
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft
File: JBKHZDDirPShqD5aV1x_l6srOy4.mft (raw, json)
Hash identifier: XGItnPEu9C6P+dHEYwNCnrDFXE9rEYANv5A6DRyReaM=
Subject key identifier: 00:AD:B4:A9:04:5E:39:57:7A:20:33:BC:DE:B6:61:37:BC:BD:74:D2
Authority key identifier: 24:12:87:64:30:E2:AC:F4:A1:A8:3E:5A:57:5C:7F:97:AB:2B:3B:2E
Certificate issuer: /CN=A918BBEF/serialNumber=2412876430E2ACF4A1A83E5A575C7F97AB2B3B2E
Certificate serial: 0735
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JBKHZDDirPShqD5aV1x_l6srOy4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft
Manifest number: 071C
Signing time: Sat 26 Sep 2026 22:11:24 +0000
Manifest this update: Sat 26 Sep 2026 22:11:23 +0000
Manifest next update: Sat 03 Oct 2026 22:11:23 +0000
Files and hashes: 1: JBKHZDDirPShqD5aV1x_l6srOy4.crl (hash: PAKpUHP63SNYCTJzkv7Qk/FQs2l2OH1Ea2y9GSiRYRQ=)
2: 07BB530CF1B511EEACF12582C4F9AE02.roa (hash: oxRH/FtaAdPMYWN/lkzxOotTfl395O31d3r/LMbHvxs=)
3: 28D28DD0F1B511EE83596382C4F9AE02.roa (hash: qu6jbzeI2M4KZM805xmZbJ8ZA02mORrGdIlgFsX0p6Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.crl
rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JBKHZDDirPShqD5aV1x_l6srOy4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 22:11:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1845 (0x735)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918BBEF, serialNumber=2412876430E2ACF4A1A83E5A575C7F97AB2B3B2E
Validity
Not Before: Sep 26 22:11:23 2026 GMT
Not After : Oct 3 22:11:23 2026 GMT
Subject: CN=6ab8430b-29d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4e:80:a9:e3:dd:41:fb:64:2a:29:db:f0:60:
58:e8:17:f9:c5:24:ba:4d:52:e3:bd:2d:6a:7f:b3:
7a:4f:6b:ce:59:c2:ed:d8:89:2b:3a:a1:ce:30:fe:
f2:2a:7f:e1:4c:04:44:99:9e:34:58:30:50:18:c3:
53:74:ba:f2:0a:17:ac:80:d0:44:a1:e8:53:d7:d2:
43:1e:4d:6a:36:d5:6a:16:c7:73:72:0c:3d:bc:db:
3e:db:21:e1:ac:a7:c9:f2:6c:15:d0:17:9d:41:cf:
14:a5:4f:b0:32:15:aa:0d:b0:d4:b2:f8:f9:b5:66:
e6:ae:e2:49:5c:bc:4e:b4:92:41:8b:f8:20:c8:5f:
23:e9:53:44:01:db:de:a1:9e:e2:85:47:0e:1a:fd:
33:a6:97:cc:ab:93:50:41:10:db:e5:5c:8e:ba:c2:
0e:76:21:58:b0:5d:ef:69:a1:4a:8d:bd:00:a7:4f:
8b:a4:f2:16:3b:a2:22:5f:f9:a9:72:13:cc:88:ee:
58:0b:a6:77:6d:65:ba:56:be:96:b7:1f:5e:f0:7e:
14:fa:60:98:07:91:21:04:dc:87:c9:87:ac:81:63:
83:10:d3:f5:fc:3a:4d:3e:b3:f0:28:87:46:0c:42:
9f:05:ea:70:f0:df:f1:fc:d4:2a:1e:d0:d9:32:40:
86:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:AD:B4:A9:04:5E:39:57:7A:20:33:BC:DE:B6:61:37:BC:BD:74:D2
X509v3 Authority Key Identifier:
keyid:24:12:87:64:30:E2:AC:F4:A1:A8:3E:5A:57:5C:7F:97:AB:2B:3B:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JBKHZDDirPShqD5aV1x_l6srOy4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c6:a7:d6:bd:19:65:dd:c1:1b:5b:e9:6d:80:c5:c5:1a:b7:81:
8f:bc:c1:30:f2:30:30:de:ef:d5:f2:82:cf:41:e1:5a:b0:e4:
9e:78:b7:ef:75:f7:1f:8a:8c:c0:7c:1d:88:cf:cf:75:cc:cb:
f8:0b:96:61:07:a6:05:54:95:21:c0:63:99:37:1f:a3:a2:11:
36:8c:90:54:63:67:0a:e6:de:ed:a0:50:29:84:22:05:02:4c:
28:85:0d:16:5c:53:b9:ce:cd:aa:68:01:25:d6:31:fe:e0:1b:
32:1b:cc:84:2a:d8:59:d1:c6:51:25:31:f3:0f:ef:e1:a7:71:
31:c0:3e:13:09:6c:61:9f:5b:21:c2:24:3e:9a:68:3b:6e:53:
01:58:61:58:4c:ae:75:b3:ef:f6:89:24:78:88:0f:d6:59:0d:
f0:83:82:3c:ce:7b:ab:28:73:19:13:43:1a:fc:a4:05:d2:26:
be:29:56:48:ff:45:d9:8c:6b:9a:1c:d8:bc:fa:3e:84:52:02:
75:68:d3:62:22:34:92:21:99:a1:13:8f:d6:34:6d:0e:0a:23:
6a:12:e3:32:3e:70:a5:2c:ae:e1:8c:b0:02:d4:d1:e4:ef:3d:
2d:60:6c:d9:67:41:b6:03:4b:ab:8b:0f:47:50:af:10:23:67:
9e:b3:97:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:15:55 2026 by rpki-client