
$ rpki-client -vvf rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.mft
File: Jy-f3zAUVOtsgfMBbCBa9EPKvVw.mft (raw, json)
Hash identifier: 4XGURi2XQbJvAqSIXls6l3VePs8NwnItGVHWNMUkLBY=
Subject key identifier: 28:8A:B6:AA:C5:CD:D4:D9:18:44:88:E0:A9:CB:66:F0:A4:FA:3E:61
Authority key identifier: 27:2F:9F:DF:30:14:54:EB:6C:81:F3:01:6C:20:5A:F4:43:CA:BD:5C
Certificate issuer: /CN=A919495D/serialNumber=272F9FDF301454EB6C81F3016C205AF443CABD5C
Certificate serial: 0561
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.mft
Manifest number: 0551
Signing time: Tue 24 Mar 2026 23:10:26 +0000
Manifest this update: Tue 24 Mar 2026 23:10:26 +0000
Manifest next update: Tue 31 Mar 2026 23:10:26 +0000
Files and hashes: 1: Jy-f3zAUVOtsgfMBbCBa9EPKvVw.crl (hash: gBWjyFdD0XXONTKeZLHIP4/4HETDNFU7iV4aCgGo/XY=)
2: 200E2B0059A011EC83255663C4F9AE02.roa (hash: UULcaQHNKBDfda2HKLf0hDbfYUd2cHh9DhOCF4t/roI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.crl
rsync://rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:10:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1377 (0x561)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919495D, serialNumber=272F9FDF301454EB6C81F3016C205AF443CABD5C
Validity
Not Before: Mar 24 23:10:26 2026 GMT
Not After : Mar 31 23:10:26 2026 GMT
Subject: CN=69c319e2-a998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:bb:4d:b5:1b:69:42:8e:c1:14:bc:a2:e5:46:
d6:6b:57:dd:99:38:f8:c1:e4:0f:f5:f9:68:37:cc:
02:89:10:34:e0:9b:8b:14:c8:cb:d9:ed:1e:db:88:
01:69:49:5d:10:d9:d6:6c:64:e1:9f:c5:09:c8:af:
e6:aa:32:6b:ab:a2:07:7d:c8:3a:d1:a3:bc:db:7c:
07:8b:c9:a4:55:ec:aa:5c:5f:61:01:08:d6:9b:ee:
fc:31:40:5c:3b:29:a2:dc:9b:36:d9:32:ed:f0:f1:
00:7a:0b:ae:e0:04:0e:f2:48:31:8c:1a:8c:07:75:
58:38:9f:d5:26:bd:19:84:85:41:cb:61:92:66:b1:
ed:c0:85:7f:04:6d:42:f6:41:f6:27:22:3c:86:6c:
7c:8d:b7:6f:52:b2:39:75:2e:c9:a7:4b:81:75:68:
70:55:26:bb:8c:a2:d3:6e:28:05:38:d6:10:9e:94:
0f:91:2f:f2:28:49:10:f9:b0:9c:34:fb:9d:e7:bb:
28:77:30:9c:b1:62:51:65:e5:c1:1b:69:4a:b7:91:
1e:0a:d2:41:6b:28:c2:91:d2:28:01:c6:f0:75:15:
1f:af:33:c9:bf:51:7b:9e:6c:85:15:a2:6c:2c:19:
ec:10:64:75:73:cb:73:ea:7c:df:0d:ca:5a:a8:cc:
04:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:8A:B6:AA:C5:CD:D4:D9:18:44:88:E0:A9:CB:66:F0:A4:FA:3E:61
X509v3 Authority Key Identifier:
keyid:27:2F:9F:DF:30:14:54:EB:6C:81:F3:01:6C:20:5A:F4:43:CA:BD:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:99:dd:cb:cf:72:63:cb:9e:25:1e:3c:35:6f:71:20:57:79:
b4:99:e5:7b:1f:c1:32:47:be:da:b7:d9:a9:0b:99:5b:46:e7:
bb:04:78:02:8b:f6:1a:5a:30:f0:bb:06:49:3a:87:da:73:a4:
e9:c9:02:d9:b6:5e:76:2c:e4:1b:93:fe:65:6f:5a:81:fc:71:
b8:ff:fb:2c:68:0a:82:0e:fd:25:4d:ff:93:0c:37:92:4d:b6:
6e:2a:c0:fc:fd:a2:e2:9e:53:06:f4:8a:16:a1:6d:c5:aa:a1:
28:c1:f6:d4:80:0d:de:0c:ec:9f:00:8a:0a:fc:cd:4d:a1:d6:
e9:b3:c9:d8:c4:3f:15:c5:ce:e6:56:70:c3:30:1b:02:c5:a1:
de:e5:e4:0d:60:90:b5:18:68:9b:5e:d7:49:a6:db:01:4f:7a:
a3:de:8d:c0:f2:0d:e1:3e:70:c2:bd:5c:a2:6f:31:20:46:30:
2a:1f:fe:3a:f0:21:44:78:14:33:4b:78:67:fd:6e:f9:3a:b4:
07:dd:66:16:a1:e9:55:ff:d4:21:dd:aa:d7:8e:84:21:b5:e0:
a5:db:9a:cf:46:f6:b5:d7:69:4f:81:0a:dc:6f:6a:09:bf:52:
f4:1a:c4:30:6f:5b:39:e0:5e:6a:d5:4a:89:b7:41:d2:50:8c:
7f:91:64:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:45:06 2026 by rpki-client