
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft
File: JLokRElCcw9q8rCctyPlyWNw-4s.mft (raw, json)
Hash identifier: SiIXLBU1+tTEFwH3ILst/EI1Ab9X/TQ40XfOgEcGALM=
Subject key identifier: 1A:0B:96:BC:18:09:84:9C:B2:E1:85:92:89:66:13:20:9C:54:A0:48
Authority key identifier: 24:BA:24:44:49:42:73:0F:6A:F2:B0:9C:B7:23:E5:C9:63:70:FB:8B
Certificate issuer: /CN=A9160DAF/serialNumber=24BA24444942730F6AF2B09CB723E5C96370FB8B
Certificate serial: 01E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLokRElCcw9q8rCctyPlyWNw-4s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft
Manifest number: 01DE
Signing time: Mon 27 Jul 2026 05:11:58 +0000
Manifest this update: Mon 27 Jul 2026 05:11:58 +0000
Manifest next update: Mon 03 Aug 2026 05:11:58 +0000
Files and hashes: 1: JLokRElCcw9q8rCctyPlyWNw-4s.crl (hash: JLae1WHHBEs2shw5r9BluG2K0sbpsskUX1rppnzUbV0=)
2: 71FEBB84857711F18FAF10B98AA30FBC.roa (hash: NaP0K5S3pecUp/CUi1T5mH9PBjjPwLcXtf+dOiNICvQ=)
3: BE42116AB76311EE81395B37C4F9AE02.roa (hash: WbVHpiD8F2T3FI/bwtUGHLi/kEkpiTlqVNo5rwJpXuA=)
4: A5176822857711F1A76CF6B98AA30FBC.roa (hash: O/XAFsMoSkN7R/zuJmguUcR1phJvXalY/i9WhQwQI8g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.crl
rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLokRElCcw9q8rCctyPlyWNw-4s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 05:11:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 485 (0x1e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160DAF, serialNumber=24BA24444942730F6AF2B09CB723E5C96370FB8B
Validity
Not Before: Jul 27 05:11:58 2026 GMT
Not After : Aug 3 05:11:58 2026 GMT
Subject: CN=6a66e89e-6e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:35:65:56:ba:ed:25:b8:8d:10:38:53:74:d4:
cc:66:d2:37:29:74:fa:ae:76:30:0e:8a:f7:22:d7:
33:37:ab:cb:a6:c7:40:63:c5:8b:2d:13:ab:d1:8a:
39:cf:25:28:ba:50:b4:87:1d:b0:37:43:ac:79:ef:
70:ab:76:c0:db:bb:0a:60:59:26:5e:db:05:0a:b3:
04:89:5c:59:29:b9:e6:74:42:1d:9d:38:7b:44:dc:
5f:cd:a8:36:c1:d6:ce:ea:a2:e3:40:1a:bc:b5:0e:
35:47:ab:a0:7a:4e:34:af:ab:73:38:fd:1e:c7:a2:
90:eb:87:68:58:6c:40:67:31:73:85:b9:10:4c:b6:
78:89:fc:6b:d8:96:4f:4a:e7:29:12:d8:88:64:72:
ce:1a:8b:84:66:54:e7:e0:63:6c:7b:75:14:88:43:
6a:0b:73:3b:15:ab:a7:c3:e6:36:5d:0a:ea:2f:4e:
b3:9d:c3:b6:aa:90:d0:29:be:42:cb:59:50:49:0a:
ad:7c:b9:38:32:1b:7d:db:e4:9d:05:3a:d7:4a:74:
e3:37:82:fa:08:1d:38:60:a5:b9:e5:92:e5:31:2a:
a7:ca:dc:41:3d:b2:bb:8c:c0:cc:9e:db:3b:c2:82:
f6:19:78:de:d0:c9:d1:9e:6b:22:a8:d7:be:75:95:
c2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:0B:96:BC:18:09:84:9C:B2:E1:85:92:89:66:13:20:9C:54:A0:48
X509v3 Authority Key Identifier:
keyid:24:BA:24:44:49:42:73:0F:6A:F2:B0:9C:B7:23:E5:C9:63:70:FB:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLokRElCcw9q8rCctyPlyWNw-4s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:29:7b:94:38:45:10:77:bc:f8:91:ad:ca:e0:6e:e8:29:e9:
28:1c:6a:41:d2:f0:e3:df:df:b5:ba:e0:6d:29:cf:41:0c:c7:
52:9f:f0:9a:15:1e:23:90:b2:56:1f:70:7a:e3:b7:89:c3:e2:
d3:22:51:20:e8:18:ba:02:e7:6a:75:76:19:5f:0d:16:71:7a:
11:43:ab:69:8c:c8:67:b0:67:ba:43:e5:2f:93:ad:96:7e:35:
67:ef:fe:04:76:c6:78:d6:de:ab:97:87:3f:ac:5d:12:5c:11:
84:f2:81:ef:0c:71:d0:1a:0a:e2:ce:b0:88:91:79:26:89:d5:
d1:67:13:fc:57:98:46:f0:dc:7e:ff:f4:b8:61:5e:3f:21:8e:
fe:cd:70:7d:85:d5:e9:a3:18:b9:98:15:a6:80:d5:50:2c:30:
ab:d8:be:ce:a1:5a:f2:a4:68:93:e9:fd:5f:bd:39:9a:10:49:
c7:17:7f:b1:1d:2e:af:95:33:0f:fd:08:8e:ac:82:c3:54:64:
e6:ac:15:02:f0:60:cc:e8:db:43:7d:18:84:9d:16:f2:71:cc:
ae:63:cb:6f:34:7e:9a:78:26:c6:a2:76:3f:08:57:aa:93:f1:
a5:a1:eb:14:8a:fb:57:2a:18:4b:ef:2b:f9:30:9e:cc:c7:2b:
6f:dd:55:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:18:31 2026 by rpki-client