
$ rpki-client -vvf rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft
File: jQmbFr6Vddy0uwaFh5eZn1XmA18.mft (raw, json)
Hash identifier: z6tfF2mm676FgNCc1f10leMU1RmEOZz0L5Mg1LdGM2M=
Subject key identifier: 3E:7B:05:4E:34:BF:CC:0A:21:89:F9:BF:96:3E:30:00:45:6E:65:83
Authority key identifier: 8D:09:9B:16:BE:95:75:DC:B4:BB:06:85:87:97:99:9F:55:E6:03:5F
Certificate issuer: /CN=A912AEFA/serialNumber=8D099B16BE9575DCB4BB06858797999F55E6035F
Certificate serial: 3572
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jQmbFr6Vddy0uwaFh5eZn1XmA18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft
Manifest number: 3548
Signing time: Tue 24 Mar 2026 15:13:24 +0000
Manifest this update: Tue 24 Mar 2026 15:13:23 +0000
Manifest next update: Tue 31 Mar 2026 15:13:23 +0000
Files and hashes: 1: jQmbFr6Vddy0uwaFh5eZn1XmA18.crl (hash: B0JPnXVkgfm4RxjkgFibCeOIkZzI06Yv4WBilva9H28=)
2: E92E6ACA025411F1B5CF90C0233D8C67.roa (hash: UV8f86HTjxEJSP4uwYb5rWdL2gxSvjECKlRWXIr/6K8=)
3: 7192AD9E071211EAAD4E340AC4F9AE02.roa (hash: 8Jonk83mWaohXzy8u3pliKQ5Lui9A89G4dRwvaO5ka8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.crl
rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jQmbFr6Vddy0uwaFh5eZn1XmA18.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 15:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13682 (0x3572)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912AEFA, serialNumber=8D099B16BE9575DCB4BB06858797999F55E6035F
Validity
Not Before: Mar 24 15:13:23 2026 GMT
Not After : Mar 31 15:13:23 2026 GMT
Subject: CN=69c2aa14-ae48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:49:fd:59:be:1d:be:bf:58:ae:2f:51:7e:27:
2c:8d:f2:a6:9a:9b:f6:68:df:bc:14:dd:a8:f9:24:
f0:5f:41:f2:45:7e:a3:a6:54:7c:97:ae:23:f6:7e:
7d:a0:a0:d1:5e:03:9d:01:ad:dd:05:a5:71:48:b9:
2a:24:da:27:6b:9a:48:89:72:7a:f8:86:40:fd:ca:
c7:50:77:5a:bd:ce:9a:96:82:a0:80:45:cf:d1:dd:
c9:61:a4:1c:27:b3:c7:e2:cd:39:2d:c2:d2:18:d3:
f2:9c:96:cf:75:03:cb:f3:7d:0f:9e:92:9b:65:05:
47:50:28:cf:ee:c1:67:06:aa:0a:f6:ae:51:cc:c7:
c8:58:06:02:3a:fc:a7:df:6a:8c:2b:cb:56:2e:0a:
11:bd:a4:a1:9f:58:e1:1e:b4:db:00:d4:4f:a8:cb:
e8:f5:fb:38:3a:aa:f2:b3:49:fa:4c:73:89:16:c8:
1c:7c:92:dc:5e:d4:53:9b:74:df:70:0c:a6:cd:a0:
3f:3d:63:8c:c3:23:15:02:ad:56:57:aa:0a:cb:6b:
3c:0a:c1:54:d0:02:60:94:73:38:92:f2:45:87:2b:
e5:e3:b5:bc:ef:2e:d6:4a:f9:f2:5d:1f:61:06:85:
0a:dd:c0:22:36:ba:43:dd:af:ca:ee:5d:48:9c:c6:
75:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:7B:05:4E:34:BF:CC:0A:21:89:F9:BF:96:3E:30:00:45:6E:65:83
X509v3 Authority Key Identifier:
