
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft
File: JCq5H6fHpkrOd9m09mHijAsVuOA.mft (raw, json)
Hash identifier: ztKOqjtPfDrKW0Txs0awwAv5KkzZ0CzroX2svXs6Mys=
Subject key identifier: 30:95:50:25:BE:65:DD:35:32:E0:CE:69:59:26:74:AC:D0:DD:33:7F
Authority key identifier: 24:2A:B9:1F:A7:C7:A6:4A:CE:77:D9:B4:F6:61:E2:8C:0B:15:B8:E0
Certificate issuer: /CN=A911B22E/serialNumber=242AB91FA7C7A64ACE77D9B4F661E28C0B15B8E0
Certificate serial: 0155
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft
Manifest number: 014C
Signing time: Wed 25 Mar 2026 04:27:28 +0000
Manifest this update: Wed 25 Mar 2026 04:27:27 +0000
Manifest next update: Wed 01 Apr 2026 04:27:27 +0000
Files and hashes: 1: JCq5H6fHpkrOd9m09mHijAsVuOA.crl (hash: lwFGhR4tX300ggs7CgzIkbmXemkKKWrW+y0SpndzuzA=)
2: 79A1CFF0F2F311F08CC9D9AA476F56BC.roa (hash: ImLzfO9eYPkP8TeOeHFGuBUxwADU7Ur8U4TyxjSkGl0=)
3: AE82DA3CCA3711F09D02C15BC4F9AE02.roa (hash: M6ls0jXTH4pUjtm2iE2jOj7mJz7/jJFkAHSHdBjdY6o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.crl
rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:27:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 341 (0x155)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B22E, serialNumber=242AB91FA7C7A64ACE77D9B4F661E28C0B15B8E0
Validity
Not Before: Mar 25 04:27:27 2026 GMT
Not After : Apr 1 04:27:27 2026 GMT
Subject: CN=69c36430-7552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b7:d2:22:d4:00:5b:22:55:db:08:fd:49:7b:
81:56:0d:05:9b:a1:9f:da:3c:a9:53:36:16:bc:15:
e9:36:18:66:dd:54:03:e8:96:6d:d9:77:34:02:90:
68:8b:de:0b:d0:8b:61:45:ec:0f:e5:7e:73:5b:98:
46:5a:1f:37:31:61:dd:07:43:ec:76:0e:9a:cd:f8:
b0:9d:d6:cf:ef:ec:73:00:fd:bc:f7:14:68:9c:6b:
59:bd:4a:03:59:88:a2:12:fb:46:a3:16:61:86:30:
53:d3:d1:43:b0:73:13:6f:41:7b:ad:8a:c8:f1:7a:
f8:bf:44:ed:55:63:76:a8:dd:ee:08:f5:be:e1:ad:
5c:6b:fc:24:64:75:1e:20:95:84:74:d4:29:ef:6b:
8e:07:7d:fb:1a:a0:12:6c:a3:f2:27:03:5a:92:89:
7e:a6:0c:ea:08:40:2f:df:e0:39:5b:a2:94:f8:68:
53:17:71:02:86:c8:f1:bb:4a:6e:46:f8:38:fe:7b:
23:cb:4d:6c:32:55:59:26:04:ab:2f:d4:64:61:de:
22:9e:83:36:ff:be:7e:ae:3b:4c:c2:cf:6e:2f:46:
61:fc:60:c7:75:69:f3:26:d2:0d:eb:d2:7d:be:be:
dd:f5:2e:d7:54:d6:79:04:13:f0:da:df:37:af:74:
51:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:95:50:25:BE:65:DD:35:32:E0:CE:69:59:26:74:AC:D0:DD:33:7F
X509v3 Authority Key Identifier:
