
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft
File: jDzLT_uJGJxu9bNN_aq-GAalIYo.mft (raw, json)
Hash identifier: QICDA+1kXbzps20s0r6j8AoHa6qjVMAmYjyMyt6r6nM=
Subject key identifier: 0E:48:BF:78:EF:45:9E:A4:AA:DF:E9:95:F6:59:41:C6:33:FD:29:06
Authority key identifier: 8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A
Certificate issuer: /CN=A9182502/serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A
Certificate serial: 0B9C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft
Manifest number: 0B29
Signing time: Tue 28 Jul 2026 19:40:23 +0000
Manifest this update: Tue 28 Jul 2026 19:40:22 +0000
Manifest next update: Tue 04 Aug 2026 19:40:22 +0000
Files and hashes: 1: jDzLT_uJGJxu9bNN_aq-GAalIYo.crl (hash: TekJkwrbq5GAwHEY4Qe9xwjErzQxB9HRjV2SIxVVD7E=)
2: 0D8C94BAAB2811ECB3CF9363C4F9AE02.roa (hash: KY96V7nPX5oq3FzsE82d+7qiOhZ/q030YiLdCFM2iGI=)
3: F7B8727E41CA11EC9262BD80C4F9AE02.roa (hash: 7FNm1lP1Pe3hdsBxuVhe1eOrgDF7OuaVieb5lKlg9LI=)
4: F4FCC41E648311EC88370386C4F9AE02.roa (hash: 2wQvvhttQQFvtvmxnPq6NXZn3bUMgE5kswhBwNt4I+c=)
5: E95058049A8C11F096D9A13AC4F9AE02.roa (hash: Al2kZd3bm7sIrq8HRQFPgDS+45qqXFnhmN7j5M3C30g=)
6: DC512D0473CD11EA8BE69127C4F9AE02.roa (hash: Xmz75nyzzXffCP8ozi4dDJ7X2fT2ShFNR8iyCQqoj9w=)
7: 0CB23E10AB4F11EC85BF147CC4F9AE02.roa (hash: A7d/aeiJtUu4K+fswUeowBZEDmHgn1F1Svvc5b1xWTc=)
8: 0044F6405A4211EBA729CB56C4F9AE02.roa (hash: b9jxPZOZDnRvzE7CGYRtx0ipIG0fk5b1zujNyCQ0yI0=)
9: AAB43BD6247F11EE9CEA495CC4F9AE02.roa (hash: SfpOZZZqAF6xymFu+bkiJdRZTKRwkZseOTXppXvJjio=)
10: 26400C8EC97611EFB28BD766C4F9AE02.roa (hash: chO6OG4ylU6FeQD8EZ6ojrHcYUct9WTBlxUERjOvSus=)
11: F3ABC6EAE91A11EF877A535AC4F9AE02.roa (hash: HwFnU0dCqCQrz33mSD+K9rw/y8Y1TbFJLnxiPnPYqwc=)
12: 0A5773F6BBBC11ECB2E7FF46C4F9AE02.roa (hash: NMa7UpL5w1Txgsqxfm+5UqMg/zQgfsv4FmRfVL5Sn+c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl
rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:40:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2972 (0xb9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182502, serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A
Validity
Not Before: Jul 28 19:40:22 2026 GMT
Not After : Aug 4 19:40:22 2026 GMT
Subject: CN=6a6905a7-0c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9b:3c:6d:7e:55:f0:c8:4e:4f:70:68:14:d0:
7e:4f:0e:1c:04:ec:61:b0:84:9e:14:4b:f5:61:79:
f3:9d:98:20:dc:67:2a:45:68:18:31:73:55:5e:63:
d9:04:02:bd:e8:bd:7f:a0:5d:44:4a:63:5f:05:a5:
c5:86:cb:17:eb:7e:c6:e0:07:1e:2f:f2:bf:57:fd:
f8:9e:cb:c0:85:11:70:6f:49:af:e4:d7:5f:c0:82:
17:98:95:35:8a:37:3b:24:cc:af:cf:9e:1d:b8:14:
69:b0:13:75:98:e5:db:77:45:4a:a0:94:ec:ae:0b:
aa:22:55:c9:95:8e:c3:ab:1c:32:a7:58:c7:ec:f5:
cd:36:e9:33:f5:48:7e:c7:0c:74:3c:ad:0a:77:67:
f9:8a:d8:76:1f:93:3f:a8:a1:65:02:9c:6b:f1:88:
ae:bc:63:cd:49:0a:b6:96:10:99:11:89:4e:cd:04:
4f:d7:a2:73:66:02:61:a2:ba:6b:29:2a:0f:c2:86:
a6:e5:01:52:70:a0:ae:90:c5:90:a7:23:b3:cd:f0:
a2:3b:8f:fc:09:34:df:42:50:a7:e3:06:44:12:5c:
87:77:73:b2:0f:9a:c2:ba:7f:27:1c:3a:cc:99:d6:
e7:8e:95:3f:15:52:45:58:4d:07:be:4b:67:3e:ec:
02:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:48:BF:78:EF:45:9E:A4:AA:DF:E9:95:F6:59:41:C6:33:FD:29:06
X509v3 Authority Key Identifier:
keyid:8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:7a:1b:32:3e:e5:ee:5d:57:f9:79:db:2b:9c:fa:68:e9:f8:
3c:b6:96:92:20:1b:d3:b1:1f:a0:db:90:dd:5b:39:f8:c7:18:
9d:f5:c0:4b:71:9d:8f:39:14:2c:eb:9b:62:33:ad:3b:42:6f:
0d:58:43:ea:ba:11:31:d1:07:c1:9e:8c:f5:aa:82:ea:b7:48:
1f:e7:98:13:c1:36:76:e0:75:42:3c:e6:fe:5b:e0:6d:b8:75:
0d:03:fb:ee:a8:98:88:18:5a:8f:0e:a6:26:b0:d6:39:af:44:
87:92:a5:5c:81:e2:db:a1:49:73:d4:71:cb:c0:04:4c:bc:42:
dd:03:22:b8:4f:0c:fc:de:5e:57:5c:ce:7c:88:6a:75:e2:e9:
9e:5b:74:88:e7:a6:82:8a:06:eb:a5:aa:75:43:d4:a8:20:ce:
1d:4f:7e:93:a5:ea:31:ea:2c:b7:03:e3:08:ee:0e:d5:d2:27:
3e:3d:e5:21:f3:f0:1b:00:f0:2e:c5:c2:a9:87:c0:71:91:e5:
1a:29:91:a5:06:98:26:15:8c:2b:ce:eb:b1:c4:f3:3c:9a:7f:
2a:c0:40:df:c7:0f:c1:03:75:d2:c1:42:59:f3:5b:de:5c:5f:
91:30:e3:97:24:d4:aa:e2:44:86:7d:48:20:88:d5:8e:8b:a1:
b5:3e:de:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:18:17 2026 by rpki-client