
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft
File: -JdCLlAQBtJgHYWlAXlTJrr-c4g.mft (raw, json)
Hash identifier: 93SY5lp1leyQUZzNYXiRJ2C3vrZ6npLmac7NgH1n1Ag=
Subject key identifier: F8:12:10:C9:DD:1B:12:81:D5:70:07:AE:9B:7D:56:E6:4E:46:9C:3E
Authority key identifier: F8:97:42:2E:50:10:06:D2:60:1D:85:A5:01:79:53:26:BA:FE:73:88
Certificate issuer: /CN=A9170829/serialNumber=F897422E501006D2601D85A501795326BAFE7388
Certificate serial: 024B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft
Manifest number: 072B
Signing time: Mon 27 Jul 2026 00:41:09 +0000
Manifest this update: Mon 27 Jul 2026 00:41:09 +0000
Manifest next update: Mon 03 Aug 2026 00:41:09 +0000
Files and hashes: 1: -JdCLlAQBtJgHYWlAXlTJrr-c4g.crl (hash: XL7txE3ZHPiKQpyJWYpGq9w6GcnaMTp9ViUJMvPSt1s=)
2: C5C77866584111EE85E40820C4F9AE02.roa (hash: o09B0PsJspIE7YM1wHmZQROS9GUS/vHR3P6a96Hv63k=)
3: F2706122D16E11F08E21851DC4F9AE02.roa (hash: U5FE2Jl9i12aLoYdhP4eL42j8vYOgjImKvyyJ7bw++c=)
4: C55784DE584111EE85E40820C4F9AE02.roa (hash: HVeRuKGPvgRMfPHsqbyGBs/7U9hBE+gCk7rxayLwau8=)
5: C44DEE8E584111EE85E40820C4F9AE02.roa (hash: KPudjn9fAIyxH6iO+Vq+v5F8LqajNGVdpDuC+DrMuA0=)
6: C4D7F9DA584111EE85E40820C4F9AE02.roa (hash: B9f80EoI0x+BIg2AFxeHEGvINQTmjdsYocZpJvfDc0A=)
7: E6C709BAEADD11F088D8AEF6666F56BC.roa (hash: vC4STLzHVCOMzh9f2GrOs/JinLrCWg2GfnKg/8s/U3g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.crl
rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 00:41:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 587 (0x24b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170829, serialNumber=F897422E501006D2601D85A501795326BAFE7388
Validity
Not Before: Jul 27 00:41:09 2026 GMT
Not After : Aug 3 00:41:09 2026 GMT
Subject: CN=6a66a925-a7de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:80:53:c5:42:56:12:ae:08:b2:89:46:70:12:
43:70:84:a3:97:de:f8:6a:7d:7d:ce:2d:27:c2:f2:
1f:6a:87:ff:60:4b:7b:c0:dc:4a:05:eb:32:9d:18:
ac:41:c0:ba:4d:45:cc:20:7f:b1:95:57:41:e3:e7:
1b:e8:25:be:e7:32:ff:84:8b:f1:af:d5:75:b3:8c:
d2:2c:48:59:4b:2a:2c:be:7b:85:11:8b:81:c4:7c:
5d:45:68:6e:e7:df:c8:50:3d:61:ab:25:2c:94:02:
14:30:6a:b0:66:46:2e:fc:d8:0e:19:26:19:fd:ff:
05:ee:32:fb:d1:82:ea:fd:66:50:29:71:a8:a3:21:
1e:8b:01:e3:67:54:5b:6c:29:d8:55:9e:18:68:30:
90:13:15:01:3e:8c:4a:2f:a4:84:ed:b0:f3:b0:ee:
8e:21:26:46:8d:a3:b1:33:2a:1d:83:f7:fa:42:12:
46:ca:de:2f:0c:05:1f:2a:e0:c0:61:13:96:b4:76:
28:6d:5a:28:53:42:a9:69:f0:dd:e8:96:6b:21:23:
00:76:76:8c:fb:51:ba:e7:9e:f6:68:69:56:92:bf:
a2:9e:3d:a9:8c:e0:d7:8d:78:7f:38:eb:d2:2e:e6:
d8:77:11:71:24:d8:51:df:fb:13:9d:9b:d6:f0:e8:
71:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:12:10:C9:DD:1B:12:81:D5:70:07:AE:9B:7D:56:E6:4E:46:9C:3E
X509v3 Authority Key Identifier:
keyid:F8:97:42:2E:50:10:06:D2:60:1D:85:A5:01:79:53:26:BA:FE:73:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:69:a9:e8:de:94:a4:b8:79:32:65:86:47:7f:2d:d2:de:d8:
65:cf:86:65:eb:90:31:fa:6d:09:9a:11:e5:2c:f0:64:d8:9f:
78:74:01:d8:0d:37:77:06:7a:7d:02:9d:d8:ea:47:74:2a:63:
60:7e:1b:9d:d5:33:61:22:f5:29:49:1e:3e:e2:b3:8b:e4:e8:
6e:5a:a1:fa:17:b6:26:d1:71:da:5a:b9:2a:0c:58:c6:87:68:
83:14:48:61:e4:93:fe:8c:f2:0f:7a:5c:d1:fc:37:bd:92:a5:
88:c6:cb:a1:0c:59:5d:9e:79:50:4a:0d:a4:7b:43:00:11:89:
a0:80:70:2e:b8:22:7f:fb:da:90:b8:9a:f3:b3:58:e1:61:1b:
f2:7e:8e:bf:a0:13:ad:45:95:fd:80:40:8a:fe:05:5a:e1:0b:
be:6a:45:35:9d:a8:b4:0d:49:0a:07:1e:e4:9b:6b:fb:f6:a3:
b6:98:bb:ae:6e:63:4f:44:40:c8:27:dd:6a:46:a4:9b:ea:cd:
8c:c8:62:d1:c7:ea:b9:a8:54:ed:96:02:a8:c0:54:68:96:fb:
ef:53:7f:cb:24:33:6b:ce:43:49:40:68:29:18:71:08:93:24:
31:aa:0f:ef:50:3a:ce:cc:e8:56:2f:b5:fa:de:08:b9:56:44:
3f:a4:7d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:05:22 2026 by rpki-client