
$ rpki-client -vvf rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft
File: jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft (raw, json)
Hash identifier: y5wSpSasIGEnulvxqK2ezhk11hAuRPTyRJNYgPlOWS8=
Subject key identifier: E2:9E:B9:E4:5F:1F:FA:A3:35:EC:FD:70:2A:85:6C:95:CE:58:F2:9D
Authority key identifier: 8D:CD:E5:2B:9B:8B:05:22:BE:26:71:3A:41:86:56:70:A6:1E:E8:6D
Certificate issuer: /CN=A9181375/serialNumber=8DCDE52B9B8B0522BE26713A41865670A61EE86D
Certificate serial: 0176
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft
Manifest number: 016F
Signing time: Fri 17 Apr 2026 04:35:48 +0000
Manifest this update: Fri 17 Apr 2026 04:35:47 +0000
Manifest next update: Fri 24 Apr 2026 04:35:47 +0000
Files and hashes: 1: jc3lK5uLBSK-JnE6QYZWcKYe6G0.crl (hash: dvNtM+Hv+LrVyAePkvgZ5Bo4eM4gHGGq4dg3V9zWp2c=)
2: A51B73A01F0711EFB7C30655C4F9AE02.roa (hash: gywHrBDOisk4NwQExOTjeY31/f6L9eZJuRiuNkwPekg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.crl
rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:35:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 374 (0x176)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9181375, serialNumber=8DCDE52B9B8B0522BE26713A41865670A61EE86D
Validity
Not Before: Apr 17 04:35:47 2026 GMT
Not After : Apr 24 04:35:47 2026 GMT
Subject: CN=69e1b8a4-7965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:02:8b:2d:3b:2d:40:5f:e4:99:0a:a4:ed:fa:
81:c7:99:0f:77:5a:77:c3:3b:c8:dd:53:9e:7b:ef:
52:3b:30:bd:8d:2a:f1:76:58:8c:c1:a6:88:9a:3c:
48:97:c3:64:24:7c:21:cd:ca:30:dc:43:a2:9d:3f:
0d:fe:70:b5:58:a1:12:2e:61:75:f2:73:25:0d:a5:
09:f1:f2:1d:03:ae:7e:5c:1d:f7:9e:bc:cc:84:45:
f1:fc:f3:b7:87:63:0c:11:e0:24:ea:ed:8b:91:cc:
23:24:f9:4f:8b:ba:c5:6d:b8:1b:32:20:ca:e4:f0:
cf:68:9a:8a:7c:6a:c8:38:5e:06:95:44:8c:83:b9:
04:cc:b9:af:92:1e:62:09:4c:9b:2b:a0:5f:f0:cc:
7d:d9:03:6b:2e:4f:bb:6d:28:dd:f2:a9:7c:76:fd:
81:fa:46:87:48:84:70:32:77:87:11:eb:2b:ba:bc:
50:4e:55:0c:f6:96:7b:e1:e3:cb:93:41:6d:d0:09:
07:c8:b6:4d:98:5f:96:26:a8:f6:0a:31:81:2a:ec:
b6:62:ec:9d:15:2f:29:eb:93:bf:52:27:7b:d4:81:
c3:bf:ca:47:6a:37:4c:97:a4:87:f5:db:84:70:81:
27:78:44:ef:52:d1:18:e2:9c:e1:35:eb:23:32:38:
90:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:9E:B9:E4:5F:1F:FA:A3:35:EC:FD:70:2A:85:6C:95:CE:58:F2:9D
X509v3 Authority Key Identifier:
