
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft
File: JU6vZJB1T1B9uBzpDdtim2IvRmA.mft (raw, json)
Hash identifier: W1YJpmMupyloe8FfFBE1dgN4fasJ6OGgQnrAnSm6Ons=
Subject key identifier: E3:FC:37:88:B6:DF:96:DA:51:55:AF:6A:F4:2A:0A:9F:F1:92:4B:4B
Authority key identifier: 25:4E:AF:64:90:75:4F:50:7D:B8:1C:E9:0D:DB:62:9B:62:2F:46:60
Certificate issuer: /CN=A915B8D0/serialNumber=254EAF6490754F507DB81CE90DDB629B622F4660
Certificate serial: 01E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft
Manifest number: 01DA
Signing time: Wed 23 Sep 2026 03:30:44 +0000
Manifest this update: Wed 23 Sep 2026 03:30:44 +0000
Manifest next update: Wed 30 Sep 2026 03:30:44 +0000
Files and hashes: 1: JU6vZJB1T1B9uBzpDdtim2IvRmA.crl (hash: xKRVnx4VR1WpwSilvB2EpJPFTRQ2n11YhQR75WDh7rA=)
2: 0B2E53E422B711EFB2B15160C4F9AE02.roa (hash: HMdh5qQbMBugOBpZmqbwDLsg01Y9XQwAxnZyu8Z1p8o=)
3: FD6286EA22B611EFBF5D3960C4F9AE02.roa (hash: Y/Om0EuE4DxLCw/qgrFqWJHVkuUt8pRbj21WLvoBDpA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.crl
rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 03:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 487 (0x1e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B8D0, serialNumber=254EAF6490754F507DB81CE90DDB629B622F4660
Validity
Not Before: Sep 23 03:30:44 2026 GMT
Not After : Sep 30 03:30:44 2026 GMT
Subject: CN=6ab347e4-ab8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a1:92:98:03:00:65:72:25:45:64:b8:f6:75:
df:ae:34:65:d1:3f:d5:2a:37:3c:73:66:2c:12:60:
73:f3:41:d4:f2:48:07:6d:95:4c:b3:97:68:2e:ec:
b2:5c:63:13:b8:84:a3:d7:6b:18:2e:d5:94:22:75:
44:d2:22:58:aa:94:12:ef:9f:df:d8:6e:31:ed:8c:
44:2a:7e:98:b1:86:51:6a:f4:26:ad:82:e7:d3:85:
e4:29:68:7f:12:d6:39:06:14:5f:47:8e:a7:c2:79:
e4:22:0a:12:9e:7e:01:48:cc:fe:b8:fe:73:fa:3b:
86:b1:de:41:ad:b7:35:ee:96:5f:8c:cd:50:3d:e6:
10:28:5f:cf:1a:a4:8b:97:f2:a4:e5:90:ae:fb:45:
79:00:cc:db:8b:1f:8a:65:ca:65:95:5a:56:ec:96:
b8:0c:33:32:a0:59:5b:97:86:f1:9f:4a:5d:dd:ef:
23:94:9e:fd:b3:1a:a5:fa:82:dd:57:7c:e5:6d:c9:
21:de:01:9d:c5:76:df:fe:3e:f8:3c:1e:e4:ea:0f:
30:88:b6:cb:42:c0:e9:9c:75:60:42:05:07:36:54:
e1:c8:21:45:d8:c4:a3:be:11:1c:f8:9e:92:b7:f3:
cb:b4:c3:76:25:9f:3e:74:24:7e:31:15:61:72:77:
db:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:FC:37:88:B6:DF:96:DA:51:55:AF:6A:F4:2A:0A:9F:F1:92:4B:4B
X509v3 Authority Key Identifier:
keyid:25:4E:AF:64:90:75:4F:50:7D:B8:1C:E9:0D:DB:62:9B:62:2F:46:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:ad:69:80:a8:78:b3:0c:5e:c7:bf:e7:fe:7c:5e:70:4b:b0:
88:9f:c1:09:85:bb:0a:e5:15:e9:30:12:33:4c:1c:b0:ea:70:
20:d7:be:57:14:42:84:52:41:5e:1d:b1:1f:fc:99:2c:39:71:
ab:35:27:59:1e:d8:d6:60:35:7f:47:e6:92:fd:94:fa:cc:53:
f9:72:2a:b8:b0:14:39:4f:80:51:db:43:39:fc:78:be:87:00:
f5:0a:68:ee:6b:75:6e:16:5d:ef:15:b6:2c:ae:91:86:23:ac:
52:d6:54:b8:a1:ce:30:74:9a:6f:fd:a2:64:5a:5f:f6:fc:d2:
e5:f8:15:b9:cc:77:d7:b7:cb:b8:1f:c2:74:42:b7:d9:8c:6e:
07:67:1d:7b:d3:a1:e2:1d:53:68:09:19:96:5e:6a:ed:14:e8:
a4:0d:ab:92:f6:f7:63:ee:80:f1:e3:71:44:0e:f9:61:fc:3e:
b6:66:5c:78:73:68:7d:f2:d7:62:e0:38:f0:53:1e:e7:8c:00:
50:51:47:32:ad:be:28:29:bf:0b:2e:1f:41:9e:4c:bf:c2:c0:
af:07:b4:ee:12:21:e1:21:a1:5a:13:e0:14:ad:ce:98:ee:b3:
b2:e3:d0:d3:63:7c:c0:c1:8e:df:6d:dc:0c:64:d4:11:a0:69:
be:aa:4a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:26:18 2026 by rpki-client