
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft
File: jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft (raw, json)
Hash identifier: UIaOt5Y2QDIeqVUFwCkOX6oTfsm6UwyvdyqqXjcLu1I=
Subject key identifier: 5E:64:42:87:97:30:35:3A:C7:97:8B:E9:8E:3C:3D:65:D4:BB:A8:35
Authority key identifier: 8D:5A:FF:32:19:01:2A:1C:99:E2:73:C2:B7:E6:3A:2D:0C:39:62:E7
Certificate issuer: /CN=A9132FA5/serialNumber=8D5AFF3219012A1C99E273C2B7E63A2D0C3962E7
Certificate serial: 0B7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft
Manifest number: 0B5F
Signing time: Tue 12 May 2026 19:15:46 +0000
Manifest this update: Tue 12 May 2026 19:15:45 +0000
Manifest next update: Tue 19 May 2026 19:15:45 +0000
Files and hashes: 1: jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.crl (hash: nWJBbO2C3XwOLm3f7U9VNQ/4CpztDb1IGneFWTmWPBk=)
2: C6766086579811EAA245BE5EC4F9AE02.roa (hash: 6McwifOEsChy78SbBd4r2bAdhC4Hhk5/bZNr5Apkj8E=)
3: 0A9169068B7811EFB0820F7AC4F9AE02.roa (hash: +Jnq3fWUlBiBnB5IyzqavBaEae0mnvwuiwcKw5QbKqA=)
4: 202A9E5E8B7811EF9E21317AC4F9AE02.roa (hash: P0XyvHwBGggVbQZbOe1bIJujZu5ouX/vYydjKa177IM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.crl
rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:15:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2940 (0xb7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132FA5, serialNumber=8D5AFF3219012A1C99E273C2B7E63A2D0C3962E7
Validity
Not Before: May 12 19:15:45 2026 GMT
Not After : May 19 19:15:45 2026 GMT
Subject: CN=6a037c62-386c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7c:f9:61:ca:c0:02:ed:1f:26:a2:43:c4:9b:
93:75:ab:10:fb:29:b4:33:8a:e1:fb:eb:1e:e0:1d:
a6:03:1c:5c:1b:ec:4e:76:54:fc:a6:f0:cd:a3:85:
20:83:63:43:7c:43:5d:c1:b6:b1:ee:4e:d8:e5:54:
ba:5d:83:78:bb:cc:a5:c9:cd:d4:02:fc:15:ea:86:
2c:5d:48:17:63:1f:10:01:50:13:a4:3e:83:36:e5:
c6:10:98:d5:d8:fc:62:4c:b5:26:20:e3:e1:2b:6a:
27:4c:8f:0d:61:6b:76:9a:5b:c1:0b:53:60:bf:39:
10:5a:15:7a:20:c6:36:80:7d:9e:33:2f:fb:b8:98:
0c:25:56:6c:92:91:27:b8:44:82:a9:35:5b:7c:26:
b7:91:00:2d:e7:f4:10:ca:bb:8f:b5:4c:38:e4:d1:
53:cc:24:00:81:f4:9b:4f:24:a7:20:fb:56:80:ea:
09:bf:41:54:ff:71:33:35:91:48:d2:99:98:3c:dc:
1d:d0:b8:ff:21:c7:91:be:d0:9f:b8:ac:06:90:09:
11:89:12:4b:55:88:59:d6:b8:8e:5b:31:c9:76:97:
34:53:3f:75:0e:25:f7:3c:94:3f:1e:ed:6e:eb:5c:
a1:b5:ae:a6:aa:9e:3b:58:37:10:96:42:a2:9a:21:
e5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:64:42:87:97:30:35:3A:C7:97:8B:E9:8E:3C:3D:65:D4:BB:A8:35
X509v3 Authority Key Identifier:
keyid:8D:5A:FF:32:19:01:2A:1C:99:E2:73:C2:B7:E6:3A:2D:0C:39:62:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:79:b0:67:72:5b:b1:2e:10:85:f6:45:43:5d:a6:b3:6c:58:
b9:5a:94:f9:25:d0:31:ca:0d:d4:8c:e9:37:4f:cb:2e:ec:4b:
4f:55:a1:5e:e9:69:0a:b8:c2:b9:65:92:ce:9f:46:2f:25:ee:
73:f3:a4:03:c2:b7:f2:49:99:2c:b1:da:64:9d:22:a6:00:5e:
08:90:e9:10:bc:74:72:21:d0:16:c5:c7:64:f6:00:1f:91:16:
8b:02:da:18:83:ac:c8:9a:84:53:78:d9:20:8c:bf:b8:58:86:
97:fd:85:8c:1f:5f:32:b6:cd:28:a9:2d:df:d0:00:b6:5d:41:
48:18:7b:d5:99:30:53:69:6b:b2:cd:51:45:43:15:f8:68:6f:
bb:ba:85:74:b4:bd:34:dd:cc:c8:f8:9d:63:78:52:42:58:a2:
06:9b:c5:65:e9:c9:08:0b:1b:32:8a:62:15:aa:c8:38:2b:f5:
1c:39:9b:ca:bf:ee:d3:a6:49:1f:6b:40:b3:dc:9a:25:d1:13:
b7:17:34:6f:92:1e:77:29:6e:66:cc:ec:d8:b2:4d:bd:7d:48:
e4:a1:47:41:8f:b0:43:65:49:39:20:70:7e:0f:5d:9a:7b:6a:
38:26:2f:91:92:29:cd:25:6b:11:5c:c6:b1:44:d3:fe:d0:eb:
5f:8b:e1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:38:15 2026 by rpki-client