keyid:8D:CD:E5:2B:9B:8B:05:22:BE:26:71:3A:41:86:56:70:A6:1E:E8:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:44:7b:e2:24:a8:3d:e2:89:c8:ac:55:2a:3f:63:1f:5c:81:
bd:5f:de:79:22:1e:3f:75:44:d0:03:53:86:bd:98:6a:c9:67:
d5:ed:a8:c4:78:ac:f3:a4:a1:5f:37:1b:ea:d4:72:bf:42:da:
1b:f8:c1:a8:23:5b:d6:c7:40:4a:15:09:48:f0:84:f7:0d:6d:
dc:3d:e5:d4:d1:e6:50:35:7d:9f:a6:5a:7e:38:2b:8f:06:0b:
e0:d1:b6:af:a6:b8:a8:e0:12:d8:cb:e9:ac:c8:63:ab:c9:31:
56:24:b7:13:ec:31:b8:44:38:b1:df:b9:a5:8b:84:bb:e7:d3:
89:62:cc:87:66:b0:e5:c8:08:0e:76:60:1b:f6:f5:0f:24:3e:
93:00:15:33:98:d9:22:be:d5:43:5c:41:03:ed:06:dd:4e:e3:
9f:ac:9f:94:89:17:c7:51:93:91:e4:47:10:d3:c9:ac:1b:dc:
2f:df:75:0e:63:4e:7c:fd:7d:d8:86:63:a0:b1:0e:c9:a0:19:
94:11:92:18:bd:81:73:47:d4:99:6e:e0:0f:70:35:4f:cd:00:
e5:25:b3:fe:c8:36:75:5d:aa:3e:2c:27:cd:0c:60:fa:78:59:
68:1c:c2:ff:c3:93:59:53:99:71:16:80:6e:73:c8:22:6c:9e:
ca:6c:92:f6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODEzNzUxMTAvBgNVBAUTKDhEQ0RFNTJCOUI4QjA1MjJCRTI2NzEzQTQxODY1Njcw
QTYxRUU4NkQwHhcNMjYwNDE3MDQzNTQ3WhcNMjYwNDI0MDQzNTQ3WjAYMRYwFAYD
VQQDEw02OWUxYjhhNC03OTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3AKLLTstQF/kmQqk7fqBx5kPd1p3wzvI3VOee+9SOzC9jSrxdliMwaaImjxI
l8NkJHwhzcow3EOinT8N/nC1WKESLmF18nMlDaUJ8fIdA65+XB33nrzMhEXx/PO3
h2MMEeAk6u2LkcwjJPlPi7rFbbgbMiDK5PDPaJqKfGrIOF4GlUSMg7kEzLmvkh5i
CUybK6Bf8Mx92QNrLk+7bSjd8ql8dv2B+kaHSIRwMneHEesrurxQTlUM9pZ74ePL
k0Ft0AkHyLZNmF+WJqj2CjGBKuy2YuydFS8p65O/Uid71IHDv8pHajdMl6SH9duE
cIEneETvUtEY4pzhNesjMjiQzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOKeueRf
H/qjNez9cCqFbJXOWPKdMB8GA1UdIwQYMBaAFI3N5SubiwUiviZxOkGGVnCmHuht
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTM3NS9BRUQ1ODMxRTFG
MDYxMUVGQTYxQUJBNTFDNEY5QUUwMi9qYzNsSzV1TEJTSy1KbkU2UVlaV2NLWWU2
RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pjM2xLNXVMQlNLLUpuRTZRWVpXY0tZZTZHMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MTM3NS9BRUQ1ODMxRTFGMDYxMUVGQTYxQUJBNTFDNEY5QUUwMi9qYzNsSzV1TEJT
Sy1KbkU2UVlaV2NLWWU2RzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAp0R74iSoPeKJyKxVKj9jH1yBvV/eeSIeP3VE0ANThr2Yasln1e2oxHis86Sh
Xzcb6tRyv0LaG/jBqCNb1sdAShUJSPCE9w1t3D3l1NHmUDV9n6ZafjgrjwYL4NG2
r6a4qOAS2MvprMhjq8kxViS3E+wxuEQ4sd+5pYuEu+fTiWLMh2aw5cgIDnZgG/b1
DyQ+kwAVM5jZIr7VQ1xBA+0G3U7jn6yflIkXx1GTkeRHENPJrBvcL991DmNOfP19
2IZjoLEOyaAZlBGSGL2Bc0fUmW7gD3A1T80A5SWz/sg2dV2qPiwnzQxg+nhZaBzC
/8OTWVOZcRaAbnPIImyeymyS9g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:18:37 2026 by rpki-client