
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
File: JDIOr_moILjtpZ4D5AVVxfNP78w.mft (raw, json)
Hash identifier: x0eE20v82TZBTO17E1q99HZCYv4yf5AYU3gCIgpydLk=
Subject key identifier: C6:7B:4C:C5:F1:D9:46:91:BC:FB:4A:12:7D:B6:0C:D4:3E:79:FC:6B
Authority key identifier: 24:32:0E:AF:F9:A8:20:B8:ED:A5:9E:03:E4:05:55:C5:F3:4F:EF:CC
Certificate issuer: /CN=A9164F45/serialNumber=24320EAFF9A820B8EDA59E03E40555C5F34FEFCC
Certificate serial: 01F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
Manifest number: 01E0
Signing time: Sun 01 Mar 2026 04:16:53 +0000
Manifest this update: Sun 01 Mar 2026 04:16:53 +0000
Manifest next update: Sun 08 Mar 2026 04:16:53 +0000
Files and hashes: 1: JDIOr_moILjtpZ4D5AVVxfNP78w.crl (hash: HZQTtxaup13Qfhjdg5igxg++vCB0yo4sF772wLg7GNM=)
2: AC1FAF84432211EEB1984F73C4F9AE02.roa (hash: 9II8C/zPZ8Sqh/GnkvMtaceds37LRqTiNOgVoHgvhUI=)
3: 7599519C42F811EEBCBA9981C4F9AE02.roa (hash: Iuws9NrVtp4Hp18jNO1d1Y0TiH8At1P1mnw1eI9JeUU=)
4: 32B9FB9C42FD11EEBC3A6810C4F9AE02.roa (hash: WV1AYVH+VxYegf7IkYCFOtt6eabKoa8E7Gk8VCZklvI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.crl
rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 04:16:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 497 (0x1f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164F45, serialNumber=24320EAFF9A820B8EDA59E03E40555C5F34FEFCC
Validity
Not Before: Mar 1 04:16:53 2026 GMT
Not After : Mar 8 04:16:53 2026 GMT
Subject: CN=69a3bdb5-75cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8c:0a:f4:04:a0:3f:14:f5:94:6c:1e:34:c7:
91:bf:8c:a6:b2:6b:6a:81:ba:49:7e:eb:c6:25:c7:
29:dc:33:7a:f4:56:bd:a8:b3:d5:c7:f0:ef:e2:19:
21:95:e0:9c:8f:dd:79:d6:77:eb:3e:51:44:08:1a:
8b:e9:39:4f:b6:d1:f4:be:a4:0e:d4:4c:e9:b1:74:
01:15:eb:d6:1c:58:5c:19:f4:ce:11:72:64:54:20:
bd:c0:5a:58:11:89:af:38:62:4b:52:1e:1f:a6:8c:
14:21:0b:de:91:8f:16:81:8f:47:88:08:f5:14:42:
79:94:ee:fe:19:6d:66:ee:83:6e:6d:ec:4d:6c:9d:
41:2d:de:37:ee:61:63:2d:d3:4c:d2:b4:a2:76:98:
d0:a8:ea:5f:8a:1e:0f:6c:c2:fa:2c:6a:e8:d8:45:
32:45:5b:df:e5:61:b3:a0:43:90:37:2e:56:ff:3a:
b9:e3:80:c9:83:51:c0:a6:9a:46:d4:7c:ec:f0:90:
83:88:e1:b5:4b:5a:5e:af:db:26:62:74:a7:31:3a:
fe:16:d6:e1:cf:d2:da:22:8a:65:12:be:e0:be:f4:
ed:fa:1a:f6:22:59:3a:48:04:ca:bc:e3:e6:a9:2c:
8a:ac:84:57:54:44:04:5e:3b:13:d1:b6:95:20:cb:
b3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:7B:4C:C5:F1:D9:46:91:BC:FB:4A:12:7D:B6:0C:D4:3E:79:FC:6B
X509v3 Authority Key Identifier:
keyid:24:32:0E:AF:F9:A8:20:B8:ED:A5:9E:03:E4:05:55:C5:F3:4F:EF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:70:7e:b9:5b:ee:69:99:72:3d:d2:d2:87:42:f0:dc:3f:00:
40:34:e1:a1:5d:fd:1e:b6:ed:30:71:34:9a:75:ea:13:56:a6:
32:a0:8f:66:c7:cf:b8:fc:14:4f:a0:32:3e:43:eb:cf:59:3c:
c7:14:53:02:12:2b:14:ad:07:48:fb:0a:3c:4e:51:3c:e3:29:
0a:42:4c:a4:11:17:29:01:c9:61:96:b1:2d:11:c8:9a:34:3a:
90:93:9d:56:be:7d:23:96:e2:d4:04:25:97:4c:66:d0:39:9b:
12:d3:51:73:f4:a1:e0:ae:4d:d3:7e:b4:54:ea:8a:dd:2f:02:
86:a7:6e:7c:5f:44:2e:a3:ef:d8:c9:49:c4:49:47:a3:8b:9d:
7b:d8:f4:f8:82:fb:71:b2:3c:4d:8b:de:61:3e:ad:a7:87:41:
f5:d0:dd:d1:47:39:d1:b7:9e:92:26:22:c1:54:78:8b:16:37:
78:0e:eb:53:22:f9:52:4f:29:04:7f:e7:41:5b:ef:8f:0d:01:
79:15:42:e7:e8:b4:66:4d:a2:4d:59:0c:b3:ec:ee:93:e8:de:
39:9c:6d:29:d3:f3:5a:d0:2a:33:1e:59:78:29:73:b3:42:41:
9c:ad:67:9e:63:c1:e3:09:9f:bf:fc:f1:33:93:5a:ed:aa:70:
c3:d4:c2:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:36:20 2026 by rpki-client