
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.mft
File: J5ydeYJLogRvE4r2zbijsI8DvrM.mft (raw, json)
Hash identifier: YA1VgA+b6ywVbOj1RZJNA+SDTQHJUt402jGoAwQ5hg4=
Subject key identifier: 49:3C:BB:44:84:56:49:20:F0:47:FF:51:92:3A:3B:73:C5:87:3C:16
Authority key identifier: 27:9C:9D:79:82:4B:A2:04:6F:13:8A:F6:CD:B8:A3:B0:8F:03:BE:B3
Certificate issuer: /CN=A9170927/serialNumber=279C9D79824BA2046F138AF6CDB8A3B08F03BEB3
Certificate serial: C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5ydeYJLogRvE4r2zbijsI8DvrM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.mft
Manifest number: BA
Signing time: Sun 01 Mar 2026 08:22:16 +0000
Manifest this update: Sun 01 Mar 2026 08:22:16 +0000
Manifest next update: Sun 08 Mar 2026 08:22:16 +0000
Files and hashes: 1: J5ydeYJLogRvE4r2zbijsI8DvrM.crl (hash: DuaquX0yYGb3JbsRzC0V+5HGzUd1aCJBG/9Q/0W05uY=)
2: 6D8A3DC29DCD11F0A412CC62C4F9AE02.roa (hash: 6dbULfL3W6yAaGvVmi4JRp24GJKnWO0Bw/N0jVvMnLg=)
3: F31C1B909D3C11F097272925C4F9AE02.roa (hash: SWDeMxklFh5rJoztqSSMHcLOo+zW7hCc5nM3df/2df0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.crl
rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5ydeYJLogRvE4r2zbijsI8DvrM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:22:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 192 (0xc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170927, serialNumber=279C9D79824BA2046F138AF6CDB8A3B08F03BEB3
Validity
Not Before: Mar 1 08:22:16 2026 GMT
Not After : Mar 8 08:22:16 2026 GMT
Subject: CN=69a3f738-86e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0c:d0:c5:91:52:52:18:44:98:05:22:60:9d:
c9:1a:1d:75:b0:0c:fb:c6:ae:14:a4:24:5d:eb:b9:
2c:2a:be:c8:8a:da:4e:d4:38:0b:3c:f1:2c:32:f4:
5c:a6:fe:67:5a:c2:bf:d6:5f:89:ee:a7:13:04:f3:
ac:5f:4b:f7:55:1c:48:ed:b4:ad:08:11:df:21:96:
88:44:14:2e:aa:7d:d5:13:ca:06:ec:5e:ca:99:33:
de:27:0b:d0:8e:f5:14:6e:8e:d9:fa:0e:fa:a9:55:
54:a8:82:21:d6:ac:8d:3b:f6:f5:39:35:fb:d2:20:
84:cb:ed:bf:88:03:66:79:f3:0d:7a:ba:12:82:0f:
a4:ce:99:83:2e:e7:6e:f8:7a:07:ce:99:91:67:68:
44:ad:8e:89:76:45:8c:74:93:cf:dc:19:81:63:b2:
bd:17:6a:f2:63:cc:bf:14:8e:9d:97:ac:fc:29:c2:
23:c4:fe:91:1e:3a:96:98:30:40:dd:65:fa:80:2e:
31:39:18:57:b8:bc:29:8e:c6:0e:98:12:d1:da:77:
42:d9:dd:27:7f:2e:c2:2d:93:47:8d:2b:0d:64:76:
fb:74:0a:8f:b9:9f:ce:8b:d4:a7:31:b7:38:c4:bb:
98:3e:3e:75:3d:26:99:40:41:f3:ef:07:ed:fc:36:
91:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:3C:BB:44:84:56:49:20:F0:47:FF:51:92:3A:3B:73:C5:87:3C:16
X509v3 Authority Key Identifier:
keyid:27:9C:9D:79:82:4B:A2:04:6F:13:8A:F6:CD:B8:A3:B0:8F:03:BE:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5ydeYJLogRvE4r2zbijsI8DvrM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:84:e0:22:ce:16:4d:2e:99:31:c2:c7:b2:f0:af:8f:53:68:
ea:15:6f:f8:dd:be:3e:3b:c0:20:87:d7:f7:80:7e:0b:ae:f4:
46:41:40:6b:51:21:56:3d:d3:e4:b4:81:b6:6a:64:c2:41:0e:
de:d0:e2:2c:6a:73:b1:2d:ee:f3:37:f2:1a:4f:8a:33:c3:e0:
7d:67:9d:be:e5:5e:3d:14:f1:5f:4c:bb:dd:ca:20:49:7d:21:
40:e1:1f:b8:6d:62:8c:21:c9:73:7f:1f:92:9a:bb:eb:a2:e5:
10:03:cd:75:e2:29:86:36:17:4b:de:79:e2:2e:d1:3c:b1:14:
52:72:00:3c:9d:41:37:be:46:56:b9:b2:df:7a:c0:67:d5:dd:
0c:1a:59:5c:f2:64:ce:a0:40:d0:e2:ab:3a:12:60:55:73:ff:
32:33:47:6a:5a:0e:10:50:0c:a7:0c:71:11:db:14:b5:6d:03:
2e:3a:00:af:8d:0a:a1:c3:8f:ec:a9:ce:da:e7:21:31:bf:3d:
14:b5:d0:32:75:d6:d5:95:df:35:d5:6a:f8:56:96:9c:1c:ea:
5b:c6:d3:2f:c1:8b:c3:53:da:5d:29:03:fd:0b:fb:52:94:1c:
98:92:6b:b7:e9:99:f5:c5:c1:44:92:a7:1b:dd:03:b9:e2:18:
76:85:ae:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:19:11 2026 by rpki-client