
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft
File: jZcXcn1ujusjgHsxPAWNA1b_4WI.mft (raw, json)
Hash identifier: 32j8Yjz2F3wd3CyS6XK3gmO3xxawUFHTCEq89KTrXUA=
Subject key identifier: E7:51:07:96:90:42:A7:9E:22:C8:56:02:CD:3A:4D:24:96:DD:E7:7E
Authority key identifier: 8D:97:17:72:7D:6E:8E:EB:23:80:7B:31:3C:05:8D:03:56:FF:E1:62
Certificate issuer: /CN=A916B53B/serialNumber=8D9717727D6E8EEB23807B313C058D0356FFE162
Certificate serial: 012B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft
Manifest number: 0127
Signing time: Sun 01 Mar 2026 06:39:32 +0000
Manifest this update: Sun 01 Mar 2026 06:39:32 +0000
Manifest next update: Sun 08 Mar 2026 06:39:32 +0000
Files and hashes: 1: jZcXcn1ujusjgHsxPAWNA1b_4WI.crl (hash: kGeLZbAOPyz2+L5PH1eZPWutEn4RwA3geA5D00ddC4w=)
2: A7E24C00ABF411F0A0B37937C4F9AE02.roa (hash: ClZn2xirzr+629EzY8UXOvPJeXz2ck5eF+NekF81TbI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.crl
rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:39:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 299 (0x12b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B53B, serialNumber=8D9717727D6E8EEB23807B313C058D0356FFE162
Validity
Not Before: Mar 1 06:39:32 2026 GMT
Not After : Mar 8 06:39:32 2026 GMT
Subject: CN=69a3df24-6bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2d:e6:32:97:9d:e5:89:2d:70:f4:33:78:d0:
ba:b4:3a:92:c3:4e:a2:8f:7d:85:ce:f5:2b:5e:ed:
3f:f7:02:f2:65:00:21:51:38:8d:3a:77:c7:1f:d5:
8a:b1:e9:8c:da:8b:45:e4:70:e7:29:29:e9:20:83:
2a:05:09:c8:db:a6:10:df:eb:99:a4:da:21:af:1f:
86:71:dc:a1:5b:e2:8f:88:8e:b8:93:23:8c:48:08:
c3:38:73:ee:bd:94:fb:e9:31:3d:d3:87:fb:8e:ec:
cc:35:d4:20:4e:f8:65:0a:34:07:ae:23:44:82:00:
f2:c7:82:2d:b2:e5:80:b5:b5:f7:b9:c6:3c:b2:6e:
63:5a:2d:b6:16:3f:21:81:04:7e:19:bb:5f:89:86:
0d:d6:d5:b5:4f:cf:da:ad:bc:11:10:87:67:f4:6e:
45:ac:d2:fc:c3:ec:54:4b:85:f1:72:67:93:0a:3d:
54:c8:ec:69:65:6e:a4:6e:00:64:3c:5a:dd:b2:95:
59:e6:ef:50:69:90:4c:e3:8a:f4:bb:f9:9a:e8:4b:
65:63:fd:fd:53:cc:db:7c:b1:5c:3d:9c:ec:34:08:
d3:78:11:4e:36:c4:bc:cb:21:91:dc:4d:c2:15:a8:
e8:3b:56:39:51:50:f2:3e:d0:3d:27:6c:bc:c1:4d:
20:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:51:07:96:90:42:A7:9E:22:C8:56:02:CD:3A:4D:24:96:DD:E7:7E
X509v3 Authority Key Identifier:
keyid:8D:97:17:72:7D:6E:8E:EB:23:80:7B:31:3C:05:8D:03:56:FF:E1:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:dc:97:59:bb:4e:05:8b:ab:06:2e:df:0a:0b:c1:46:c3:8f:
ef:a2:bf:2a:97:5d:32:e5:e2:66:a3:dc:ef:3e:66:34:53:ec:
8f:09:48:5c:9a:a2:b8:bf:45:61:b1:a8:df:80:c2:ee:c6:38:
dd:1e:b3:00:9b:bf:0a:31:7a:46:85:64:ec:ae:5a:64:6a:5f:
b3:2c:92:94:06:e3:ab:41:14:33:bd:f3:fb:a6:ab:a0:59:1b:
8f:87:c2:1e:49:f2:a0:c9:b7:5e:e1:40:3e:47:84:33:25:99:
d3:d1:45:a0:2c:64:23:4b:83:de:da:13:c3:27:af:a2:8e:bb:
e1:2c:fd:31:af:2c:ec:6d:29:3f:85:a1:b3:3f:9e:3d:bd:94:
08:86:5b:eb:88:d5:d9:dc:74:23:d6:7c:8f:c2:d0:10:e8:95:
ab:a8:19:56:31:c3:27:6d:4f:9b:40:9e:ae:a2:c9:bf:24:5b:
34:9b:f5:c5:22:7e:1b:71:e6:a7:85:4a:f3:63:55:a8:d9:67:
f9:04:2d:6a:14:bc:ff:fa:4a:75:6d:3f:0f:20:9a:bf:72:92:
99:cd:60:2e:83:9d:c6:ab:c9:e0:cc:05:3b:8e:b1:0a:36:55:
a9:a2:1c:27:5f:16:00:44:0b:0d:62:16:09:1a:9f:54:df:52:
2c:1b:42:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:14:28 2026 by rpki-client