
$ rpki-client -vvf rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/JyyuXyHIv2trSRWvAATH78_H2z0.mft
File: JyyuXyHIv2trSRWvAATH78_H2z0.mft (raw, json)
Hash identifier: 32TwtbPfnDQpz0TqY+i5/tL5HgV6H8Dd8lCjuAbI/nM=
Subject key identifier: 36:E3:44:89:19:4C:DD:8C:F5:5E:11:32:29:29:40:20:21:51:06:B8
Authority key identifier: 27:2C:AE:5F:21:C8:BF:6B:6B:49:15:AF:00:04:C7:EF:CF:C7:DB:3D
Certificate issuer: /CN=A917314A/serialNumber=272CAE5F21C8BF6B6B4915AF0004C7EFCFC7DB3D
Certificate serial: 034A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JyyuXyHIv2trSRWvAATH78_H2z0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/JyyuXyHIv2trSRWvAATH78_H2z0.mft
Manifest number: 033D
Signing time: Wed 25 Mar 2026 00:39:55 +0000
Manifest this update: Wed 25 Mar 2026 00:39:55 +0000
Manifest next update: Wed 01 Apr 2026 00:39:55 +0000
Files and hashes: 1: JyyuXyHIv2trSRWvAATH78_H2z0.crl (hash: EwUJBhKODY49BT/Ox7Im6TDwds/HjEB6wkfugQ0JQAQ=)
2: 8620180E00EE11EDBC60AA4FC4F9AE02.roa (hash: e3j53flGD9hMNQO/70Yk/I1hHA67u/vAc36dfKcOIAE=)
3: CED1044A623011F09444A631C4F9AE02.roa (hash: StP9KMrnm4TGA7UMr9SQ/tPqe7AhIHIbZg5S33BgdOc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/JyyuXyHIv2trSRWvAATH78_H2z0.crl
rsync://rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/JyyuXyHIv2trSRWvAATH78_H2z0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JyyuXyHIv2trSRWvAATH78_H2z0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:39:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 842 (0x34a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917314A, serialNumber=272CAE5F21C8BF6B6B4915AF0004C7EFCFC7DB3D
Validity
Not Before: Mar 25 00:39:55 2026 GMT
Not After : Apr 1 00:39:55 2026 GMT
Subject: CN=69c32edb-58ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f3:98:22:71:14:bc:d6:7a:13:cc:68:6d:8d:
62:d4:74:8c:e3:b1:50:b6:92:7d:66:c4:a7:f6:d2:
10:ae:58:95:0a:c4:a5:b5:a5:d4:f8:69:8b:19:4c:
73:85:89:25:cc:df:b4:17:21:e5:99:d0:3c:52:cb:
7a:be:e3:6a:d2:17:5e:a6:80:cb:3f:11:df:22:54:
22:2b:48:3a:86:40:2c:55:b2:fb:b6:5f:60:8b:b2:
36:e3:e0:a1:e8:a7:ea:36:71:5e:c1:cc:4f:d7:2d:
96:e8:e4:8a:21:da:bc:0c:15:af:49:0a:83:1b:76:
74:3f:e7:40:28:c5:6a:d2:d8:8c:32:c8:33:be:ee:
38:f4:28:72:e7:be:30:95:f1:05:6b:52:a1:66:bc:
5f:86:1c:ab:ab:eb:43:84:68:e6:6b:00:99:34:10:
2a:74:16:12:fe:16:90:d2:57:84:ef:0f:e4:74:4e:
9e:88:51:b0:31:66:cd:43:1e:33:e1:00:0c:a8:4b:
45:03:e0:16:d6:d9:09:31:85:b3:3b:6d:a6:89:41:
ad:49:27:1f:0b:ce:17:01:62:8f:07:a8:e0:de:c2:
93:e6:06:ba:0c:d9:ad:77:46:ee:25:06:4c:aa:8d:
81:c5:0a:cf:b7:28:54:7a:26:ee:71:4f:5a:55:97:
98:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E3:44:89:19:4C:DD:8C:F5:5E:11:32:29:29:40:20:21:51:06:B8
X509v3 Authority Key Identifier:
keyid:27:2C:AE:5F:21:C8:BF:6B:6B:49:15:AF:00:04:C7:EF:CF:C7:DB:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/JyyuXyHIv2trSRWvAATH78_H2z0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JyyuXyHIv2trSRWvAATH78_H2z0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/JyyuXyHIv2trSRWvAATH78_H2z0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:11:06:1f:87:14:bf:ae:54:91:73:60:c5:a3:bd:a4:5c:8d:
96:a8:38:be:b8:f1:24:d4:8e:03:83:70:d1:3e:5e:32:c2:ce:
24:1d:81:c7:92:69:b6:8a:4c:0a:0e:64:5a:b3:ed:0d:b8:2d:
06:0c:be:72:25:b4:8f:44:25:84:f7:da:90:d7:16:6b:ab:ed:
4a:19:e7:39:df:3e:92:32:4b:eb:9e:ef:61:ec:9d:d6:65:57:
d4:aa:65:c1:d5:ff:22:eb:d8:12:03:61:8d:41:fd:cd:47:63:
f0:3d:90:00:e7:e8:53:f5:33:3f:6e:8a:59:d7:de:a8:91:7f:
84:26:4e:44:a3:34:23:29:23:bc:b1:a5:04:62:16:d2:ce:7e:
dc:2d:13:d0:73:90:8d:69:54:9b:1b:9f:e9:8d:20:82:33:5d:
c8:a5:87:1b:09:37:d4:18:5b:13:67:23:2d:b6:4a:ae:43:45:
4d:53:e8:79:6b:43:cc:2e:5d:66:b6:6a:d2:26:72:6a:2b:19:
3e:f2:68:46:06:f6:79:f4:ea:7a:bf:2e:1d:3a:a1:2d:ad:b4:
8b:ae:cc:0b:3f:5f:86:e8:eb:af:85:e3:95:af:1d:a5:db:c5:
5e:70:3d:96:c7:29:5c:da:6f:68:0a:8c:9b:b7:5f:76:33:3b:
a8:a0:64:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:01:25 2026 by rpki-client