
$ rpki-client -vvf rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.mft
File: JieQzZFM6o7BHiWGm4mN4AAfvQk.mft (raw, json)
Hash identifier: KKeEnX8ML8w78L0n4Qf/cwoTenZwB4xqNGQYWpmn8hk=
Subject key identifier: 10:89:7A:7D:9C:A6:45:DD:DA:3E:BD:59:CB:99:4D:D6:8F:C7:99:41
Authority key identifier: 26:27:90:CD:91:4C:EA:8E:C1:1E:25:86:9B:89:8D:E0:00:1F:BD:09
Certificate issuer: /CN=A914589A/serialNumber=262790CD914CEA8EC11E25869B898DE0001FBD09
Certificate serial: 1A57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JieQzZFM6o7BHiWGm4mN4AAfvQk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.mft
Manifest number: 1A21
Signing time: Wed 22 Jul 2026 16:26:49 +0000
Manifest this update: Wed 22 Jul 2026 16:26:49 +0000
Manifest next update: Wed 29 Jul 2026 16:26:49 +0000
Files and hashes: 1: JieQzZFM6o7BHiWGm4mN4AAfvQk.crl (hash: IxbM0pmd0IDqJt2Td30tSs92KaVSEpbKkIeXXGetHBo=)
2: BE466468B8D611ED876CBD7CC4F9AE02.roa (hash: 49/FK2no0+eXe8VXT3R+zqFMOagQDVzOLbP2aHJeuSw=)
3: 7F716274C95611E9A630AC3DC4F9AE02.roa (hash: 0wOhsRH1t2lYaZC2VY4/RdxjFMV42UhjtMVgT8IP8Mg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.crl
rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JieQzZFM6o7BHiWGm4mN4AAfvQk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6743 (0x1a57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914589A, serialNumber=262790CD914CEA8EC11E25869B898DE0001FBD09
Validity
Not Before: Jul 22 16:26:49 2026 GMT
Not After : Jul 29 16:26:49 2026 GMT
Subject: CN=6a60ef49-f029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:61:db:e6:42:e8:99:a2:1b:31:79:28:a0:bf:
c9:79:e2:61:78:5d:e7:d3:9f:41:25:1e:fe:aa:06:
c4:8e:ce:4d:51:66:32:22:92:26:06:35:61:0b:17:
2f:d9:69:92:36:d0:fa:92:9b:a3:c7:f6:c6:e5:4d:
97:99:94:61:95:7d:4f:68:7d:2b:ac:21:b0:cc:be:
f3:59:f7:33:57:f2:d8:a0:28:f3:90:96:ec:91:d7:
02:6b:4f:8c:72:c3:f3:92:05:37:f2:de:85:20:c0:
c0:0d:b8:41:d7:74:c7:43:23:28:c4:dd:27:d4:6b:
f8:b8:9a:55:b1:5a:02:49:16:ef:09:2b:1a:92:a2:
2c:cc:ea:23:67:87:35:07:b6:ba:0d:59:aa:62:27:
fc:a7:57:c6:a5:73:19:11:eb:7c:02:1a:96:94:e4:
c8:77:58:a6:b8:2f:c5:4d:31:57:bf:8d:d4:c0:db:
b5:27:d0:3f:cb:03:19:b6:c2:57:24:6a:75:b6:c6:
66:5e:bf:bf:6a:c5:a1:1d:19:ed:d6:6d:e5:db:f0:
98:75:c5:85:f4:6b:0e:4c:45:d7:cf:1a:e2:d5:ff:
62:d8:0b:15:a9:4c:f8:ec:96:1a:13:7d:15:5e:ae:
ad:65:4b:da:37:2d:34:a1:3a:46:37:ce:66:b2:52:
e8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:89:7A:7D:9C:A6:45:DD:DA:3E:BD:59:CB:99:4D:D6:8F:C7:99:41
X509v3 Authority Key Identifier:
keyid:26:27:90:CD:91:4C:EA:8E:C1:1E:25:86:9B:89:8D:E0:00:1F:BD:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JieQzZFM6o7BHiWGm4mN4AAfvQk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:6e:80:95:ed:b3:f5:96:c9:67:ae:e1:8a:79:34:60:1a:f4:
98:99:c5:8c:5c:8b:e0:63:0a:a1:74:bb:3c:31:ce:f2:3c:f3:
ce:07:f9:d5:10:ca:d7:63:58:96:be:a2:43:a1:94:4d:c2:a3:
c4:38:ad:b2:3e:8c:9a:b3:a8:00:d9:f6:a8:c1:e0:01:fb:0b:
38:54:c4:16:8d:0f:86:fb:67:9e:eb:74:1f:0e:d5:35:c4:0b:
11:da:d1:30:13:02:08:62:b0:aa:24:7c:93:a1:74:b8:c0:2a:
f6:73:b5:d1:94:2b:47:ec:d4:86:6f:fe:be:60:c9:87:d6:ad:
0c:30:be:a0:73:bc:e8:08:c3:d1:00:20:9d:eb:5a:e0:4d:04:
cc:66:56:ce:6d:60:ca:09:7d:42:13:c5:78:58:56:22:8b:d7:
4c:8f:31:16:38:c9:b8:25:ca:17:53:52:8c:6b:b0:cb:e3:69:
ef:a9:ea:e2:6e:f8:6d:29:ca:33:bb:c1:17:3f:48:cf:ae:90:
77:f8:94:fe:01:a1:95:29:bd:71:c0:08:3e:58:f5:a2:48:3f:
95:34:de:25:b6:6d:bf:e1:57:d5:2b:9c:d4:af:ee:94:05:bf:
e6:e2:99:28:07:41:82:f4:76:bb:af:a8:f7:9a:79:a8:39:1d:
7f:73:e9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:47:49 2026 by rpki-client