
$ rpki-client -vvf rpki.apnic.net/member_repository/A918497E/C320C226B5D811EE8DA66D85C4F9AE02/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.mft
File: jUv3mkGe7A-lM-X8pQ_zcqM8s5A.mft (raw, json)
Hash identifier: nL8QKOD6nOC+sdktosPGXEFnGIZkgFZBAoU5VQ2EXkk=
Subject key identifier: 1B:B0:EE:E6:CA:84:B3:6F:76:7B:BB:94:02:04:C4:D2:1F:35:3C:59
Authority key identifier: 8D:4B:F7:9A:41:9E:EC:0F:A5:33:E5:FC:A5:0F:F3:72:A3:3C:B3:90
Certificate issuer: /CN=A918497E/serialNumber=8D4BF79A419EEC0FA533E5FCA50FF372A33CB390
Certificate serial: 01BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918497E/C320C226B5D811EE8DA66D85C4F9AE02/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.mft
Manifest number: 01BA
Signing time: Wed 13 May 2026 04:02:48 +0000
Manifest this update: Wed 13 May 2026 04:02:48 +0000
Manifest next update: Wed 20 May 2026 04:02:48 +0000
Files and hashes: 1: jUv3mkGe7A-lM-X8pQ_zcqM8s5A.crl (hash: d9WRqgU9C2+v/yqm1gZdeUroMI1ZXnp8yAVgGmYIX1s=)
2: D8FEAF6C637611EFB2D9FD47C4F9AE02.roa (hash: Vy56QzLj3xyE23NG6q6W7GkOltoRSJz12saYaOd0mlc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918497E/C320C226B5D811EE8DA66D85C4F9AE02/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.crl
rsync://rpki.apnic.net/member_repository/A918497E/C320C226B5D811EE8DA66D85C4F9AE02/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 04:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 447 (0x1bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918497E, serialNumber=8D4BF79A419EEC0FA533E5FCA50FF372A33CB390
Validity
Not Before: May 13 04:02:48 2026 GMT
Not After : May 20 04:02:48 2026 GMT
Subject: CN=6a03f7e8-d674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e8:5c:62:96:06:21:5e:16:2d:6d:13:bb:4e:
13:e4:8d:96:b6:b2:ee:09:2d:74:a2:a0:2c:82:88:
fc:80:58:86:3b:b6:4c:53:3b:4f:95:84:d6:b7:46:
e9:44:41:0f:03:34:ed:53:74:f7:60:a6:16:57:a3:
29:9e:43:94:2e:71:e8:f6:91:f3:06:45:b6:56:50:
c2:ca:c0:8b:6d:83:7f:2a:0b:43:8d:cf:0e:b9:04:
67:41:a1:58:87:f8:0d:48:9f:de:b2:59:cf:50:b7:
9f:ef:0c:34:bc:7e:22:97:6f:b5:cf:8f:fb:5c:64:
38:55:1e:33:a4:ca:80:da:b2:62:30:76:f4:b3:38:
50:32:ee:a5:60:47:42:b5:e0:ec:04:ff:d9:87:aa:
b5:d4:fc:2c:32:fa:c4:aa:1e:09:34:d1:21:1a:52:
fe:da:6b:cc:73:37:90:c3:8f:8e:21:59:d6:d9:d0:
91:29:18:d3:4a:19:a0:d1:2b:6e:6b:78:d2:ec:15:
f2:5d:f4:2f:6d:1c:4b:cf:4f:6c:55:e8:7e:45:86:
79:c4:e0:b6:38:8d:4a:b3:3f:ef:cb:c9:5f:b0:a7:
f7:f0:18:5c:c5:37:fc:60:f0:6c:a9:e5:24:39:3d:
61:85:78:c9:a0:b5:23:3f:fd:4b:6f:4e:de:57:75:
b9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B0:EE:E6:CA:84:B3:6F:76:7B:BB:94:02:04:C4:D2:1F:35:3C:59
X509v3 Authority Key Identifier:
keyid:8D:4B:F7:9A:41:9E:EC:0F:A5:33:E5:FC:A5:0F:F3:72:A3:3C:B3:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918497E/C320C226B5D811EE8DA66D85C4F9AE02/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918497E/C320C226B5D811EE8DA66D85C4F9AE02/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:f6:e8:c7:18:af:72:dd:67:fc:4f:02:89:05:28:6f:04:83:
9d:3c:d3:2b:4e:6c:25:3b:ca:ff:c3:52:4b:c8:cd:e6:6f:08:
e8:e2:39:dc:24:4f:07:c2:cf:f5:e1:81:e6:f9:01:0b:74:cd:
38:a5:d3:27:11:5e:95:f9:58:7e:a3:b9:fa:3a:26:13:e7:eb:
8e:ab:99:60:6c:e8:19:28:47:1d:e3:5e:eb:d8:2e:7e:ff:35:
b2:b2:63:cb:97:a2:5f:e2:67:2b:51:0c:58:78:4e:09:9b:88:
92:99:5e:1d:96:03:f1:ac:28:1c:25:a4:d3:a0:52:1a:dd:e5:
f7:86:9b:4f:3a:44:cf:b1:d2:71:f9:95:87:8a:15:fd:2a:0e:
d6:d9:97:5b:5a:69:be:82:37:fd:9b:5a:9f:94:77:07:10:3e:
77:9b:09:36:5d:94:df:f3:94:52:87:87:ad:ae:a1:f6:05:6a:
e4:fa:72:24:39:1f:16:22:f1:56:08:45:b2:bc:5b:c6:8b:93:
99:6e:1f:42:6a:8d:96:63:a8:76:fa:8f:1d:fe:4e:9b:d8:1f:
98:1c:4e:01:32:12:c7:a1:d7:c5:48:f6:d5:2a:c0:3e:9a:2e:
8e:2e:53:97:a0:63:ea:d6:c2:84:6d:55:75:cd:1b:b2:72:8e:
4d:61:9c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:45:20 2026 by rpki-client