
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.mft
File: JZaec6mNmfQurIlCbGuUk8hdMxo.mft (raw, json)
Hash identifier: xKloAdigQVs9yfAxV1XZjRppXKI3EgnsmIcDNnN6Pqg=
Subject key identifier: 98:71:0A:D1:E9:60:57:90:98:89:C0:49:D5:78:FB:20:2A:09:2C:A8
Authority key identifier: 25:96:9E:73:A9:8D:99:F4:2E:AC:89:42:6C:6B:94:93:C8:5D:33:1A
Certificate issuer: /CN=A9175911/serialNumber=25969E73A98D99F42EAC89426C6B9493C85D331A
Certificate serial: 023E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZaec6mNmfQurIlCbGuUk8hdMxo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.mft
Manifest number: 0236
Signing time: Tue 29 Sep 2026 03:01:00 +0000
Manifest this update: Tue 29 Sep 2026 03:00:59 +0000
Manifest next update: Tue 06 Oct 2026 03:00:59 +0000
Files and hashes: 1: JZaec6mNmfQurIlCbGuUk8hdMxo.crl (hash: lhQLamrLo0IgVHHeWDyiCLXOOH6zfGJj5tunAbebBoc=)
2: 06BD1FD4D76F11F0A9A4AAFE78D3641D.roa (hash: ty9kxm+UQwtgkGWflh7iO1wJ15otqsdqQHE+5RW40pE=)
3: 07C2DDD0597011EE9C188A29C4F9AE02.roa (hash: qHv8Ru0jBRthxVf240z5P/DKqQtKKQRC7eInZ1grvl0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.crl
rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZaec6mNmfQurIlCbGuUk8hdMxo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 574 (0x23e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175911, serialNumber=25969E73A98D99F42EAC89426C6B9493C85D331A
Validity
Not Before: Sep 29 03:00:59 2026 GMT
Not After : Oct 6 03:00:59 2026 GMT
Subject: CN=6abb29ec-4fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1d:c5:21:82:bc:31:d7:32:ef:36:05:1d:95:
8f:6a:00:d2:6c:11:7c:b7:f3:47:87:5a:da:3b:a1:
7d:3d:48:24:b9:f6:9e:1f:e6:79:cc:74:01:8d:b4:
be:aa:d9:6d:d5:f0:b2:da:25:c5:94:bd:0a:2e:61:
2c:de:fb:bb:d5:1b:92:77:9d:d8:97:b6:5b:57:1f:
75:5c:1e:ae:ae:32:4f:7d:43:04:51:80:9a:16:ef:
64:39:ec:a5:f2:24:be:11:df:3b:f4:d0:69:d1:8a:
a4:b1:3a:d9:f2:e3:40:0e:e6:f6:74:9c:e9:77:27:
3b:2d:97:b1:f7:df:5c:cf:dd:25:7f:52:0d:37:61:
dd:96:cf:f3:09:63:2c:73:6a:1d:80:83:c9:e1:28:
96:e6:6b:1a:65:4a:61:15:be:c5:ad:a8:82:9b:09:
ce:44:e6:35:db:0c:f4:58:9b:1d:9e:f2:9e:8a:f1:
de:fb:72:6d:ae:33:bf:01:e6:be:af:77:41:ce:ec:
18:ae:14:7c:27:a2:51:7e:e4:a7:7c:91:54:72:d9:
21:81:7f:35:82:1b:48:f3:6e:d4:e3:8c:8f:f1:07:
f6:c6:64:8e:b3:65:10:16:14:fc:bd:f3:d9:62:f8:
e2:e2:81:de:df:99:e0:83:84:c3:5a:df:87:ca:b1:
07:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:71:0A:D1:E9:60:57:90:98:89:C0:49:D5:78:FB:20:2A:09:2C:A8
X509v3 Authority Key Identifier:
keyid:25:96:9E:73:A9:8D:99:F4:2E:AC:89:42:6C:6B:94:93:C8:5D:33:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZaec6mNmfQurIlCbGuUk8hdMxo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:b5:a0:cc:bd:72:7e:74:d9:f7:69:b3:84:b0:99:5b:40:48:
95:ab:4a:8a:6e:b4:01:92:ae:0e:c0:2c:7d:cc:66:d6:9e:e0:
0c:d7:8a:1c:5f:c8:89:4a:53:02:76:3d:33:a0:10:19:25:cd:
28:c8:01:03:b7:db:4a:58:b6:ca:4c:55:a7:27:5e:59:1a:65:
e1:c3:62:44:3b:3f:16:73:18:19:76:5f:d4:28:41:34:ce:c9:
4f:98:d7:9e:16:d8:08:ba:30:b7:04:61:9b:4b:79:f4:45:8e:
c1:0b:bc:d9:db:c5:eb:56:ee:59:f6:75:8f:23:0d:5d:07:75:
05:72:60:42:cc:6c:30:99:6f:68:2d:c7:69:2d:37:ff:d4:ee:
79:2a:2c:d0:73:34:c5:2f:2c:6a:2d:16:ab:c2:d7:79:ba:48:
8f:5d:02:a1:cf:ec:a8:2f:75:98:98:60:02:15:90:c9:9f:0e:
69:20:a0:4e:b2:12:37:de:75:20:2e:78:09:37:a1:64:d2:32:
95:c3:b4:1c:52:d3:9b:18:a5:f7:e1:98:9f:30:24:9f:c9:9e:
87:d1:43:d1:6f:cb:ff:1a:7a:8b:dc:f4:bd:56:af:5f:e3:dc:
b3:0e:4c:11:ab:e3:3f:c4:6d:a9:2d:01:53:4e:46:8b:a3:a1:
01:3b:44:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 23:25:20 2026 by rpki-client