keyid:24:2A:B9:1F:A7:C7:A6:4A:CE:77:D9:B4:F6:61:E2:8C:0B:15:B8:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:45:02:70:ba:ef:f3:46:01:00:71:e6:83:63:ab:0f:13:3f:
5f:5f:88:b8:30:8f:c7:6f:06:81:70:5f:be:be:6a:ae:4a:51:
2a:8f:cd:cb:89:7d:3b:a6:1f:d7:f7:b1:66:f1:1d:8b:c5:27:
05:40:6a:0a:da:86:fa:19:a5:b9:dc:d6:5b:ee:01:69:05:e9:
34:63:05:e1:02:57:2f:40:a9:72:6b:4e:58:de:c5:a8:ce:f6:
fb:05:ba:ae:96:78:59:99:7b:97:5a:3a:15:4d:61:98:80:43:
d7:f1:21:30:7e:d4:e3:6d:92:05:3d:aa:75:58:de:9a:a3:d9:
83:14:44:35:46:f3:9d:ef:fc:82:f2:69:ce:61:8a:25:4a:e5:
91:f5:84:11:e3:84:29:a6:9f:c9:19:9e:ba:b6:80:a8:c3:74:
c7:91:17:9f:58:87:be:79:f1:ef:01:3a:fd:37:43:0e:4d:80:
85:47:5c:7d:16:a0:d4:7c:8f:7e:9e:ab:b7:ca:8d:3a:6a:a4:
a2:f1:fc:b2:0f:6d:c5:3a:ed:cb:d6:e4:6d:0d:d7:36:56:ac:
b6:83:33:67:c4:88:8d:12:76:8b:09:4a:e3:11:61:50:83:c0:
ff:a0:90:c1:4e:04:9b:c5:e6:8e:a7:69:1c:3b:27:1b:bb:34:
9b:3f:ce:d9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUIyMkUxMTAvBgNVBAUTKDI0MkFCOTFGQTdDN0E2NEFDRTc3RDlCNEY2NjFFMjhD
MEIxNUI4RTAwHhcNMjYwMzI1MDQyNzI3WhcNMjYwNDAxMDQyNzI3WjAYMRYwFAYD
VQQDEw02OWMzNjQzMC03NTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAibfSItQAWyJV2wj9SXuBVg0Fm6Gf2jypUzYWvBXpNhhm3VQD6JZt2Xc0ApBo
i94L0IthRewP5X5zW5hGWh83MWHdB0Psdg6azfiwndbP7+xzAP289xRonGtZvUoD
WYiiEvtGoxZhhjBT09FDsHMTb0F7rYrI8Xr4v0TtVWN2qN3uCPW+4a1ca/wkZHUe
IJWEdNQp72uOB337GqASbKPyJwNakol+pgzqCEAv3+A5W6KU+GhTF3EChsjxu0pu
Rvg4/nsjy01sMlVZJgSrL9RkYd4inoM2/75+rjtMws9uL0Zh/GDHdWnzJtIN69J9
vr7d9S7XVNZ5BBPw2t83r3RRYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDCVUCW+
Zd01MuDOaVkmdKzQ3TN/MB8GA1UdIwQYMBaAFCQquR+nx6ZKznfZtPZh4owLFbjg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjIyRS84MzQxNUIzNjM3
OTUxMUVGODdDRkQ2NEJDNEY5QUUwMi9KQ3E1SDZmSHBrck9kOW0wOW1IaWpBc1Z1
T0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0pDcTVINmZIcGtyT2Q5bTA5bUhpakFzVnVPQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QjIyRS84MzQxNUIzNjM3OTUxMUVGODdDRkQ2NEJDNEY5QUUwMi9KQ3E1SDZmSHBr
ck9kOW0wOW1IaWpBc1Z1T0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAD0UCcLrv80YBAHHmg2OrDxM/X1+IuDCPx28GgXBfvr5qrkpRKo/Ny4l9O6Yf
1/exZvEdi8UnBUBqCtqG+hmludzWW+4BaQXpNGMF4QJXL0CpcmtOWN7FqM72+wW6
rpZ4WZl7l1o6FU1hmIBD1/EhMH7U422SBT2qdVjemqPZgxRENUbzne/8gvJpzmGK
JUrlkfWEEeOEKaafyRmeuraAqMN0x5EXn1iHvnnx7wE6/TdDDk2AhUdcfRag1HyP
fp6rt8qNOmqkovH8sg9txTrty9bkbQ3XNlastoMzZ8SIjRJ2iwlK4xFhUIPA/6CQ
wU4Em8XmjqdpHDsnG7s0mz/O2Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:13:05 2026 by rpki-client