
$ rpki-client -vvf rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft
File: JMzoDfDUim0MORo68N1kTdv7das.mft (raw, json)
Hash identifier: B5M7M5c2AYXodUQgGN26kJAjHX2evs89+x4/Vxg6vSQ=
Subject key identifier: 87:97:BA:AF:6D:46:20:A4:16:71:FF:02:BB:E9:6A:13:65:F7:D1:9E
Authority key identifier: 24:CC:E8:0D:F0:D4:8A:6D:0C:39:1A:3A:F0:DD:64:4D:DB:FB:75:AB
Certificate issuer: /CN=A918769B/serialNumber=24CCE80DF0D48A6D0C391A3AF0DD644DDBFB75AB
Certificate serial: 03C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JMzoDfDUim0MORo68N1kTdv7das.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft
Manifest number: 03BC
Signing time: Wed 25 Mar 2026 00:19:03 +0000
Manifest this update: Wed 25 Mar 2026 00:19:02 +0000
Manifest next update: Wed 01 Apr 2026 00:19:02 +0000
Files and hashes: 1: JMzoDfDUim0MORo68N1kTdv7das.crl (hash: nO7WBfHuQ1A8puUTFg+kDdP+Cbv5P0jd6uT0W7Kc3YA=)
2: D8D89576CF2F11EC8378951DC4F9AE02.roa (hash: kyih9MHHocNwE9MOGke3BF00ufTMcRqOo0CJ2pKhiNM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.crl
rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JMzoDfDUim0MORo68N1kTdv7das.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:19:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 964 (0x3c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918769B, serialNumber=24CCE80DF0D48A6D0C391A3AF0DD644DDBFB75AB
Validity
Not Before: Mar 25 00:19:02 2026 GMT
Not After : Apr 1 00:19:02 2026 GMT
Subject: CN=69c329f7-7435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:31:b9:71:14:e7:9f:11:18:e0:bf:63:49:df:
67:df:21:8e:b1:84:54:10:a6:47:b2:33:c6:83:51:
8a:0d:39:6d:f1:9d:35:08:a7:29:e1:29:0d:8c:8f:
bb:82:a0:51:c6:b9:60:f1:67:ed:41:fa:20:c9:34:
4f:8b:79:be:b5:ae:e9:08:7e:ed:10:ed:39:23:1e:
5f:ab:b3:27:b6:37:62:9b:7e:88:fd:49:e6:c6:c8:
3d:f1:a8:19:70:02:8b:78:44:ba:36:d1:82:21:4e:
e6:54:62:52:f8:30:46:ed:cf:f8:97:dc:8a:4c:d7:
a6:50:63:4b:a5:7b:44:16:c3:b8:76:d8:e2:5a:e4:
28:3a:9c:52:4d:99:82:5d:f3:33:90:de:51:8f:09:
e9:82:70:a3:5f:44:c5:94:d1:ff:f8:6d:b8:c9:0e:
e4:19:7f:72:41:5a:63:29:7f:e9:2e:43:d4:5a:b2:
93:b4:cf:a8:e8:da:65:8c:ff:d5:4b:33:9c:2c:66:
04:3c:3d:83:a9:48:e1:c6:67:77:10:a7:b1:08:2c:
1d:3b:49:29:84:e9:dc:27:37:2d:92:02:49:3e:60:
94:79:ff:19:5d:28:18:da:d2:da:a3:92:51:bd:73:
db:a0:85:11:17:ce:54:97:ae:2e:bd:6c:51:ba:2c:
11:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:97:BA:AF:6D:46:20:A4:16:71:FF:02:BB:E9:6A:13:65:F7:D1:9E
X509v3 Authority Key Identifier:
keyid:24:CC:E8:0D:F0:D4:8A:6D:0C:39:1A:3A:F0:DD:64:4D:DB:FB:75:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JMzoDfDUim0MORo68N1kTdv7das.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:79:44:92:a6:cc:5d:23:e7:dd:b6:fb:3c:02:2d:22:7a:e8:
ed:c1:62:f1:fc:25:f4:78:eb:df:e2:6a:a9:a3:c5:4d:e5:09:
1e:36:4a:e9:b5:2d:c9:1c:1f:f9:a5:b4:a7:9b:3d:cb:dc:a6:
91:f0:fe:43:ca:b2:17:77:a3:f5:6d:4e:de:e3:e8:b9:71:61:
89:93:42:62:49:a6:90:8a:f7:69:c6:3a:9d:c1:f8:4c:89:d1:
98:2f:9b:9e:18:d0:52:05:3d:5b:1a:02:4e:8c:40:2a:41:cc:
f5:16:a6:9d:40:e8:7b:36:0b:e0:18:a5:b7:a4:b0:59:ea:72:
be:19:0a:55:d6:15:3b:e6:b7:5a:e0:27:d4:33:62:d0:4d:b3:
d4:a3:5b:42:f7:59:88:75:c4:1e:d5:33:c7:26:c7:6e:1d:94:
82:3e:8b:65:ff:8c:8b:47:9e:ba:a0:b6:d5:e2:f7:e1:ea:46:
83:f6:a5:4c:e5:c5:b2:8b:8a:60:84:73:b4:bc:90:c9:9d:c3:
43:2e:0a:a9:b5:12:e7:5f:09:35:ad:c7:75:78:dc:0e:6b:33:
4b:7b:02:a9:9f:66:5a:9f:ee:cf:f7:1d:b8:39:5d:da:7d:40:
e0:d1:03:db:3d:e8:07:6e:dc:ba:62:8d:db:97:78:2e:2f:84:
f8:cb:51:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:45:38 2026 by rpki-client