
$ rpki-client -vvf rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.mft
File: JieQzZFM6o7BHiWGm4mN4AAfvQk.mft (raw, json)
Hash identifier: kCuulV5zN7B8MwCd8blkj6gAjKq/0JMuTNaORxkZZIg=
Subject key identifier: E5:8B:4B:8F:83:CE:23:92:8A:DE:12:AF:E0:2E:47:9F:12:D9:D9:3D
Authority key identifier: 26:27:90:CD:91:4C:EA:8E:C1:1E:25:86:9B:89:8D:E0:00:1F:BD:09
Certificate issuer: /CN=A914589A/serialNumber=262790CD914CEA8EC11E25869B898DE0001FBD09
Certificate serial: 1A33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JieQzZFM6o7BHiWGm4mN4AAfvQk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.mft
Manifest number: 19FD
Signing time: Tue 12 May 2026 16:22:41 +0000
Manifest this update: Tue 12 May 2026 16:22:40 +0000
Manifest next update: Tue 19 May 2026 16:22:40 +0000
Files and hashes: 1: JieQzZFM6o7BHiWGm4mN4AAfvQk.crl (hash: 7Npajs4eVdOXVL1kCyrPtD+EkyQvB4eVFsHN/junSHw=)
2: 7F716274C95611E9A630AC3DC4F9AE02.roa (hash: 0wOhsRH1t2lYaZC2VY4/RdxjFMV42UhjtMVgT8IP8Mg=)
3: BE466468B8D611ED876CBD7CC4F9AE02.roa (hash: 49/FK2no0+eXe8VXT3R+zqFMOagQDVzOLbP2aHJeuSw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.crl
rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JieQzZFM6o7BHiWGm4mN4AAfvQk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6707 (0x1a33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914589A, serialNumber=262790CD914CEA8EC11E25869B898DE0001FBD09
Validity
Not Before: May 12 16:22:40 2026 GMT
Not After : May 19 16:22:40 2026 GMT
Subject: CN=6a0353d1-5fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7e:3f:bb:82:7f:29:f4:da:e6:6d:16:ea:56:
24:67:d7:7c:13:8a:d4:b1:d8:77:c7:e1:73:35:63:
81:ee:37:b9:ef:fc:71:ff:03:d5:e4:3c:7b:a2:a8:
0d:dd:e9:bd:ba:b1:35:a8:a4:88:34:e8:4a:45:d9:
3d:a4:56:0b:bb:50:ad:d4:1e:a9:22:d7:3c:33:57:
79:0d:38:79:9a:d0:aa:d4:34:1c:a5:35:ff:c5:d1:
fc:3d:d6:c7:31:7a:bc:1d:e0:e9:e8:93:c6:d0:67:
15:96:f0:62:03:0c:f5:4e:9c:49:92:ee:fb:d5:97:
28:b4:b0:1a:de:a9:04:ae:ea:ac:b7:3d:a5:fd:64:
e5:b9:28:c2:1f:5c:05:1d:d6:b7:34:2e:8f:23:41:
60:88:81:ed:9a:ae:b7:4c:64:41:fa:34:3f:42:d9:
c6:fe:22:7a:bc:56:8b:6f:6e:54:db:58:2a:c2:70:
4b:9a:55:87:dc:0d:0a:b3:5d:33:e4:16:6f:92:89:
f4:b9:fe:7b:f1:4a:3b:31:51:62:b6:d8:c5:0c:38:
23:b1:5b:13:13:23:76:f1:0a:dd:84:6e:70:e6:ea:
88:0a:27:e2:64:60:58:c4:51:1b:8e:cd:94:71:09:
ae:97:8d:62:36:47:1f:f7:d5:b2:94:4a:81:ec:e0:
b0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:8B:4B:8F:83:CE:23:92:8A:DE:12:AF:E0:2E:47:9F:12:D9:D9:3D
X509v3 Authority Key Identifier:
keyid:26:27:90:CD:91:4C:EA:8E:C1:1E:25:86:9B:89:8D:E0:00:1F:BD:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JieQzZFM6o7BHiWGm4mN4AAfvQk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:83:19:fd:66:99:42:5a:a4:29:b2:93:6c:29:ad:2f:07:5c:
ca:ba:d3:ce:c1:1e:ff:24:19:73:88:18:58:4b:a7:be:86:0b:
13:0f:20:fe:59:30:34:05:7a:f4:98:a9:b1:1a:ec:05:7e:56:
39:ab:f0:59:7c:28:40:69:16:d1:90:8d:a9:dd:77:65:12:e1:
a8:c7:7c:54:d9:ad:51:21:b0:83:52:2c:8e:27:51:f2:5a:10:
3c:2c:1e:0b:21:52:1c:b1:cb:48:a5:3a:e0:3d:4b:04:25:0e:
e9:c8:15:e6:97:c8:41:00:d2:47:2f:7f:22:e2:95:6b:db:d2:
f7:9a:80:49:da:87:4c:98:b1:88:c9:14:15:16:ad:ed:7d:9e:
ed:21:05:93:e8:4d:bb:31:ee:e5:33:55:e8:ea:40:e0:39:cf:
7d:c1:42:a8:48:9f:e0:3f:5a:68:a9:c1:c7:bd:2f:b3:04:ff:
e5:dd:78:de:d8:48:15:3f:b3:9a:7a:00:06:ee:be:7d:8f:3e:
22:5e:06:45:40:8b:8a:5b:ec:e4:dc:cf:d0:39:92:3a:bd:5c:
57:01:41:16:ff:80:72:08:67:cf:dd:4f:7e:bb:48:24:62:27:
b2:26:92:7e:89:61:68:1a:8f:96:65:dc:4a:22:36:45:88:d5:
8e:fc:1c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:01:40 2026 by rpki-client