE:B8:E2:DB:27:1F:CF:A1:7C:13:47:DE:6B:06:83:44:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-OLvrji2ycfz6F8E0feawaDRGA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:da:0d:c2:15:0d:d8:6a:7c:2e:5d:2c:e9:c4:2e:9f:9e:18:
e5:71:e8:81:bf:f6:45:e8:4e:b4:82:7d:38:a3:d8:bc:7d:2d:
3d:5c:28:fc:2a:15:22:d9:4c:9f:63:f7:2b:b9:44:4e:f8:b3:
0b:ff:d6:17:91:b6:75:33:9c:a4:22:95:c8:1e:e0:50:87:fa:
be:30:0a:7e:f7:94:05:d2:52:1f:4e:73:e6:08:56:0e:6c:21:
75:fa:07:67:93:09:e6:ce:95:55:2c:90:97:b5:ee:b5:80:24:
3e:ce:10:cc:85:6f:78:26:0b:85:df:6a:02:73:ca:47:f4:6e:
87:24:8b:ea:8b:14:f4:b2:b8:2b:ad:8d:03:8a:e7:4d:42:ad:
60:87:e1:9e:51:ec:26:a4:28:14:ab:f0:f1:a6:2e:92:95:5b:
fa:74:c0:d0:2c:60:7d:2c:39:d9:2d:c1:0e:e7:f4:a8:45:b9:
e3:3e:e3:d3:d6:51:68:7c:ef:bb:44:8d:6d:81:09:b0:8b:7c:
98:cf:cd:3d:f3:6a:28:a5:c4:b2:21:a5:86:c5:81:32:d6:4d:
e0:43:9f:84:d8:27:78:b2:1c:7e:b3:5b:5e:76:4e:73:b7:ac:
a0:0e:12:b7:78:d1:79:fa:a0:9c:7c:40:77:e5:a5:ee:09:01:
cb:9c:0d:d0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTFFNTQxMTAvBgNVBAUTKDI3RTM4QkJFQjhFMkRCMjcxRkNGQTE3QzEzNDdERTZC
MDY4MzQ0NjAwHhcNMjYwMjI4MjMzNDM2WhcNMjYwMzA3MjMzNDM2WjAYMRYwFAYD
VQQDDA02OWEzN2I4ZC1jZGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqkaxolUotJrnIThPRiEHZFPjHo7V3rmO7sPnXKRB8RdyNkoKrmgCiTix9oh3
IunYlJ92wwSDEP1OkgvH5zosZHfsqdYWqSKiCs9RZM8U1B3ac1SJTA9KhnpDrI6z
6fjpA0tBO+fCQ/q2hf+aYkuYsrIXtDrJ7Dxo22aSneRy0mOCjcKIUl3Zx6GOKlVN
bNmgiO9KVajIn+sNcLe20v85ewuBrRQMDNcCeVNiZxU9iSlQ4gnNwwYsEcU2kI/G
TO3sfYayD7kP2GUOzkCQ9hIXCHk/v9So1lnooKj5umCSZJHOl1j9HX3BLpomX5dM
1SmILJZzqj3k+JEJfN5oYfnqPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIGgbkRt
rYKRhQEGA2XsX5gqhRK7MB8GA1UdIwQYMBaAFCfji7644tsnH8+hfBNH3msGg0Rg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MUU1NC9BRkQxN0EzNkYz
RTIxMUVCQUFDRUE3MURDNEY5QUUwMi9KLU9MdnJqaTJ5Y2Z6NkY4RTBmZWF3YURS
R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0otT0x2cmppMnljZno2RjhFMGZlYXdhRFJHQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MUU1NC9BRkQxN0EzNkYzRTIxMUVCQUFDRUE3MURDNEY5QUUwMi9KLU9MdnJqaTJ5
Y2Z6NkY4RTBmZWF3YURSR0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAW9oNwhUN2Gp8Ll0s6cQun54Y5XHogb/2RehOtIJ9OKPYvH0tPVwo/CoVItlM
n2P3K7lETvizC//WF5G2dTOcpCKVyB7gUIf6vjAKfveUBdJSH05z5ghWDmwhdfoH
Z5MJ5s6VVSyQl7XutYAkPs4QzIVveCYLhd9qAnPKR/RuhySL6osU9LK4K62NA4rn
TUKtYIfhnlHsJqQoFKvw8aYukpVb+nTA0CxgfSw52S3BDuf0qEW54z7j09ZRaHzv
u0SNbYEJsIt8mM/NPfNqKKXEsiGlhsWBMtZN4EOfhNgneLIcfrNbXnZOc7esoA4S
t3jRefqgnHxAd+Wl7gkBy5wN0A==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:13:58 2026 by rpki-client