
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
File: JDIOr_moILjtpZ4D5AVVxfNP78w.mft (raw, json)
Hash identifier: GJe/m77mYymYQ25FwKs1FDLriTf0cFkgAsBffAA8GxA=
Subject key identifier: 91:2E:BC:6D:17:ED:5C:0C:4B:CC:DB:C6:40:E7:E8:53:47:47:4B:42
Authority key identifier: 24:32:0E:AF:F9:A8:20:B8:ED:A5:9E:03:E4:05:55:C5:F3:4F:EF:CC
Certificate issuer: /CN=A9164F45/serialNumber=24320EAFF9A820B8EDA59E03E40555C5F34FEFCC
Certificate serial: 0266
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
Manifest number: 024C
Signing time: Wed 23 Sep 2026 02:18:35 +0000
Manifest this update: Wed 23 Sep 2026 02:18:34 +0000
Manifest next update: Wed 30 Sep 2026 02:18:34 +0000
Files and hashes: 1: JDIOr_moILjtpZ4D5AVVxfNP78w.crl (hash: APB9bK4hYdDJgIVV+HZNK/AsqYLeh3ZN/FR8uRQrNDA=)
2: 7599519C42F811EEBCBA9981C4F9AE02.roa (hash: 2GxHjo4LAZa6xTK/E+JUdOOe1BBXua7ccz+Bu9RbDt0=)
3: 32B9FB9C42FD11EEBC3A6810C4F9AE02.roa (hash: HN5m9iiGmOPi7M0g3oqbmGw29tiEq8psLVzdLAeKejA=)
4: AC1FAF84432211EEB1984F73C4F9AE02.roa (hash: o9CJ5rmrT9hbqYWuYS8js+DGI0LN9I9OVqxViVX0Lyg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.crl
rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 02:18:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 614 (0x266)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164F45, serialNumber=24320EAFF9A820B8EDA59E03E40555C5F34FEFCC
Validity
Not Before: Sep 23 02:18:34 2026 GMT
Not After : Sep 30 02:18:34 2026 GMT
Subject: CN=6ab336fa-3f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3b:ea:78:14:6f:b5:74:a8:63:7b:9a:a5:15:
95:ce:89:b5:6c:91:e5:5c:36:08:21:93:77:dd:9d:
2b:15:a3:2c:bb:83:ac:25:fb:c3:88:29:38:7a:14:
63:d3:ca:52:41:0b:42:b8:1e:cb:c8:db:c8:a5:c4:
18:75:e5:9a:08:ed:5e:54:2d:4d:20:8f:cf:f4:a4:
65:39:19:b6:ae:13:d1:6a:8d:27:61:6e:f4:df:75:
38:3a:a6:43:29:dd:4d:e7:d4:ee:c9:03:9c:ae:77:
78:a7:bb:29:bf:5c:8c:99:b8:cc:46:bc:b3:61:3a:
e4:b9:f1:d9:82:fd:48:ca:39:b6:2d:f1:43:8c:e0:
b5:ca:aa:f8:3a:e4:8f:d7:60:ac:fb:48:5f:74:7c:
54:a8:97:fb:6d:5d:9c:45:0c:37:1f:76:c7:2b:ca:
a7:04:21:a9:0c:2d:c5:18:46:ab:5f:bd:58:de:0f:
5e:11:25:1c:68:ed:27:2d:7c:fa:cc:a4:17:77:c4:
ba:72:d2:7f:4c:25:19:41:2c:48:b8:40:7a:6d:b9:
fd:2d:f1:d7:13:40:ed:e2:5b:b7:80:9a:0f:b3:79:
94:bd:82:26:f2:90:81:b8:89:1a:46:11:41:a9:d6:
d9:11:89:d6:37:c1:70:fd:80:1e:1b:6b:dc:b7:9d:
6a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:2E:BC:6D:17:ED:5C:0C:4B:CC:DB:C6:40:E7:E8:53:47:47:4B:42
X509v3 Authority Key Identifier:
keyid:24:32:0E:AF:F9:A8:20:B8:ED:A5:9E:03:E4:05:55:C5:F3:4F:EF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:4d:02:cf:ae:bb:bd:e2:3c:ef:31:15:c5:9e:ae:32:f7:ad:
5e:2b:5f:8e:15:bd:b6:ae:8f:30:73:c7:d1:d5:e8:af:94:43:
06:ff:c4:f6:be:5e:24:36:62:a9:5c:be:35:5a:df:3d:bc:7c:
8d:34:90:af:0d:98:02:d6:fb:32:0d:d4:4c:af:3d:f8:32:f9:
93:58:34:63:ea:20:28:f2:36:3f:2a:2a:f5:8a:b2:79:66:b8:
ca:4a:f4:bb:0f:3f:f8:63:a4:56:4c:fc:d1:14:2b:fb:04:71:
b9:b2:df:9e:83:b7:f8:f8:ca:ed:4b:10:15:b2:71:77:68:6f:
0f:39:3f:30:e9:af:dd:04:42:4a:f0:78:34:e8:9b:a9:34:49:
fe:a7:c8:08:f8:12:00:1a:69:14:51:39:58:c6:44:9a:3d:38:
3a:d6:8a:da:f3:d4:ee:33:98:85:60:33:03:df:d3:23:e6:68:
d8:4b:16:71:3e:c8:89:e9:e7:71:b5:fb:cd:e4:60:ec:eb:bb:
da:bb:53:a9:3c:72:59:f9:b6:51:b4:84:ea:4a:f7:42:b0:78:
3b:30:ca:91:4a:01:fe:a2:74:e2:23:3b:57:8d:24:06:26:32:
4b:30:6d:35:49:ee:de:de:63:f5:fb:1c:62:6e:97:b4:5b:3e:
d0:5c:33:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:50:00 2026 by rpki-client