
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.mft
File: JORaRnCGXtHFEd0iLVGFv6ZyCF4.mft (raw, json)
Hash identifier: 5ik0r6EOfuYVIy1WIEiOXqyu6ANjzEOQEmPqNdVYAFc=
Subject key identifier: 67:31:0F:B7:53:F7:C5:B3:DE:D3:51:8A:8D:66:0F:3F:80:A2:59:AF
Authority key identifier: 24:E4:5A:46:70:86:5E:D1:C5:11:DD:22:2D:51:85:BF:A6:72:08:5E
Certificate issuer: /CN=A9139FBB/serialNumber=24E45A4670865ED1C511DD222D5185BFA672085E
Certificate serial: 4E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JORaRnCGXtHFEd0iLVGFv6ZyCF4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.mft
Manifest number: 4B
Signing time: Wed 13 May 2026 08:29:13 +0000
Manifest this update: Wed 13 May 2026 08:29:12 +0000
Manifest next update: Wed 20 May 2026 08:29:12 +0000
Files and hashes: 1: JORaRnCGXtHFEd0iLVGFv6ZyCF4.crl (hash: eDvvs7Zi+qWuYEupaA8wenoq4+quxhPg1sXvzhWXUFg=)
2: B8C57E86E40511F09F69296D616F56BC.roa (hash: 0PLmzdBuVQg3z41GtU+TW3iba2zd+GOh2hgEf2R4V5Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.crl
rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JORaRnCGXtHFEd0iLVGFv6ZyCF4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:14:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78 (0x4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139FBB, serialNumber=24E45A4670865ED1C511DD222D5185BFA672085E
Validity
Not Before: May 13 08:29:12 2026 GMT
Not After : May 20 08:29:12 2026 GMT
Subject: CN=6a043659-6c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f5:75:b4:65:4e:c1:f1:b9:c7:f9:90:1e:6e:
2e:cd:0b:a5:cd:63:bb:53:cc:13:26:d8:2d:20:52:
f8:6f:3f:69:4b:f7:c9:26:b1:0a:94:24:87:88:69:
3e:8a:08:f1:bf:c4:16:d4:ad:14:0e:c2:c0:2e:f1:
6e:27:d2:91:3b:16:c3:24:fc:66:ef:83:3a:9b:14:
0e:d5:a2:30:a7:ff:32:e3:f5:7f:63:d0:6f:1f:fc:
fa:71:c8:63:72:ca:5e:94:83:29:2f:ad:96:68:fd:
62:d7:e4:b2:ab:26:c0:9d:2a:00:6e:eb:c9:6a:89:
b4:c4:6f:01:e7:65:e0:1c:31:26:59:c7:a6:5e:e3:
19:98:7e:16:ad:3d:d9:32:01:e7:b2:eb:92:1b:cc:
c4:a7:72:cd:16:ef:29:e2:bf:00:cd:72:de:f5:2c:
d4:0f:80:47:d1:e7:d8:e9:e2:1c:31:ff:80:ce:ee:
2d:3b:d7:16:7b:d4:af:a1:4f:53:f9:48:d1:6c:72:
62:3e:e3:1f:24:03:5b:21:c5:4f:c0:5c:33:98:97:
07:6e:e4:ab:57:2e:b0:65:5b:e6:d8:70:35:ea:15:
93:e1:f8:c7:8f:f0:86:e0:3c:bc:28:4e:b6:ce:a5:
5d:e0:de:36:5a:87:11:76:46:b5:ef:96:d2:ee:06:
6a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:31:0F:B7:53:F7:C5:B3:DE:D3:51:8A:8D:66:0F:3F:80:A2:59:AF
X509v3 Authority Key Identifier:
