
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft
File: JMi7-TDNLRI5mr35ycqxSxzXn2s.mft (raw, json)
Hash identifier: iiu5mz0PF7cQWbsHLTY9QgBl5T/etuW08U3hH6yOn5g=
Subject key identifier: 20:56:6D:6E:21:FE:45:CB:C0:77:FB:13:D0:DD:3F:8A:3E:5D:B7:22
Authority key identifier: 24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B
Certificate issuer: /CN=A919A713/serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B
Certificate serial: 040F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft
Manifest number: 03DA
Signing time: Thu 23 Jul 2026 01:30:55 +0000
Manifest this update: Thu 23 Jul 2026 01:30:54 +0000
Manifest next update: Thu 30 Jul 2026 01:30:54 +0000
Files and hashes: 1: JMi7-TDNLRI5mr35ycqxSxzXn2s.crl (hash: bp+XpuMSd7FODICfqq0qYFO0lQq2JbkMPTYByKuNrUQ=)
2: D0BE1D2AE0E111ECBFF27B44C4F9AE02.roa (hash: Zqbu2gM/p3JYhF6RtHC7pKoD7WRxqkmXieIo4G2MPsk=)
3: D1424FC8E0E111ECBFF27B44C4F9AE02.roa (hash: VpW/GGNQZtOaPEiTSAjONhHFcZtykmd+bhy/dKuCDgU=)
4: 28A46886845B11EFA46A8F64C4F9AE02.roa (hash: to9oWLtUCPR2IV81QwsKxDWKhq1Sm4j3pB/lwtY1Upg=)
5: 907FFB3C5C8511EDA172EE5CC4F9AE02.roa (hash: dm8mDFnd4sCdbaaWXZW8U1YjOybI/gS2GoTG/04b7RU=)
6: CF96FC32E0E111ECBFF27B44C4F9AE02.roa (hash: /6u2hpGyEghKewxxLTUeu3WPPeW2saAns4fvfdrjrvM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.crl
rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:30:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1039 (0x40f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A713, serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B
Validity
Not Before: Jul 23 01:30:54 2026 GMT
Not After : Jul 30 01:30:54 2026 GMT
Subject: CN=6a616ece-c428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:dc:aa:e0:70:a8:ae:0b:f7:23:f3:22:a5:09:
30:f7:77:0c:4e:bc:17:e8:8d:4f:34:8a:62:cf:b8:
fe:76:43:5e:5d:ae:1c:b1:29:18:cc:42:f3:f1:49:
f2:ba:c7:6d:80:ad:f0:67:ec:03:69:2b:4b:72:aa:
0a:d5:70:86:a3:2f:b5:bc:79:91:39:85:e9:4b:8b:
0a:a4:b9:65:01:ff:67:47:f6:55:be:2d:d4:4d:d9:
38:46:b8:c4:de:0a:b2:d5:ab:f3:57:54:81:67:0a:
e6:79:7f:da:1d:8b:cb:49:33:f7:3b:7b:85:fc:46:
7e:a0:7d:54:ad:eb:76:78:8d:a1:f9:3e:f5:a9:34:
55:71:ac:fa:6f:69:d1:ee:d0:1d:f0:c9:b5:a2:85:
94:ed:e0:97:7b:f1:9f:c6:38:0f:df:4e:8c:6b:78:
71:89:cc:86:14:b8:10:55:53:dc:68:01:16:7c:de:
3f:3a:d4:e4:84:74:38:42:81:fd:7e:39:a5:a7:07:
16:26:8f:57:c3:d0:12:74:88:fd:ab:03:6d:ae:2f:
a0:87:f3:16:eb:5f:4c:e4:97:21:fb:36:64:db:98:
2f:c5:e6:c6:f6:61:8e:7f:4b:2f:24:33:33:df:cf:
91:58:52:68:99:ca:98:1b:83:02:90:2c:7d:3f:3c:
46:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:56:6D:6E:21:FE:45:CB:C0:77:FB:13:D0:DD:3F:8A:3E:5D:B7:22
X509v3 Authority Key Identifier:
keyid:24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:d7:83:7d:d1:08:ed:34:11:8d:9c:70:c8:ab:a6:58:49:e3:
0f:97:1d:85:0a:64:81:4f:6a:51:c1:d9:c9:28:24:d2:b8:46:
e1:c9:2b:43:50:22:12:f5:b9:4a:dd:bd:9f:1e:21:f1:b0:8a:
83:b3:d7:2e:e7:c1:6b:43:9c:ac:46:70:41:e1:54:ce:bf:ec:
8a:53:c3:8f:07:af:43:35:2b:08:a1:b9:37:6b:09:2e:9f:73:
cd:51:dd:a9:dc:9d:27:8e:ed:a2:78:f5:8a:b8:28:fb:0a:f5:
45:94:08:14:7c:b8:0e:61:48:d4:46:5f:fd:86:22:9b:7b:ee:
21:0a:e5:dc:62:4e:16:8c:5a:81:fb:20:38:7d:e1:37:29:d7:
58:64:0a:ab:bb:79:87:7b:23:5a:c1:9c:76:61:a4:2f:45:a4:
18:bd:a7:24:3b:34:2d:73:3f:c4:be:01:cc:3d:69:a4:87:37:
3e:34:0c:3f:eb:6e:b3:28:94:fd:21:3e:29:c0:a5:82:0b:64:
36:54:0c:bf:f2:59:c5:f3:de:92:61:00:5d:8b:b3:17:23:91:
00:7f:17:09:f9:9a:aa:a6:81:3b:ee:eb:86:15:a7:70:77:0d:
e3:98:53:e3:f9:60:7a:7c:23:29:17:a5:87:8d:0a:29:5a:c8:
83:c4:44:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:41:35 2026 by rpki-client