
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft
File: JYXaC5gKR_66DiNSBd7uQC8gs8s.mft (raw, json)
Hash identifier: +ODVxKS6434yojTO678vHSOepBTvZ8xc1GGpVuxFT6U=
Subject key identifier: 94:7C:28:EC:44:E2:2C:02:D5:D4:DE:DB:58:AA:C1:5E:08:68:35:8F
Authority key identifier: 25:85:DA:0B:98:0A:47:FE:BA:0E:23:52:05:DE:EE:40:2F:20:B3:CB
Certificate issuer: /CN=A919B63C/serialNumber=2585DA0B980A47FEBA0E235205DEEE402F20B3CB
Certificate serial: 35D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft
Manifest number: 359C
Signing time: Thu 24 Sep 2026 14:52:05 +0000
Manifest this update: Thu 24 Sep 2026 14:52:05 +0000
Manifest next update: Thu 01 Oct 2026 14:52:05 +0000
Files and hashes: 1: JYXaC5gKR_66DiNSBd7uQC8gs8s.crl (hash: Zsvs0T1GhyygyPS3ivik792279GM2MzGZfCjGVF/1DI=)
2: 547D2C14BBDF11ECA1F12A0DC4F9AE02.roa (hash: rKu59lJ2Ad0vE4AINuK5lrUohwoMykH6xrWZtccAakU=)
3: 9343CE6EE07211E7995BD42EC4F9AE02.roa (hash: WWsnDwU0xQ2vlm4IMeT2SoYmxtKS066yOj3K2RIAPYk=)
4: AE0AC88EBBF511ECAA816D52C4F9AE02.roa (hash: WAv6Nn/GIxUpCLzSFAH6SqbyTP0FD0xQyg/7mXGCqGU=)
5: B054EA98BBF511ECAA816D52C4F9AE02.roa (hash: 6si+xZ9ho8pu3knq2N9OMLHtSHx+WsCpgykH6axg9jA=)
6: AF00AECABBF511ECAA816D52C4F9AE02.roa (hash: qG2ZmMQs8OIefJ/BaN9tLL8wi6DKj/5LcmJxiyNB09A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.crl
rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 14:52:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13780 (0x35d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B63C, serialNumber=2585DA0B980A47FEBA0E235205DEEE402F20B3CB
Validity
Not Before: Sep 24 14:52:05 2026 GMT
Not After : Oct 1 14:52:05 2026 GMT
Subject: CN=6ab53915-a3d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:8a:b0:85:ed:7f:1c:bc:26:d6:2a:5f:aa:e3:
bd:85:62:ca:97:35:f6:f4:56:48:39:ca:22:0b:df:
88:de:ac:60:68:45:ef:7c:9f:8a:22:f1:f9:5f:02:
c4:42:91:19:e5:d9:5f:18:5d:58:b9:f7:91:5e:e7:
94:42:6b:9c:29:84:90:f0:bf:63:1e:bc:d0:a1:31:
3f:d4:e4:a9:30:f8:90:21:9e:fb:c7:cd:d6:55:7e:
0a:91:05:d7:05:31:5d:25:8f:16:77:8d:63:db:a6:
86:5a:d0:fd:89:47:09:b6:ae:d1:05:a2:50:05:ac:
95:42:cf:45:2b:85:80:13:2a:93:55:95:9e:29:9c:
15:d4:6c:f1:53:19:6d:80:6c:f9:9d:2c:1d:04:77:
f8:46:18:1e:63:d5:00:7b:32:a1:aa:26:e1:29:2e:
57:b5:c6:56:5d:43:fc:a1:53:2b:bf:9f:ca:23:c7:
f0:6b:51:0d:fd:f7:b3:5a:ab:37:95:19:6c:20:cb:
b6:da:6a:03:c2:62:c1:d8:61:56:37:8c:8e:09:c3:
28:c2:45:38:c2:cf:f7:ab:0c:fd:8d:d9:62:9f:10:
ed:97:a5:d0:1c:5e:78:d6:e7:a8:bd:dd:04:c2:e0:
30:d2:c3:f1:b1:f7:ee:12:ad:c4:74:1c:b1:83:f7:
6d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:7C:28:EC:44:E2:2C:02:D5:D4:DE:DB:58:AA:C1:5E:08:68:35:8F
X509v3 Authority Key Identifier:
keyid:25:85:DA:0B:98:0A:47:FE:BA:0E:23:52:05:DE:EE:40:2F:20:B3:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:71:8e:e7:12:9e:72:db:90:d2:f5:f9:ea:f6:0c:a7:c9:ec:
8d:a5:eb:27:ce:fe:3c:6b:77:16:99:fc:40:02:ae:9b:40:c1:
60:20:d9:f2:00:5f:3b:f4:84:0d:7a:ed:25:3f:16:04:e1:ea:
e9:66:a9:2c:bb:d9:24:62:de:e8:8a:d2:15:3d:ab:fc:e0:8b:
85:69:6f:21:88:41:68:b5:99:6f:2e:b7:8d:62:c9:a3:77:e5:
57:b0:15:87:31:6a:f9:9b:24:e8:f8:15:a9:ff:a6:79:2e:ed:
5b:e6:36:87:75:27:c1:82:71:a1:ec:b3:3e:b5:4e:69:d8:54:
d1:cb:3d:f1:d6:ba:ba:e9:80:9f:ce:db:2e:f7:39:98:7c:28:
59:5c:1f:4c:7b:4e:f0:10:fc:36:76:f6:5a:bc:56:b0:e7:34:
6f:58:0b:13:63:a0:d1:5c:f4:c7:55:bd:be:32:4f:18:cc:89:
35:79:54:a5:d2:bc:5d:8e:f5:0b:36:6d:b9:62:3e:60:a8:9b:
ef:42:a3:a9:2b:b4:ec:b9:f2:50:06:1a:48:5a:6b:8f:c7:ab:
23:0e:1f:49:e1:ed:05:72:13:d8:9a:5a:94:7e:94:05:41:c8:
5b:7c:78:c1:74:48:25:b3:d6:2c:d0:aa:e1:92:ce:05:76:93:
a9:a8:63:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:21:51 2026 by rpki-client