
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.mft
File: jgK1xN61PytxL_B33gSQg3XoE9s.mft (raw, json)
Hash identifier: v0A/7UCqJCs4p1dx0BQ2Q2WDCwUtx5oiVzXQwSir0bQ=
Subject key identifier: B8:AB:29:E3:36:A2:85:1B:DB:A2:8F:E1:15:93:CF:60:BB:CD:4A:B3
Authority key identifier: 8E:02:B5:C4:DE:B5:3F:2B:71:2F:F0:77:DE:04:90:83:75:E8:13:DB
Certificate issuer: /CN=A9185B6D/serialNumber=8E02B5C4DEB53F2B712FF077DE04908375E813DB
Certificate serial: 01C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jgK1xN61PytxL_B33gSQg3XoE9s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.mft
Manifest number: 01BB
Signing time: Mon 27 Jul 2026 05:40:09 +0000
Manifest this update: Mon 27 Jul 2026 05:40:08 +0000
Manifest next update: Mon 03 Aug 2026 05:40:08 +0000
Files and hashes: 1: jgK1xN61PytxL_B33gSQg3XoE9s.crl (hash: g5X+fK4tVt7Ke5aLkhCoISIhBrpg+RgkuEAgVGcGRrU=)
2: 6F09FF784B3111F0AED6945EC4F9AE02.roa (hash: f/j+ZoewPtF/Q+ftgbifVj+TcEE/wocrnV+k6lZsDKE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.crl
rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jgK1xN61PytxL_B33gSQg3XoE9s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 05:40:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 451 (0x1c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185B6D, serialNumber=8E02B5C4DEB53F2B712FF077DE04908375E813DB
Validity
Not Before: Jul 27 05:40:08 2026 GMT
Not After : Aug 3 05:40:08 2026 GMT
Subject: CN=6a66ef38-86e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8d:3b:bc:ff:7b:3c:75:09:fd:70:bc:ba:57:
db:55:05:4f:b0:88:3e:9c:96:08:d5:e8:80:d5:4b:
0b:53:0a:fc:40:f7:8b:1f:03:34:55:0b:02:9f:3a:
06:d5:c3:86:43:c8:34:a0:fe:a4:0d:79:bf:b2:47:
62:73:42:02:63:87:fe:ab:c0:53:31:25:70:94:ce:
ba:f1:75:b6:46:54:3d:50:60:00:60:20:14:4f:a0:
9a:24:3c:03:2c:e2:63:18:33:9e:64:40:89:fe:82:
e5:b2:43:e0:4a:98:0a:65:91:e0:30:8c:8e:13:32:
f8:8b:98:03:dd:b6:05:87:9f:94:24:2d:46:f4:85:
6c:b2:3f:76:4a:5b:67:4c:68:42:cf:92:9f:fe:6d:
f1:09:bf:90:12:4f:5f:fa:0c:89:f1:aa:eb:01:26:
01:b5:17:bc:58:81:59:21:57:86:13:b2:38:fb:92:
9b:16:eb:53:42:bc:a0:aa:1c:41:ec:ad:32:4f:1e:
47:81:6f:49:d6:a2:c9:71:91:0b:6e:44:26:20:e0:
ed:b0:5d:cb:f0:94:36:0a:97:5a:b0:2e:f8:a0:d9:
15:45:bd:00:4e:77:d2:02:e5:97:7c:06:79:43:b3:
10:15:58:c1:a7:18:0b:08:20:b4:40:2a:b1:45:2c:
80:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:AB:29:E3:36:A2:85:1B:DB:A2:8F:E1:15:93:CF:60:BB:CD:4A:B3
X509v3 Authority Key Identifier:
keyid:8E:02:B5:C4:DE:B5:3F:2B:71:2F:F0:77:DE:04:90:83:75:E8:13:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jgK1xN61PytxL_B33gSQg3XoE9s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:9c:16:e7:ee:70:b0:bf:83:a9:62:9a:e4:a4:aa:51:cd:a8:
03:51:1d:50:2b:1a:3f:77:07:cd:29:08:b0:38:6b:7a:cd:c4:
b8:38:5c:4e:d2:7f:3c:0c:7c:e7:ce:b8:cb:22:32:47:0c:78:
40:f0:bd:6c:2c:7c:bb:47:5e:75:76:64:52:44:75:68:ce:71:
5d:06:35:c9:f1:cb:b7:6e:71:89:fa:3b:d3:20:8e:a4:e9:f0:
37:5d:67:f2:aa:3d:14:5d:39:cb:b6:45:14:34:a7:46:8a:d0:
61:18:d1:73:ca:4f:07:b1:e9:c1:1e:e6:cc:07:5b:81:05:67:
4c:bb:fe:1f:95:d2:a1:8d:cc:8c:05:97:bc:d6:b1:c6:32:d4:
09:e0:b7:1c:39:98:52:5e:e2:d0:c7:b9:c1:0f:1d:4d:87:f3:
7d:67:03:33:78:73:92:4e:43:e2:0d:66:96:81:1b:1a:e7:f5:
10:e7:8e:58:1e:54:bc:2a:86:98:63:61:da:91:05:89:a4:0c:
e5:f0:21:e1:0d:6c:79:d1:81:84:5e:49:2e:1b:bf:1e:a9:e4:
16:cc:8c:fe:4b:1e:1d:1c:a4:3c:77:cf:28:69:02:1b:f9:46:
49:1a:e8:05:96:d4:6f:80:f8:94:b9:a0:33:b2:67:53:57:51:
9d:d1:0c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:45:02 2026 by rpki-client