
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft
File: JbCzFZvpDPGiOyUhpSER_wOQXvc.mft (raw, json)
Hash identifier: xLQOgHwGXffo/Z1SwZR5WJswhKc7Zqr8kCRPmhQCkgU=
Subject key identifier: 21:0B:EF:49:1A:01:C0:2C:0E:34:B9:88:12:03:6C:26:9C:7E:81:01
Authority key identifier: 25:B0:B3:15:9B:E9:0C:F1:A2:3B:25:21:A5:21:11:FF:03:90:5E:F7
Certificate issuer: /CN=A919A716/serialNumber=25B0B3159BE90CF1A23B2521A52111FF03905EF7
Certificate serial: D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbCzFZvpDPGiOyUhpSER_wOQXvc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft
Manifest number: D1
Signing time: Mon 11 May 2026 06:53:18 +0000
Manifest this update: Mon 11 May 2026 06:53:17 +0000
Manifest next update: Mon 18 May 2026 06:53:17 +0000
Files and hashes: 1: JbCzFZvpDPGiOyUhpSER_wOQXvc.crl (hash: 2Ezh0iGjClWn1kk4E50QSE1C7m/tZYRKksg3TVJtU3g=)
2: 3051CA240FBB11F0B9C1D274C4F9AE02.roa (hash: PGIqw8BHbURwduSPg9mp4INfNEkXZEuiYDqUDhxyyK8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.crl
rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbCzFZvpDPGiOyUhpSER_wOQXvc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 06:53:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 212 (0xd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A716, serialNumber=25B0B3159BE90CF1A23B2521A52111FF03905EF7
Validity
Not Before: May 11 06:53:17 2026 GMT
Not After : May 18 06:53:17 2026 GMT
Subject: CN=6a017cde-aa82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d0:2c:b3:39:13:3c:d9:be:eb:ae:80:bb:36:
cc:1d:45:92:10:30:e8:ba:87:d9:cf:da:ee:f4:17:
b7:d5:96:40:16:fc:c8:53:85:f8:a9:26:7a:79:dc:
dd:cb:05:b7:a3:fa:8c:12:16:e4:0b:d5:83:4f:a2:
58:f2:fd:2c:10:7f:2e:74:8d:f8:7b:8f:78:69:6d:
2f:b2:9a:10:fa:2b:7c:89:55:91:9c:12:70:93:96:
6a:2d:1d:5f:7a:a6:0e:18:12:fa:d7:62:98:82:e9:
c8:3e:ec:80:bd:85:9c:3a:bf:ac:c1:68:80:f6:8a:
57:7c:96:73:2c:62:82:5a:60:24:44:ee:48:9b:e1:
26:a3:c9:14:e9:29:cd:84:74:ca:33:d7:f6:c7:d2:
d3:fa:da:a8:3d:ec:e8:98:ac:cd:fd:05:96:a8:fb:
11:6b:1b:03:b3:8b:13:be:28:c0:5e:17:90:a7:42:
17:99:89:9a:42:27:b4:59:cd:75:c3:f3:78:2c:ae:
e8:be:be:f9:83:00:e5:9f:47:f6:25:39:4b:f7:be:
96:d3:f0:ed:67:a2:de:b0:5c:64:db:55:32:84:ea:
d2:f3:e7:27:7c:5a:d8:fb:10:8c:26:1e:d6:2c:ce:
43:10:ef:2f:b3:7f:92:b5:bb:e3:41:4e:af:4f:f9:
19:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:0B:EF:49:1A:01:C0:2C:0E:34:B9:88:12:03:6C:26:9C:7E:81:01
X509v3 Authority Key Identifier:
keyid:25:B0:B3:15:9B:E9:0C:F1:A2:3B:25:21:A5:21:11:FF:03:90:5E:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbCzFZvpDPGiOyUhpSER_wOQXvc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:ea:67:a3:8d:f2:74:08:6f:02:40:66:c5:2d:3d:6c:7c:55:
64:61:9d:4f:1f:ee:f5:12:7b:1d:0b:5f:3f:de:07:d1:18:7a:
9f:a8:34:4a:85:47:4c:cb:4c:6c:32:5f:01:21:d6:40:13:ad:
ba:55:99:da:a7:e2:37:68:5e:13:6b:b5:6d:a3:d0:3e:fe:4a:
f5:94:2d:8a:d1:5e:6c:c3:05:6c:15:b2:4f:45:6e:7a:32:ee:
15:0d:35:d4:51:cf:d5:be:39:9c:58:1b:67:6f:cf:65:5a:36:
41:bb:46:e0:2d:38:23:f0:b7:8e:ff:f4:b0:92:c9:91:d8:5c:
04:dd:3a:e0:18:ef:fb:e8:96:d8:22:3b:10:c5:11:07:7e:43:
5f:ea:c4:03:e6:17:d4:b4:24:c4:18:7c:16:ea:3c:d4:88:54:
cf:1e:fc:b3:04:48:a0:c3:d3:d3:11:7f:7e:2e:3d:30:26:43:
5e:17:40:c8:8b:b3:1f:9c:23:52:83:f1:ab:fc:5c:73:4e:ac:
86:cf:12:13:6b:93:de:f7:07:b7:5d:14:18:2c:6e:b8:62:94:
ba:22:eb:2d:71:e9:de:0a:d2:88:b6:bc:9f:53:e5:48:7a:8d:
45:a9:41:13:3b:f5:c9:64:68:7b:56:93:f9:e1:1a:b4:fd:0d:
a5:0c:9e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:24:41 2026 by rpki-client