
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft
File: JBKHZDDirPShqD5aV1x_l6srOy4.mft (raw, json)
Hash identifier: gY/ciR8RFhldADigxZo+mInbhASDFYvVDdGvDq6CWKo=
Subject key identifier: 6A:0E:11:42:E1:55:0A:EE:A5:26:6D:54:BD:7D:3E:0C:2A:29:88:87
Authority key identifier: 24:12:87:64:30:E2:AC:F4:A1:A8:3E:5A:57:5C:7F:97:AB:2B:3B:2E
Certificate issuer: /CN=A918BBEF/serialNumber=2412876430E2ACF4A1A83E5A575C7F97AB2B3B2E
Certificate serial: 074E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JBKHZDDirPShqD5aV1x_l6srOy4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft
Manifest number: 0735
Signing time: Sat 14 Nov 2026 21:52:28 +0000
Manifest this update: Sat 14 Nov 2026 21:52:28 +0000
Manifest next update: Sat 21 Nov 2026 21:52:28 +0000
Files and hashes: 1: JBKHZDDirPShqD5aV1x_l6srOy4.crl (hash: hIS5BEjsCxAb9g6m25oMFOqY6ielu+QQrL4e2zisSIM=)
2: 28D28DD0F1B511EE83596382C4F9AE02.roa (hash: qu6jbzeI2M4KZM805xmZbJ8ZA02mORrGdIlgFsX0p6Y=)
3: 07BB530CF1B511EEACF12582C4F9AE02.roa (hash: oxRH/FtaAdPMYWN/lkzxOotTfl395O31d3r/LMbHvxs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.crl
rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JBKHZDDirPShqD5aV1x_l6srOy4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 21:52:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1870 (0x74e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918BBEF, serialNumber=2412876430E2ACF4A1A83E5A575C7F97AB2B3B2E
Validity
Not Before: Nov 14 21:52:28 2026 GMT
Not After : Nov 21 21:52:28 2026 GMT
Subject: CN=6af8d81c-9aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b9:0b:a2:b4:3d:5b:8a:c0:67:c1:9b:21:9f:
29:ea:cf:76:15:15:f0:06:bb:8d:37:c1:60:57:21:
2d:59:34:b3:4a:39:0a:71:a7:6a:38:1c:5d:09:06:
b1:aa:0b:3f:77:cf:59:27:17:e1:fa:b0:87:62:07:
26:b6:02:17:fb:aa:b6:a5:ab:bf:69:ea:4d:b4:7f:
25:3e:39:11:3b:43:da:9d:01:c1:4b:dc:4d:58:db:
70:d2:56:ca:d6:08:cc:cf:e5:35:93:86:b5:24:a1:
37:b5:df:6a:48:51:6f:95:76:cc:28:f3:06:b3:17:
87:12:31:a3:58:b1:3d:9a:77:8b:c9:3f:e9:1f:4b:
9b:e8:87:35:d2:df:c5:e8:22:60:5d:65:53:54:76:
81:75:23:8d:f9:1a:81:e9:5e:ae:f6:06:98:9d:67:
78:ef:a5:81:b9:c7:b3:e9:cf:39:9f:6e:4c:aa:db:
3f:a7:8b:d3:5b:c7:30:80:9d:6b:53:84:89:9d:9e:
16:d5:8c:97:90:43:92:56:7b:d4:80:e8:4b:25:cb:
73:a2:de:ac:6f:23:a8:c7:fe:de:d2:d7:14:f4:a1:
86:6b:c3:35:4c:08:ed:ad:af:ad:43:a9:d1:80:33:
b5:72:ee:67:06:f2:49:2b:e9:6c:66:83:34:7f:c5:
84:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0E:11:42:E1:55:0A:EE:A5:26:6D:54:BD:7D:3E:0C:2A:29:88:87
X509v3 Authority Key Identifier:
keyid:24:12:87:64:30:E2:AC:F4:A1:A8:3E:5A:57:5C:7F:97:AB:2B:3B:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JBKHZDDirPShqD5aV1x_l6srOy4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:ba:6f:51:aa:70:44:80:fa:0a:1f:42:45:f1:e5:59:81:a8:
f9:56:97:4f:9d:c0:19:30:2a:42:d1:a4:35:32:b0:d0:96:e7:
72:fe:c5:16:a9:8d:af:f3:18:18:87:9a:dd:9f:46:63:38:ec:
85:87:45:f5:00:9d:e9:d5:c7:bd:ab:af:8b:a1:0b:df:40:71:
dc:2c:99:c6:ff:db:23:6e:42:63:45:70:64:b7:3e:6e:27:36:
5e:c6:c0:0c:d5:98:f8:4d:0a:33:58:38:e0:13:ce:a9:38:53:
7b:96:61:2c:99:89:ce:7f:ab:7d:e7:d7:25:8f:5a:5a:1c:fa:
4e:e2:9c:a8:e8:9c:8f:51:cc:84:04:0c:69:99:21:d3:e2:b7:
7b:b9:fe:04:29:83:de:5d:1b:70:81:a5:9c:ad:58:47:03:78:
95:7a:61:af:3f:da:43:4f:2a:df:e1:71:92:1c:21:ab:6e:cf:
e8:05:1d:ff:fd:d3:b6:df:d6:a8:b8:83:62:1b:7e:9c:9f:95:
2e:91:6a:1c:76:2d:28:b6:38:ea:8e:e6:eb:6f:8c:b6:06:27:
84:4a:5d:fd:09:52:02:ce:72:d1:af:96:a3:a6:77:3f:a7:05:
97:ce:7b:78:ae:3e:4e:41:f1:ef:7c:e9:75:20:64:dd:d2:66:
b5:68:55:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:54:16 2026 by rpki-client