
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft
File: j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft (raw, json)
Hash identifier: byr1YDLNOh32ZgIhJXdNPkUdzrdg6M/PWGDlyJpDqVk=
Subject key identifier: F0:B3:95:B7:AA:D4:3F:0B:5C:06:58:1C:09:85:F0:E5:81:BB:43:6B
Authority key identifier: 8F:9F:8A:45:F7:89:1E:2F:15:9F:3C:CB:C8:27:88:87:D7:5F:BD:27
Certificate issuer: /CN=A9147493/serialNumber=8F9F8A45F7891E2F159F3CCBC8278887D75FBD27
Certificate serial: 08A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft
Manifest number: 087B
Signing time: Wed 22 Jul 2026 21:15:26 +0000
Manifest this update: Wed 22 Jul 2026 21:15:25 +0000
Manifest next update: Wed 29 Jul 2026 21:15:25 +0000
Files and hashes: 1: j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl (hash: sbcnQyp7BeiKhxT2kHNDbguXTj0XOSAaYZQlj9zc6Vk=)
2: 97786014BAE711F08A930863C4F9AE02.roa (hash: n9Kxrr3pps9EWJc6FJJvW5XN8lfbolwtiiuJt22fhTQ=)
3: AFDBAB82BAE911F09182A92BC4F9AE02.roa (hash: PVjkDP7T0tezEoMksg6Sf8gOirpdO87qwsau6puOlUc=)
4: 66D426F0E55D11F0B49EA6E0396F56BC.roa (hash: MLnSJZ7wlMAlzMFJZwoCnvZfMjGPgiWNcDMGC+8J2FI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl
rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:15:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2210 (0x8a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147493, serialNumber=8F9F8A45F7891E2F159F3CCBC8278887D75FBD27
Validity
Not Before: Jul 22 21:15:25 2026 GMT
Not After : Jul 29 21:15:25 2026 GMT
Subject: CN=6a6132ed-8336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:34:96:41:af:da:93:9e:b0:6c:d7:e7:f6:99:
69:b4:26:6d:c9:ea:ef:f9:f1:c9:4c:5f:70:81:55:
e4:ed:4a:ac:df:81:2e:17:b4:09:46:5f:7e:d2:a2:
6c:3f:5f:4e:5c:71:10:00:2b:56:90:ed:f6:f6:1e:
c7:ce:d7:60:97:b0:69:ca:7a:dc:1d:ee:97:90:44:
b6:fe:da:a7:e4:d7:40:06:f6:67:67:bf:0b:4c:b8:
a1:9a:ff:35:68:6f:a1:72:20:9c:d8:31:92:91:2a:
bf:ab:5d:8d:e7:eb:78:8c:61:2e:c6:ce:02:79:d6:
54:52:b8:df:63:d7:e5:d0:e7:5b:35:07:ed:c5:3d:
91:6e:7f:8d:14:e6:8f:a6:4e:a7:ec:4e:65:37:c9:
0e:2f:2e:9d:c3:3d:90:00:61:48:b9:fa:da:59:3b:
b1:bb:83:56:1d:6c:fc:bf:f8:ef:af:e6:97:93:69:
13:55:0a:4d:00:55:e3:cb:7d:a7:f5:c6:85:2b:79:
6e:b2:7e:db:28:41:2d:89:78:f3:c7:e3:dc:70:bc:
53:6a:96:c2:f2:5f:8b:01:61:4e:a2:40:05:06:56:
06:97:ea:a7:dc:dc:74:40:43:46:c7:69:ca:e5:ae:
c6:f1:94:55:cc:03:b3:ec:b8:c4:e9:a7:09:51:a2:
8f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B3:95:B7:AA:D4:3F:0B:5C:06:58:1C:09:85:F0:E5:81:BB:43:6B
X509v3 Authority Key Identifier:
keyid:8F:9F:8A:45:F7:89:1E:2F:15:9F:3C:CB:C8:27:88:87:D7:5F:BD:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:ed:34:cd:0d:cb:12:b2:48:8d:70:d7:ee:73:1a:f2:30:22:
de:3d:2d:e9:64:2e:78:64:aa:1b:9f:16:4d:21:4b:29:94:2c:
e4:71:fc:e8:6c:15:92:e8:b6:70:cb:45:b3:3b:13:d2:0f:6a:
74:70:b6:2d:88:0f:84:50:08:35:17:ed:5c:96:02:6b:5d:da:
81:cd:18:7e:b0:62:ff:e8:da:f0:79:69:15:d9:bb:9f:c4:ba:
3d:58:ee:1b:7f:77:02:e9:17:bc:e7:c3:38:7a:f1:25:a9:89:
6f:25:a9:a5:07:fd:39:6f:af:bf:36:f8:99:92:82:7d:19:71:
2f:58:b9:f5:83:a6:b8:28:52:c7:dd:0f:d8:4b:de:66:33:2e:
7d:96:8d:b3:7e:07:5b:ed:2b:23:11:72:76:07:51:25:51:4a:
2a:5d:b8:1f:29:56:c2:83:e4:5d:97:ee:8d:ec:34:97:31:89:
e5:43:21:e7:c0:ad:80:c9:44:ad:16:bd:13:a8:e5:52:c3:d9:
f7:5c:1c:8f:70:1d:06:fe:03:af:6a:0f:ab:6c:85:32:19:31:
bd:c4:df:81:aa:63:33:00:53:74:f2:b3:4c:97:85:95:6f:fc:
74:ec:ea:04:b4:30:75:66:ef:b4:52:51:e1:e8:bc:f5:aa:16:
b7:d9:d7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:20:14 2026 by rpki-client