
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.mft
File: JPDB2OP0opb9zesjWmxIO2styXo.mft (raw, json)
Hash identifier: NsV6oxC2k6cjUbpDaQH51LN3MFTVjXarBzxc9ibV47w=
Subject key identifier: E4:A5:EA:1F:44:DE:7D:A1:B4:4A:D3:85:98:E9:4E:C6:26:C3:0C:C0
Authority key identifier: 24:F0:C1:D8:E3:F4:A2:96:FD:CD:EB:23:5A:6C:48:3B:6B:2D:C9:7A
Certificate issuer: /CN=A911BC62/serialNumber=24F0C1D8E3F4A296FDCDEB235A6C483B6B2DC97A
Certificate serial: 28A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPDB2OP0opb9zesjWmxIO2styXo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.mft
Manifest number: 2889
Signing time: Tue 12 May 2026 15:36:54 +0000
Manifest this update: Tue 12 May 2026 15:36:54 +0000
Manifest next update: Tue 19 May 2026 15:36:54 +0000
Files and hashes: 1: JPDB2OP0opb9zesjWmxIO2styXo.crl (hash: DNcNW+0WTcJ3Jq6aaUfAQUsLyNw3ZPZWtvOLh4LECfg=)
2: 8BD42F1CDEB111EA971A1721C4F9AE02.roa (hash: K0qm2C6my4ztNffHz19Ct3P2GsiLgSawU1/2AuVC2UY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.crl
rsync://rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPDB2OP0opb9zesjWmxIO2styXo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:36:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10409 (0x28a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BC62, serialNumber=24F0C1D8E3F4A296FDCDEB235A6C483B6B2DC97A
Validity
Not Before: May 12 15:36:54 2026 GMT
Not After : May 19 15:36:54 2026 GMT
Subject: CN=6a034916-731a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:75:c1:d1:26:4f:65:40:7f:aa:38:f6:28:c7:
af:ad:13:9c:3b:fa:37:ba:ff:33:4f:bc:bd:2c:a0:
e6:ba:ed:cf:6a:8d:a1:20:85:fd:28:78:9f:b9:f2:
33:f5:8d:d2:b3:7c:d5:97:74:73:ce:b0:53:81:f4:
ee:45:a4:b8:93:a1:89:80:9a:54:b4:e9:b0:db:0c:
1a:c8:e8:f2:08:82:7e:ba:8b:90:ab:26:aa:f6:57:
a4:a4:6e:96:ab:dd:88:73:55:a5:3e:58:2c:50:e4:
e3:59:53:7c:50:74:b4:94:fb:38:12:c3:98:5e:6b:
ad:02:e9:b3:d7:43:77:1d:0c:b9:cb:46:83:ec:99:
99:69:f7:48:9f:74:0a:3d:27:22:8b:71:08:2a:3c:
d2:f9:6b:ca:72:c1:db:25:b2:de:4e:e0:a1:2a:05:
ef:48:9e:a5:53:05:b6:b3:b3:c3:c1:f3:f9:10:3b:
8e:67:6c:48:88:c3:b4:56:cf:fe:6b:4d:d3:5c:da:
33:3e:86:e8:f5:0a:7f:00:68:e7:10:c0:64:65:c3:
b0:b5:e8:7a:07:fa:5c:4a:bc:07:56:23:8e:6c:4c:
b2:1f:aa:bc:86:55:1c:9b:74:f5:74:e3:96:13:e5:
4f:92:96:6a:34:80:36:03:7f:18:83:97:89:f8:75:
e8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:A5:EA:1F:44:DE:7D:A1:B4:4A:D3:85:98:E9:4E:C6:26:C3:0C:C0
X509v3 Authority Key Identifier:
keyid:24:F0:C1:D8:E3:F4:A2:96:FD:CD:EB:23:5A:6C:48:3B:6B:2D:C9:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPDB2OP0opb9zesjWmxIO2styXo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:4e:cc:f2:6f:4f:24:c9:0f:84:df:ee:43:a1:4d:94:51:47:
60:83:66:9c:98:30:72:d5:61:d5:31:40:50:0f:96:7a:dd:b0:
70:54:dc:15:d2:ee:6d:dc:1a:25:99:4d:cc:22:96:1e:88:24:
17:17:db:44:81:e3:8a:ea:49:f5:c7:d5:5b:49:9d:eb:e1:41:
ff:ca:1d:41:ec:46:2c:8a:83:76:22:31:3d:e3:54:08:05:27:
d1:6a:51:45:d0:4c:13:19:ea:2a:d0:cd:a5:d7:6c:cf:9b:eb:
ee:24:25:2b:4f:ec:77:73:d5:cc:eb:80:cf:a3:de:6b:3f:f4:
dc:f9:65:71:59:8f:40:ed:2e:4f:07:34:7b:11:4a:2b:1b:95:
ff:d6:88:2d:86:65:c9:cb:75:33:73:39:06:a3:cc:9c:3c:38:
89:6c:d8:6d:ac:7e:d6:8b:77:01:71:9b:ab:04:a3:f1:b7:8d:
57:52:6d:82:11:cb:13:97:90:4d:3a:c8:db:1f:f9:c1:cc:45:
2e:74:40:20:30:28:91:79:75:9e:59:55:7e:ee:eb:9e:87:8a:
dc:5d:b6:b5:9d:02:1a:6f:8e:2b:d4:bd:dc:89:f6:f3:a0:aa:
73:d9:73:d5:55:16:b4:36:50:39:a5:1b:7e:54:01:d0:e8:75:
4d:2a:2e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:56:35 2026 by rpki-client