
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft
File: JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft (raw, json)
Hash identifier: GR7d2sO4g7pL3WkbP7FNZ5+2hYlHA2ZQTqCZoNzgisk=
Subject key identifier: B9:D4:D1:DC:36:70:11:43:98:68:6E:DE:57:42:43:07:46:FE:60:91
Authority key identifier: 24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98
Certificate issuer: /CN=A911BDA9/serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198
Certificate serial: 015F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft
Manifest number: 0157
Signing time: Wed 13 May 2026 05:06:03 +0000
Manifest this update: Wed 13 May 2026 05:06:03 +0000
Manifest next update: Wed 20 May 2026 05:06:03 +0000
Files and hashes: 1: JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl (hash: n0AHo66L56Zq+a3Tb+PIdrYKOYrcPhxkr41zfWKytvM=)
2: C470564044BD11EFA8F7157FC4F9AE02.roa (hash: 2nH7N4ovFMEiAx6nSrcLjxkbYh/zpbNAaRQrma2Npz0=)
3: 08D9C8604ABE11EF8708395BC4F9AE02.roa (hash: ORm53sfx2hhoKeW+AllOGpPuP99qec7a8uPMzE4I0Zw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl
rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 05:06:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 351 (0x15f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BDA9, serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198
Validity
Not Before: May 13 05:06:03 2026 GMT
Not After : May 20 05:06:03 2026 GMT
Subject: CN=6a0406bb-0358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1b:9b:d7:aa:2b:0b:ae:07:a3:85:5e:f2:6d:
77:f6:d5:d8:68:3e:7b:a7:bd:7d:33:63:c3:49:f3:
6f:d6:4a:38:72:95:40:fb:92:20:d9:d3:c6:0a:f8:
90:37:db:3f:e8:fe:65:6a:ef:8a:48:b0:7b:ba:c7:
db:b4:36:d5:b3:39:26:61:55:51:e5:ff:fa:04:ba:
03:8f:5c:39:52:c0:e3:bf:eb:a7:1f:96:d7:84:0e:
f3:7c:a1:64:bf:c4:e9:3d:15:32:35:07:99:24:03:
e5:96:ec:2e:c8:68:f6:fb:93:29:f6:06:31:c2:48:
04:c8:f5:43:3d:54:25:88:86:9a:10:60:9b:00:f9:
d8:2b:1b:bf:a2:68:a3:08:83:91:53:01:8b:33:2f:
f5:dd:cc:4f:04:be:32:89:99:15:6e:3a:6e:78:78:
37:05:03:3c:0b:df:81:42:fe:ab:d1:3e:2e:8d:f1:
06:c6:8a:e0:1d:e1:60:0b:33:bb:f5:c1:31:60:6a:
f3:6b:c9:6d:e5:e0:7b:16:d1:ac:0d:9a:97:a7:25:
9c:5a:58:84:4b:50:c6:be:71:5a:ed:7d:1e:d2:8f:
70:01:16:f6:ba:e3:e9:c6:e8:a7:a9:b7:49:ee:71:
75:6a:b0:2d:ba:2f:b9:dd:7c:08:fb:f7:98:54:02:
cf:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D4:D1:DC:36:70:11:43:98:68:6E:DE:57:42:43:07:46:FE:60:91
X509v3 Authority Key Identifier:
keyid:24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:91:a2:15:ef:d0:f2:2e:a0:fb:1a:ab:ac:f0:75:ca:f6:84:
80:02:21:1d:b0:ac:b8:02:77:45:53:62:2b:39:f6:4c:6e:84:
61:49:62:3f:b9:e6:50:4a:19:e1:13:ad:2f:57:99:21:44:a8:
dc:c1:d7:6f:96:97:39:ea:b0:69:61:6e:a7:f6:bb:21:6e:d7:
c5:77:76:38:7b:44:f6:b1:21:35:16:b5:8d:2d:d8:9f:ff:e1:
c0:dc:cc:ce:45:cf:27:01:99:66:55:29:d4:9c:26:fc:54:13:
58:f7:71:36:8f:48:04:33:f5:0f:34:da:f4:99:d5:2f:05:b8:
a5:92:e6:99:4d:c9:26:90:8f:7f:72:bd:5e:a4:a1:02:d6:e7:
5c:62:b5:cd:ef:bb:02:cf:df:6e:35:e6:6d:35:6d:f3:f5:bb:
79:46:55:94:41:fb:3d:63:db:d3:1e:e7:f1:11:e7:ac:86:c2:
e6:2b:bb:34:44:24:f4:8b:17:e5:6c:33:0c:89:78:17:74:6a:
eb:2b:fa:d6:6c:89:25:34:5f:88:e9:8d:b0:fc:21:95:7f:93:
8f:76:0d:33:3e:05:1d:b6:d3:25:e9:ab:b8:42:e3:73:3f:c1:
06:da:18:8c:30:0d:31:f7:26:8a:57:71:11:2b:0a:41:ae:c7:
a1:88:40:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:03:49 2026 by rpki-client