
$ rpki-client -vvf rpki.apnic.net/member_repository/A914860F/4A96477A386E11F18432F34FB3833773/Jo5Zbikaf69RDRv3KEjfsIbVyUE.mft
File: Jo5Zbikaf69RDRv3KEjfsIbVyUE.mft (raw, json)
Hash identifier: Mwm3LAiWZDDtWpBuiOkWHXreUFTi9uZ3WaNAQJDH9uk=
Subject key identifier: 33:D7:6B:A7:75:86:23:F4:07:AF:9D:04:76:C8:34:A1:72:59:35:5F
Authority key identifier: 26:8E:59:6E:29:1A:7F:AF:51:0D:1B:F7:28:48:DF:B0:86:D5:C9:41
Certificate issuer: /CN=A914860F/serialNumber=268E596E291A7FAF510D1BF72848DFB086D5C941
Certificate serial: 0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jo5Zbikaf69RDRv3KEjfsIbVyUE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914860F/4A96477A386E11F18432F34FB3833773/Jo5Zbikaf69RDRv3KEjfsIbVyUE.mft
Manifest number: 0F
Signing time: Mon 11 May 2026 09:15:18 +0000
Manifest this update: Mon 11 May 2026 09:15:17 +0000
Manifest next update: Mon 18 May 2026 09:15:17 +0000
Files and hashes: 1: Jo5Zbikaf69RDRv3KEjfsIbVyUE.crl (hash: VEUmpgzdR7eErD4FwwkHyDH2eH2BFeG2320anPBOmKw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914860F/4A96477A386E11F18432F34FB3833773/Jo5Zbikaf69RDRv3KEjfsIbVyUE.crl
rsync://rpki.apnic.net/member_repository/A914860F/4A96477A386E11F18432F34FB3833773/Jo5Zbikaf69RDRv3KEjfsIbVyUE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jo5Zbikaf69RDRv3KEjfsIbVyUE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 09:15:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914860F, serialNumber=268E596E291A7FAF510D1BF72848DFB086D5C941
Validity
Not Before: May 11 09:15:17 2026 GMT
Not After : May 18 09:15:17 2026 GMT
Subject: CN=6a019e26-9454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:54:42:c8:0d:ff:1b:3f:25:cf:ac:4d:9b:37:
a9:c0:99:fb:ef:cf:78:ad:97:b9:3e:2c:a8:aa:d1:
de:d1:48:6c:38:13:f9:a6:57:85:2a:31:c7:8b:c5:
b7:c7:78:8e:2b:ab:1b:6b:e2:42:0f:d7:22:77:73:
f2:d4:f1:5d:cc:0f:16:00:82:81:9a:d0:dc:b9:e7:
d1:6e:7b:83:55:c9:8e:aa:2a:13:5d:27:ca:53:28:
73:aa:0e:08:a7:f1:ee:77:12:50:b4:95:e8:04:c5:
5c:1f:9f:3d:12:58:54:88:b7:de:3f:c1:c2:0e:f6:
b8:a6:97:12:75:a5:f7:3b:37:34:11:9c:dc:fd:27:
e0:88:2a:10:be:9c:18:73:f4:80:df:69:9e:86:c8:
88:dc:0f:cf:78:60:d3:fe:d7:e9:d4:e5:af:ad:6f:
c3:94:06:a4:42:62:88:3b:84:a9:d6:b2:dc:a8:bb:
23:56:c4:a3:a1:9b:a0:92:5f:4e:4e:d5:11:e1:25:
5c:ee:87:22:f4:8c:70:1c:38:e8:3c:70:9e:b8:17:
8b:e7:75:0f:99:c4:10:77:f6:3b:7b:9c:5e:30:e3:
13:c0:7a:a9:be:0f:fa:3e:a8:34:7d:6a:b1:ed:c3:
27:e2:e4:2a:bb:92:f5:bf:39:21:75:f0:da:20:43:
c9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D7:6B:A7:75:86:23:F4:07:AF:9D:04:76:C8:34:A1:72:59:35:5F
X509v3 Authority Key Identifier:
keyid:26:8E:59:6E:29:1A:7F:AF:51:0D:1B:F7:28:48:DF:B0:86:D5:C9:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914860F/4A96477A386E11F18432F34FB3833773/Jo5Zbikaf69RDRv3KEjfsIbVyUE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jo5Zbikaf69RDRv3KEjfsIbVyUE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914860F/4A96477A386E11F18432F34FB3833773/Jo5Zbikaf69RDRv3KEjfsIbVyUE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:b7:b9:d8:19:a1:91:cc:bd:05:e8:72:2b:ff:e4:2d:68:a3:
1f:97:80:a9:26:ca:f4:7d:11:a8:0a:b5:a7:c7:97:7a:35:15:
7f:bb:3f:2a:25:39:31:c7:f9:2d:87:a2:90:cd:7b:1e:fd:cf:
a9:ca:d9:1b:cd:18:5b:14:dd:06:82:9a:0c:d0:7d:e4:89:b5:
5b:75:a6:30:f2:78:5a:16:51:08:d3:cb:70:ed:7c:e3:26:58:
2f:51:ac:fa:b0:50:7d:33:74:6d:87:99:a0:e6:b3:2f:75:16:
39:dc:d6:7f:51:7e:37:62:b4:2e:d5:84:40:dc:eb:98:a5:c8:
41:55:25:84:6f:f1:3a:2c:63:95:d0:13:3c:28:eb:1f:34:7d:
94:e8:5c:36:5a:42:9a:b8:80:52:79:c7:7f:f8:14:d4:49:84:
32:7d:79:ba:ab:70:20:0a:0b:17:d3:26:8e:07:92:76:34:73:
f8:f8:4e:12:ca:0b:11:90:81:cb:87:d8:f7:9d:4b:09:be:2b:
c5:2d:17:6a:e9:08:4a:5e:bb:01:ac:74:03:56:73:f6:46:e6:
d1:8d:d7:78:db:19:05:75:e1:bb:04:92:90:4a:af:d0:73:65:
60:76:33:f4:50:93:f3:cc:9e:40:19:45:16:85:32:85:bc:f7:
9f:25:59:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:57:24 2026 by rpki-client