
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft
File: jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft (raw, json)
Hash identifier: dQwZ9gmhcIkIvMiKnfJRoF9fE9mVbX1zouM0a+P0/aI=
Subject key identifier: 28:9E:4B:79:27:F3:31:7A:64:C2:13:6F:52:15:58:40:05:BB:A4:9A
Authority key identifier: 8E:52:61:23:EF:52:CF:84:95:58:26:A2:72:8A:33:07:57:F1:E8:0C
Certificate issuer: /CN=A917A2D1/serialNumber=8E526123EF52CF84955826A2728A330757F1E80C
Certificate serial: 0182
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft
Manifest number: 017C
Signing time: Mon 27 Jul 2026 06:27:09 +0000
Manifest this update: Mon 27 Jul 2026 06:27:08 +0000
Manifest next update: Mon 03 Aug 2026 06:27:08 +0000
Files and hashes: 1: jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl (hash: DptD1bgRvK0Muzxa/ZjnENqAaHt+HreBAKAU7Sf2AAo=)
2: 29703A0645A911EF965B5A37C4F9AE02.roa (hash: 9bbDY8F7VTJe7fWMHNRwEy390EAPlvg4QCMeRuahlMA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl
rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 06:27:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 386 (0x182)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A2D1, serialNumber=8E526123EF52CF84955826A2728A330757F1E80C
Validity
Not Before: Jul 27 06:27:08 2026 GMT
Not After : Aug 3 06:27:08 2026 GMT
Subject: CN=6a66fa3c-a2ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:15:dc:09:a5:b3:b0:98:78:e8:5d:c2:b7:1e:
d7:b4:4f:29:03:58:6a:10:b5:57:ea:0f:48:0c:f6:
e2:09:2f:ee:03:e7:9e:fd:34:84:95:59:fa:e7:c9:
a2:a5:d6:60:eb:6b:01:b6:3f:a9:99:dc:14:59:6f:
0a:e7:18:82:12:37:a4:7e:ed:c3:aa:15:d7:ff:cd:
7d:6f:2e:23:36:06:c5:0b:71:81:33:ea:72:12:61:
31:ef:a6:23:81:77:10:89:73:51:07:f0:54:11:15:
0a:97:8b:93:ce:fe:10:16:51:4d:8e:61:2b:92:28:
61:0d:50:78:38:3a:f9:ca:1e:07:4e:fb:ef:6e:b9:
be:d3:b2:a0:ec:7c:86:46:97:5a:0d:91:ec:21:0d:
56:6f:e7:d5:93:5e:b1:e0:2f:d8:ab:89:76:09:aa:
86:81:3f:5c:96:3d:a0:9a:ed:44:f3:bb:ac:62:31:
80:a0:4d:a5:87:4e:c2:1f:c3:38:01:65:33:d7:45:
2b:f1:57:58:65:71:d8:34:9c:09:95:fe:38:ce:da:
a7:80:02:14:3e:88:e2:40:3c:15:2b:7a:82:18:d9:
00:a4:fd:4f:f4:d8:61:74:0a:8c:c1:b0:3b:4e:37:
1e:15:98:32:bb:29:93:50:99:1b:a0:64:08:18:71:
b5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:9E:4B:79:27:F3:31:7A:64:C2:13:6F:52:15:58:40:05:BB:A4:9A
X509v3 Authority Key Identifier:
keyid:8E:52:61:23:EF:52:CF:84:95:58:26:A2:72:8A:33:07:57:F1:E8:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:51:6f:3c:8c:2b:d5:94:1f:8e:ce:92:45:c7:1b:11:6a:68:
e1:1b:e3:ad:2c:2c:e9:d0:ed:b5:a7:b9:01:42:1e:49:0e:5f:
c3:3f:21:b6:84:36:c4:61:4a:b3:b8:63:60:8d:93:b0:d4:56:
14:8b:c6:cd:57:48:b7:b5:cd:a7:46:39:26:eb:b3:68:40:fc:
5a:a7:d3:ce:04:8f:aa:dc:6a:c3:86:6a:4f:2a:4c:75:3a:db:
b9:dc:b1:64:43:a9:22:4d:d3:20:52:9e:e5:ec:0b:2b:fe:ea:
8b:fa:d4:30:33:ce:e1:aa:13:55:b0:3e:5d:d3:23:5a:a1:e2:
5c:ae:c7:46:ac:ab:62:14:38:fa:3b:d0:a7:6a:be:93:0b:d0:
7a:00:22:03:c6:41:c9:94:9e:e2:d2:fc:e5:84:b4:31:c1:e7:
f9:d8:7d:16:51:cc:cc:bf:52:7d:c1:c3:e8:20:e6:e2:3b:b9:
02:1e:bd:8e:d5:47:6e:4f:6b:8b:5c:d3:d7:f9:40:dc:fd:0a:
34:71:4b:96:0b:b1:a4:0a:e4:97:c1:e8:96:85:a0:79:87:a8:
94:6d:d4:e6:b1:f0:f7:00:3b:7c:3a:54:de:c0:96:24:a5:bd:
cd:28:e5:02:43:63:68:bf:fb:7b:ef:e6:82:85:51:f0:10:dc:
f3:7c:64:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:46:06 2026 by rpki-client