keyid:8D:09:9B:16:BE:95:75:DC:B4:BB:06:85:87:97:99:9F:55:E6:03:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jQmbFr6Vddy0uwaFh5eZn1XmA18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:60:1c:68:21:91:6e:86:6e:7f:69:8b:3f:9b:5f:58:31:d6:
af:83:ca:0b:fd:86:13:c9:9b:06:fe:bf:4d:49:79:da:62:af:
d2:53:e5:c4:b1:f9:f4:9e:48:2d:f1:a2:d9:74:e9:2e:93:2a:
2d:03:39:8b:b6:07:96:7e:92:e1:7b:b7:b1:fd:bc:7a:17:8b:
93:e0:af:d1:fb:a5:fc:3c:b5:43:a5:0a:33:20:ae:7d:c8:f6:
0c:ca:a3:c3:4d:97:44:31:d6:90:cf:2f:67:18:65:f4:1c:c8:
2e:47:e7:96:5c:bb:a1:6c:05:5d:98:a9:64:f6:3d:92:b4:3d:
f5:ae:94:18:31:bd:e5:8a:14:f2:69:5f:bf:90:92:13:1a:d3:
e6:2d:6d:dd:ae:17:af:2e:da:35:9b:bd:b4:e8:96:7f:f3:8d:
db:36:13:98:ea:ca:d2:5f:e6:93:f2:02:88:4c:b6:fb:3e:03:
f6:2c:ff:12:03:c7:91:72:e5:1a:62:d7:6d:ce:d0:bf:c9:9b:
dc:67:94:fa:15:29:bb:6f:95:64:9a:d1:6f:2c:dd:b5:f8:c2:
69:84:fb:51:40:3f:08:b2:4f:11:ae:9c:64:f0:e8:5c:53:ea:
e9:a0:88:6e:fc:58:8b:37:59:d8:0b:11:08:df:f2:d6:53:0e:
9f:3b:65:48
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkFFRkExMTAvBgNVBAUTKDhEMDk5QjE2QkU5NTc1RENCNEJCMDY4NTg3OTc5OTlG
NTVFNjAzNUYwHhcNMjYwMzI0MTUxMzIzWhcNMjYwMzMxMTUxMzIzWjAYMRYwFAYD
VQQDEw02OWMyYWExNC1hZTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy0n9Wb4dvr9Yri9RficsjfKmmpv2aN+8FN2o+STwX0HyRX6jplR8l64j9n59
oKDRXgOdAa3dBaVxSLkqJNona5pIiXJ6+IZA/crHUHdavc6aloKggEXP0d3JYaQc
J7PH4s05LcLSGNPynJbPdQPL830PnpKbZQVHUCjP7sFnBqoK9q5RzMfIWAYCOvyn
32qMK8tWLgoRvaShn1jhHrTbANRPqMvo9fs4Oqrys0n6THOJFsgcfJLcXtRTm3Tf
cAymzaA/PWOMwyMVAq1WV6oKy2s8CsFU0AJglHM4kvJFhyvl47W87y7WSvnyXR9h
BoUK3cAiNrpD3a/K7l1InMZ1bQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD57BU40
v8wKIYn5v5Y+MABFbmWDMB8GA1UdIwQYMBaAFI0Jmxa+lXXctLsGhYeXmZ9V5gNf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUVGQS9DNEI1OTI2NjFE
QTkxMUUyOTZCQkZFQTQwOEIwMkNEMi9qUW1iRnI2VmRkeTB1d2FGaDVlWm4xWG1B
MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pRbWJGcjZWZGR5MHV3YUZoNWVabjFYbUExOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QUVGQS9DNEI1OTI2NjFEQTkxMUUyOTZCQkZFQTQwOEIwMkNEMi9qUW1iRnI2VmRk
eTB1d2FGaDVlWm4xWG1BMTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQmAcaCGRboZuf2mLP5tfWDHWr4PKC/2GE8mbBv6/TUl52mKv0lPlxLH59J5I
LfGi2XTpLpMqLQM5i7YHln6S4Xu3sf28eheLk+Cv0ful/Dy1Q6UKMyCufcj2DMqj
w02XRDHWkM8vZxhl9BzILkfnlly7oWwFXZipZPY9krQ99a6UGDG95YoU8mlfv5CS
ExrT5i1t3a4Xry7aNZu9tOiWf/ON2zYTmOrK0l/mk/ICiEy2+z4D9iz/EgPHkXLl
GmLXbc7Qv8mb3GeU+hUpu2+VZJrRbyzdtfjCaYT7UUA/CLJPEa6cZPDoXFPq6aCI
bvxYizdZ2AsRCN/y1lMOnztlSA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:53:42 2026 by rpki-client