
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft
File: JbCzFZvpDPGiOyUhpSER_wOQXvc.mft (raw, json)
Hash identifier: OwjKAzTgUuHDTkCipr9dRnMjcA2MBwjNVNJ6Z0En1Hw=
Subject key identifier: C9:58:BD:E6:76:5C:C5:C4:8F:5F:DE:74:2E:68:CA:FE:67:C8:18:19
Authority key identifier: 25:B0:B3:15:9B:E9:0C:F1:A2:3B:25:21:A5:21:11:FF:03:90:5E:F7
Certificate issuer: /CN=A919A716/serialNumber=25B0B3159BE90CF1A23B2521A52111FF03905EF7
Certificate serial: F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbCzFZvpDPGiOyUhpSER_wOQXvc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft
Manifest number: F5
Signing time: Thu 23 Jul 2026 08:03:43 +0000
Manifest this update: Thu 23 Jul 2026 08:03:42 +0000
Manifest next update: Thu 30 Jul 2026 08:03:42 +0000
Files and hashes: 1: JbCzFZvpDPGiOyUhpSER_wOQXvc.crl (hash: /ytaz0mz69RuavyHJZUj/WJCr9DZsEvXr5wrjHZx32w=)
2: 3051CA240FBB11F0B9C1D274C4F9AE02.roa (hash: PGIqw8BHbURwduSPg9mp4INfNEkXZEuiYDqUDhxyyK8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.crl
rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbCzFZvpDPGiOyUhpSER_wOQXvc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:03:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 248 (0xf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A716, serialNumber=25B0B3159BE90CF1A23B2521A52111FF03905EF7
Validity
Not Before: Jul 23 08:03:42 2026 GMT
Not After : Jul 30 08:03:42 2026 GMT
Subject: CN=6a61cadf-5e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:72:20:4a:96:8b:30:53:6d:9d:36:26:73:83:
aa:9b:3c:4d:5f:12:37:e4:1c:fe:6a:fd:3e:ac:29:
a7:64:d6:01:3c:bc:b9:1a:83:97:1c:73:85:c8:60:
a7:8c:7c:1b:28:b7:a0:a2:c7:a0:74:10:e1:52:ff:
23:f3:8e:c9:7f:59:86:aa:54:0a:0c:bf:8e:27:f7:
84:7f:3b:c0:b4:77:1a:5f:fd:da:b5:db:ad:14:c9:
db:36:05:1c:2c:86:ec:db:aa:41:1e:94:16:ee:17:
e3:ed:7a:2d:c9:77:38:7c:49:aa:95:65:b8:c9:4e:
11:6a:12:2c:cf:77:c0:14:b9:07:0b:e8:0e:62:cd:
df:72:26:81:7a:a8:91:9a:2b:82:61:61:c5:bc:24:
86:0c:67:8e:28:bf:d8:77:59:30:57:4c:15:ba:d8:
81:e6:28:a9:4e:f1:bc:29:56:af:a6:bc:be:3a:c0:
34:d9:dc:95:78:32:95:aa:81:bf:b9:31:55:ca:89:
5f:ba:e9:e6:27:f5:09:fa:3d:42:1c:78:bf:0b:90:
85:15:ac:d8:b3:37:5e:d1:8f:9d:49:61:23:d1:c4:
db:b4:bd:95:72:eb:21:12:f2:20:b1:6a:ac:52:3d:
5d:84:09:e5:56:22:05:a3:ec:72:4e:98:e3:00:9c:
86:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:58:BD:E6:76:5C:C5:C4:8F:5F:DE:74:2E:68:CA:FE:67:C8:18:19
X509v3 Authority Key Identifier:
