
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft
File: JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft (raw, json)
Hash identifier: ilKBFPXyhNeYXQ7OPhoWaRbdR33Zks1s2IojaDELbNY=
Subject key identifier: 62:82:FF:16:CE:69:29:25:38:52:A5:13:70:FA:60:FC:27:CC:9D:E7
Authority key identifier: 24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98
Certificate issuer: /CN=A911BDA9/serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198
Certificate serial: 0182
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft
Manifest number: 017A
Signing time: Thu 23 Jul 2026 06:08:36 +0000
Manifest this update: Thu 23 Jul 2026 06:08:35 +0000
Manifest next update: Thu 30 Jul 2026 06:08:35 +0000
Files and hashes: 1: JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl (hash: VPBvPSoyb/BG+NaHbuBhaH8AK6+65YNhJyyoSim8SWE=)
2: 08D9C8604ABE11EF8708395BC4F9AE02.roa (hash: ORm53sfx2hhoKeW+AllOGpPuP99qec7a8uPMzE4I0Zw=)
3: C470564044BD11EFA8F7157FC4F9AE02.roa (hash: 2nH7N4ovFMEiAx6nSrcLjxkbYh/zpbNAaRQrma2Npz0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl
rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:08:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 386 (0x182)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BDA9, serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198
Validity
Not Before: Jul 23 06:08:35 2026 GMT
Not After : Jul 30 06:08:35 2026 GMT
Subject: CN=6a61afe4-7568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:44:a3:c6:56:81:f0:9d:d8:d7:da:b5:8d:12:
b4:b4:24:29:02:84:1f:e2:7a:59:8b:87:9b:dd:7d:
90:cc:05:ed:fb:1d:1c:01:1d:1d:b3:75:dc:58:70:
c4:2b:42:63:1f:e8:cb:bd:26:64:65:34:bb:5e:e7:
73:ce:00:d8:ef:b3:37:49:64:03:bf:9d:48:af:22:
2c:4d:c8:d3:4a:bb:13:f0:de:59:02:66:13:3a:1b:
82:e9:86:a1:0a:5c:a5:4d:0f:cd:46:36:57:f7:b8:
63:60:19:b3:66:2b:47:b1:71:cf:4d:53:e8:9b:1e:
36:62:75:17:cb:3f:a8:fe:cc:c2:79:86:0b:66:e7:
f4:bd:d1:dc:4a:61:64:0f:96:3c:c7:7f:65:6e:af:
a9:3b:13:6d:58:2a:68:5f:76:53:37:51:81:60:33:
76:3a:b5:de:33:93:da:03:83:6e:a3:1a:7f:e6:e4:
43:58:05:49:e7:3b:7d:0a:56:0f:e9:e7:bc:cd:14:
26:b8:97:a1:33:62:37:9f:ef:4c:4c:f3:3c:b0:ff:
5a:ae:78:40:44:76:18:54:1c:5b:57:94:15:6c:95:
6f:97:e4:77:5c:e3:ec:02:fc:b0:98:d9:bb:5d:1f:
04:a8:e1:f5:f8:74:25:35:2c:99:31:02:a9:ae:13:
a9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:82:FF:16:CE:69:29:25:38:52:A5:13:70:FA:60:FC:27:CC:9D:E7
X509v3 Authority Key Identifier:
keyid:24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:74:7a:0b:b7:52:35:27:c2:e8:ca:f4:86:2a:68:08:fd:54:
16:a5:06:f0:3c:84:63:f5:f7:7c:fe:82:04:31:d1:bf:75:af:
18:b0:11:51:f7:a9:ec:96:81:b9:3a:93:b9:53:37:e2:e8:e6:
3b:a7:9b:cb:a3:e5:d6:a4:41:36:71:cb:57:5f:5f:2e:4b:34:
f7:df:b9:29:da:6e:e2:66:cc:f2:4d:79:83:e7:15:6d:f5:73:
ad:4f:8d:b2:ee:65:73:28:f1:df:67:0c:ce:8f:b6:e3:0d:be:
07:15:f3:e2:53:e6:da:17:a8:cf:8d:33:f1:df:70:2c:44:26:
39:74:ab:55:62:7b:39:56:80:bd:cd:5c:9e:33:84:b0:f0:b5:
14:07:cb:52:49:4d:eb:81:61:96:3e:08:83:4e:4e:a8:73:9a:
27:d5:98:17:80:a7:01:f0:d5:b4:83:d2:34:26:94:41:50:78:
80:f2:4a:50:36:db:e5:e5:5f:7b:08:a1:f0:47:41:f4:58:46:
67:7a:f4:0e:00:9b:bb:eb:61:20:1a:6a:a0:26:ba:2c:f9:9a:
e5:2f:23:ed:06:a9:68:c7:6a:66:80:0b:9b:5a:86:fa:73:86:
34:ff:e6:58:d2:22:66:d7:2f:27:1f:d9:9b:0f:d2:13:be:98:
73:6b:ef:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:05:47 2026 by rpki-client