keyid:24:E4:5A:46:70:86:5E:D1:C5:11:DD:22:2D:51:85:BF:A6:72:08:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JORaRnCGXtHFEd0iLVGFv6ZyCF4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ce:98:97:48:87:64:29:5f:47:3c:6e:f2:3f:27:d4:96:30:
b7:01:b2:a9:2d:20:ae:fa:31:af:c5:9b:83:fc:fa:78:31:d2:
f0:04:c4:d8:ab:58:63:8f:05:ea:75:6f:9f:99:d8:e5:13:82:
99:4e:b3:d5:91:c3:7c:1a:5d:71:9b:c4:b6:45:fd:20:df:79:
87:70:fb:43:2a:1c:90:15:c8:a4:5b:47:f6:85:41:8d:fe:41:
52:fa:58:fa:36:74:ca:54:79:b4:62:06:8c:7e:b0:be:61:12:
e2:ee:8d:e9:6c:4c:92:4c:3f:84:c0:6d:e4:86:96:3d:b3:3e:
3d:95:89:8f:d1:00:e8:f9:04:7f:8f:bd:6a:37:00:9b:41:53:
2c:b2:91:82:9d:28:fe:5c:75:91:89:23:f5:bb:52:cc:3b:24:
fa:69:7a:76:b0:8d:d4:ee:a7:29:d3:13:71:29:99:19:03:52:
a4:6c:a8:7b:66:11:a4:94:cf:db:de:21:5f:e1:0d:c8:d1:96:
92:e5:cc:26:47:2c:ee:9d:8d:50:f7:87:63:55:ee:3d:16:cf:
5f:54:f9:20:db:0b:1f:96:b5:39:85:6c:b5:b7:96:75:a2:e6:
6c:a4:e0:e3:77:20:f5:04:93:f1:13:3d:9a:5a:48:19:4e:0c:
c9:46:18:01
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
OUZCQjExMC8GA1UEBRMoMjRFNDVBNDY3MDg2NUVEMUM1MTFERDIyMkQ1MTg1QkZB
NjcyMDg1RTAeFw0yNjA1MTMwODI5MTJaFw0yNjA1MjAwODI5MTJaMBgxFjAUBgNV
BAMTDTZhMDQzNjU5LTZjMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCj9XW0ZU7B8bnH+ZAebi7NC6XNY7tTzBMm2C0gUvhvP2lL98kmsQqUJIeIaT6K
CPG/xBbUrRQOwsAu8W4n0pE7FsMk/GbvgzqbFA7VojCn/zLj9X9j0G8f/PpxyGNy
yl6UgykvrZZo/WLX5LKrJsCdKgBu68lqibTEbwHnZeAcMSZZx6Ze4xmYfhatPdky
Aeey65IbzMSncs0W7ynivwDNct71LNQPgEfR59jp4hwx/4DO7i071xZ71K+hT1P5
SNFscmI+4x8kA1shxU/AXDOYlwdu5KtXLrBlW+bYcDXqFZPh+MeP8IbgPLwoTrbO
pV3g3jZahxF2RrXvltLuBmprAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUZzEPt1P3
xbPe01GKjWYPP4CiWa8wHwYDVR0jBBgwFoAUJORaRnCGXtHFEd0iLVGFv6ZyCF4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5RkJCL0JBOUE5RTY4RTQw
NDExRjBBNjYxOUM2MDYxNkY1NkJDL0pPUmFSbkNHWHRIRkVkMGlMVkdGdjZaeUNG
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvSk9SYVJuQ0dYdEhGRWQwaUxWR0Z2Nlp5Q0Y0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5
RkJCL0JBOUE5RTY4RTQwNDExRjBBNjYxOUM2MDYxNkY1NkJDL0pPUmFSbkNHWHRI
RkVkMGlMVkdGdjZaeUNGNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCLzpiXSIdkKV9HPG7yPyfUljC3AbKpLSCu+jGvxZuD/Pp4MdLwBMTYq1hjjwXq
dW+fmdjlE4KZTrPVkcN8Gl1xm8S2Rf0g33mHcPtDKhyQFcikW0f2hUGN/kFS+lj6
NnTKVHm0YgaMfrC+YRLi7o3pbEySTD+EwG3khpY9sz49lYmP0QDo+QR/j71qNwCb
QVMsspGCnSj+XHWRiSP1u1LMOyT6aXp2sI3U7qcp0xNxKZkZA1KkbKh7ZhGklM/b
3iFf4Q3I0ZaS5cwmRyzunY1Q94djVe49Fs9fVPkg2wsflrU5hWy1t5Z1ouZspODj
dyD1BJPxEz2aWkgZTgzJRhgB
-----END CERTIFICATE-----
Generated at Wed May 13 12:48:11 2026 by rpki-client