keyid:25:B0:B3:15:9B:E9:0C:F1:A2:3B:25:21:A5:21:11:FF:03:90:5E:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbCzFZvpDPGiOyUhpSER_wOQXvc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:76:91:95:06:10:9e:d8:34:0c:71:7d:46:30:ef:80:2f:9a:
8a:bb:d5:ca:b9:83:a9:0f:c0:e0:ed:aa:ff:5a:13:cf:a5:e3:
56:e8:47:81:52:dd:f5:78:51:fe:a3:51:fe:43:b1:c8:20:12:
91:6e:9a:20:d1:8e:17:bb:a5:af:9e:25:d2:87:23:69:4c:ce:
80:fc:2b:2f:45:ac:1a:a4:20:e0:8f:1c:8d:3f:03:bd:af:75:
9d:80:83:06:06:e2:aa:a8:70:3d:11:c8:a1:8f:e4:17:b0:6a:
7a:37:f5:70:d7:ab:3c:34:78:eb:7d:b5:05:af:b3:c2:5f:0d:
63:78:83:ff:d7:6d:be:67:a0:fc:d6:3c:5d:f0:22:54:ab:8b:
ce:4f:e6:6a:07:40:2d:a4:97:ff:f5:97:d5:a4:30:db:5c:70:
4f:d7:5a:2c:69:d1:7e:b7:9b:54:e5:e4:e4:8b:37:6f:74:b5:
31:0a:49:89:0d:5e:1a:d1:87:4b:f2:fb:da:7a:ad:ca:6e:24:
ba:f9:84:4a:09:b5:12:7d:e5:03:2e:98:88:66:f4:23:8f:33:
93:c7:db:da:cf:53:26:d7:b2:58:2f:df:48:78:41:48:59:d8:
2f:1a:17:09:9e:6c:10:19:e2:97:9f:09:45:df:c3:d5:ca:fe:
f2:8b:66:4a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUE3MTYxMTAvBgNVBAUTKDI1QjBCMzE1OUJFOTBDRjFBMjNCMjUyMUE1MjExMUZG
MDM5MDVFRjcwHhcNMjYwNzIzMDgwMzQyWhcNMjYwNzMwMDgwMzQyWjAYMRYwFAYD
VQQDEw02YTYxY2FkZi01ZTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArnIgSpaLMFNtnTYmc4OqmzxNXxI35Bz+av0+rCmnZNYBPLy5GoOXHHOFyGCn
jHwbKLegosegdBDhUv8j847Jf1mGqlQKDL+OJ/eEfzvAtHcaX/3atdutFMnbNgUc
LIbs26pBHpQW7hfj7XotyXc4fEmqlWW4yU4RahIsz3fAFLkHC+gOYs3fciaBeqiR
miuCYWHFvCSGDGeOKL/Yd1kwV0wVutiB5iipTvG8KVavpry+OsA02dyVeDKVqoG/
uTFVyolfuunmJ/UJ+j1CHHi/C5CFFazYszde0Y+dSWEj0cTbtL2VcushEvIgsWqs
Uj1dhAnlViIFo+xyTpjjAJyGWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMlYveZ2
XMXEj1/edC5oyv5nyBgZMB8GA1UdIwQYMBaAFCWwsxWb6QzxojslIaUhEf8DkF73
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTcxNi82MDE5RDNGQzBG
OUIxMUYwQUJDODQwNzRDNEY5QUUwMi9KYkN6Rlp2cERQR2lPeVVocFNFUl93T1FY
dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0piQ3pGWnZwRFBHaU95VWhwU0VSX3dPUVh2Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QTcxNi82MDE5RDNGQzBGOUIxMUYwQUJDODQwNzRDNEY5QUUwMi9KYkN6Rlp2cERQ
R2lPeVVocFNFUl93T1FYdmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABXaRlQYQntg0DHF9RjDvgC+airvVyrmDqQ/A4O2q/1oTz6XjVuhHgVLd9XhR
/qNR/kOxyCASkW6aINGOF7ulr54l0ocjaUzOgPwrL0WsGqQg4I8cjT8Dva91nYCD
BgbiqqhwPRHIoY/kF7Bqejf1cNerPDR46321Ba+zwl8NY3iD/9dtvmeg/NY8XfAi
VKuLzk/magdALaSX//WX1aQw21xwT9daLGnRfrebVOXk5Is3b3S1MQpJiQ1eGtGH
S/L72nqtym4kuvmESgm1En3lAy6YiGb0I48zk8fb2s9TJteyWC/fSHhBSFnYLxoX
CZ5sEBnil58JRd/D1cr+8otmSg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:02:39 2026 by rpki-client