
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft
File: -JdCLlAQBtJgHYWlAXlTJrr-c4g.mft (raw, json)
Hash identifier: PwE41GkOypCebpTCrBVfd4GcQmkscKVW85G9i0NMPfE=
Subject key identifier: E3:6F:94:5F:31:AE:70:DD:A4:81:3D:DE:7C:A6:67:99:F7:01:E1:C1
Authority key identifier: F8:97:42:2E:50:10:06:D2:60:1D:85:A5:01:79:53:26:BA:FE:73:88
Certificate issuer: /CN=A9170829/serialNumber=F897422E501006D2601D85A501795326BAFE7388
Certificate serial: 01EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft
Manifest number: 068F
Signing time: Sun 01 Mar 2026 00:36:33 +0000
Manifest this update: Sun 01 Mar 2026 00:36:32 +0000
Manifest next update: Sun 08 Mar 2026 00:36:32 +0000
Files and hashes: 1: -JdCLlAQBtJgHYWlAXlTJrr-c4g.crl (hash: KwvBT+OmumWnV7jVuquk7GEkYhyqcPQ1REDCcDceKME=)
2: C4D7F9DA584111EE85E40820C4F9AE02.roa (hash: sYy/5q9YDB/cIRu+BDtkJ8+lJ/FCCk8GJXN6Q05+XyA=)
3: C5C77866584111EE85E40820C4F9AE02.roa (hash: pdM+P+02WfirDBU7ez3rFKthQlrXbj54VyWDtVJ3HCs=)
4: C55784DE584111EE85E40820C4F9AE02.roa (hash: x8Fnq8EKLvBxDSGqIJ7xq0nW22TsvsoXDLqk5JiiEI8=)
5: C44DEE8E584111EE85E40820C4F9AE02.roa (hash: vMGnwA2xpq4QvpCNqaKRAPZGxsbB0A1fJfOxfbC2oj4=)
6: F2706122D16E11F08E21851DC4F9AE02.roa (hash: 1g/LYub57mHA3FKdRrewudn4T1lvhyuClXZ61Nv+ZNw=)
7: E6C709BAEADD11F088D8AEF6666F56BC.roa (hash: rP8vwuNVrV+XZ94mS6lCZynoh25REFwHFSgqyDq/aEE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.crl
rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 00:36:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 491 (0x1eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170829, serialNumber=F897422E501006D2601D85A501795326BAFE7388
Validity
Not Before: Mar 1 00:36:32 2026 GMT
Not After : Mar 8 00:36:32 2026 GMT
Subject: CN=69a38a11-c013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d4:c9:ed:99:06:66:79:4a:dd:6a:4f:2d:d8:
75:74:93:18:cd:63:08:0f:5b:e8:bf:0a:68:79:b7:
14:0b:8f:78:5c:f9:bd:88:ac:3e:73:bd:50:d3:f6:
99:41:ba:d1:40:51:8e:08:4e:a8:ff:dc:fe:4b:84:
b4:34:d6:72:88:11:dd:4b:97:79:3b:b4:13:67:f9:
85:ed:05:ee:58:6b:9d:ab:5b:ca:9c:6c:5c:cc:46:
ce:4e:c9:81:dc:95:7d:66:79:8a:d2:a3:aa:14:d3:
fb:55:93:0a:93:57:f9:a3:7e:97:50:b7:cf:c0:78:
a7:89:92:9e:7e:e4:90:84:88:19:69:df:3b:88:df:
a9:40:8a:4f:52:e4:0a:18:b8:15:52:25:a4:ed:0e:
bf:6e:ca:e9:99:5f:2a:30:9c:a1:bb:9d:37:98:8e:
f6:7e:f7:18:80:5c:97:79:67:5a:a0:84:9e:6e:20:
24:53:25:bf:a1:6a:a5:8f:d6:f1:07:6c:6d:d5:38:
ae:06:7c:b4:fa:b3:35:35:ec:09:32:21:4e:ea:4b:
31:0d:f0:24:00:07:a9:e7:dc:96:88:01:3b:6e:c1:
70:47:55:ef:dc:92:8e:d6:aa:62:10:5d:cd:61:f7:
b8:7b:be:20:5d:7d:78:9a:77:f6:57:87:03:b8:89:
e6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:6F:94:5F:31:AE:70:DD:A4:81:3D:DE:7C:A6:67:99:F7:01:E1:C1
X509v3 Authority Key Identifier:
keyid:F8:97:42:2E:50:10:06:D2:60:1D:85:A5:01:79:53:26:BA:FE:73:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c4:7e:c2:09:0a:39:5a:53:b8:62:27:55:f0:07:93:cc:b8:e8:
bc:7c:30:02:f9:18:db:19:2a:4c:dd:47:d8:bd:77:ca:64:d3:
d0:fa:e6:8a:a3:f5:75:a8:56:bc:26:58:f9:5e:74:8c:1d:16:
56:68:1a:08:20:f9:81:8f:75:cd:21:91:a9:cf:39:2c:d2:07:
6c:cc:68:27:3a:d8:ba:2a:9f:3f:c5:f4:4d:4a:a0:ba:8e:a4:
54:83:ec:78:fe:dc:94:8c:9a:99:46:ad:bb:83:cf:8b:33:64:
ea:63:96:8a:bb:e8:b1:aa:06:1e:16:72:11:68:69:6b:da:1a:
dc:d4:a5:09:c1:6f:99:3b:aa:11:6e:7d:24:9b:4a:fe:79:f5:
67:2b:2f:7c:76:3e:0d:60:56:61:f8:d9:e3:54:ad:77:11:84:
e8:51:ab:bf:eb:b0:9b:e1:25:87:4a:7a:26:f2:5b:d0:28:3e:
7f:fd:34:64:15:9c:ae:3c:80:54:64:4a:97:f5:f2:31:f2:93:
e8:0f:0d:27:f5:21:96:96:8b:0e:b5:47:19:fb:5e:a7:1d:88:
db:7d:b2:15:d8:f2:18:7c:51:26:59:01:4c:c9:99:b7:2a:87:
2f:43:70:d7:ac:70:31:5a:8d:6e:17:a3:fc:82:a3:65:e2:e3:
7f:51:0f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:39:09 2026 by rpki-client