
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft
File: JYXaC5gKR_66DiNSBd7uQC8gs8s.mft (raw, json)
Hash identifier: AS7EnHzn7/2Zykze30NGSvLWyLjHFdGihf8k5CIhoKQ=
Subject key identifier: 03:CF:E5:CC:2E:5E:B3:92:45:BA:B4:87:03:09:33:3C:55:55:9C:D7
Authority key identifier: 25:85:DA:0B:98:0A:47:FE:BA:0E:23:52:05:DE:EE:40:2F:20:B3:CB
Certificate issuer: /CN=A919B63C/serialNumber=2585DA0B980A47FEBA0E235205DEEE402F20B3CB
Certificate serial: 35B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft
Manifest number: 357B
Signing time: Wed 22 Jul 2026 14:55:27 +0000
Manifest this update: Wed 22 Jul 2026 14:55:27 +0000
Manifest next update: Wed 29 Jul 2026 14:55:27 +0000
Files and hashes: 1: JYXaC5gKR_66DiNSBd7uQC8gs8s.crl (hash: 2RYva2Gm/KiGqHI8Tuf5rsvXa+/r1aIKTh+LEg+GOcM=)
2: 547D2C14BBDF11ECA1F12A0DC4F9AE02.roa (hash: rKu59lJ2Ad0vE4AINuK5lrUohwoMykH6xrWZtccAakU=)
3: B054EA98BBF511ECAA816D52C4F9AE02.roa (hash: 6si+xZ9ho8pu3knq2N9OMLHtSHx+WsCpgykH6axg9jA=)
4: 9343CE6EE07211E7995BD42EC4F9AE02.roa (hash: WWsnDwU0xQ2vlm4IMeT2SoYmxtKS066yOj3K2RIAPYk=)
5: AE0AC88EBBF511ECAA816D52C4F9AE02.roa (hash: WAv6Nn/GIxUpCLzSFAH6SqbyTP0FD0xQyg/7mXGCqGU=)
6: AF00AECABBF511ECAA816D52C4F9AE02.roa (hash: qG2ZmMQs8OIefJ/BaN9tLL8wi6DKj/5LcmJxiyNB09A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.crl
rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 14:55:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13747 (0x35b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B63C, serialNumber=2585DA0B980A47FEBA0E235205DEEE402F20B3CB
Validity
Not Before: Jul 22 14:55:27 2026 GMT
Not After : Jul 29 14:55:27 2026 GMT
Subject: CN=6a60d9df-4434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:95:4b:b5:3d:ea:19:49:58:72:6c:16:8e:d9:
b7:07:22:22:06:eb:5b:41:d8:60:af:5f:49:30:f7:
82:af:50:b2:f5:3b:0a:01:ec:78:fa:5f:e2:70:4b:
ff:a8:a1:7d:77:35:7b:2d:3c:8b:cc:ef:56:82:8a:
9b:fc:fc:49:33:01:9c:b4:a9:36:3f:27:d9:f8:61:
78:5c:5e:d0:02:3e:bb:e4:3a:b8:7c:6e:75:32:00:
14:97:54:75:0c:1a:7f:36:92:ee:f6:77:c0:e6:d5:
18:d8:7a:1d:09:81:d8:e8:1e:e0:6e:a9:b7:e4:7f:
0b:e7:1d:83:f1:74:f6:95:49:47:e5:07:06:6f:58:
05:c5:89:3b:e9:b7:24:df:28:73:50:cd:e4:30:f9:
d3:f3:ae:14:d5:79:e6:e5:11:d7:9e:17:ad:ee:08:
0d:91:9f:d4:ae:d4:2e:97:96:2d:97:88:18:0f:25:
4b:a0:fe:8d:24:06:80:03:65:41:97:1f:03:d5:ef:
34:f1:c6:ea:fa:21:6e:32:a7:9d:6d:43:b1:82:d9:
ee:92:05:98:45:d4:8d:df:2a:89:d3:b2:ff:85:f7:
aa:f0:26:56:0f:f0:57:18:a4:12:6d:8f:e8:76:b2:
d5:a5:cd:ad:fc:f4:f0:9b:0c:14:46:26:27:8b:81:
d8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:CF:E5:CC:2E:5E:B3:92:45:BA:B4:87:03:09:33:3C:55:55:9C:D7
X509v3 Authority Key Identifier:
keyid:25:85:DA:0B:98:0A:47:FE:BA:0E:23:52:05:DE:EE:40:2F:20:B3:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:b9:c2:0b:8d:4a:91:6f:ad:43:47:19:34:e4:b0:dd:ce:37:
1d:ad:a4:0b:fd:c5:8c:71:99:6a:44:ef:ae:00:79:0d:ed:fa:
7a:1f:36:db:f6:00:91:7e:8a:a9:e3:ad:71:47:f9:ca:07:79:
1a:51:f3:d7:d4:21:67:c9:b2:49:fe:c5:30:9a:07:b7:d8:5b:
bb:e0:52:38:a4:11:58:66:c0:58:96:8a:ed:8c:42:20:b9:95:
fd:52:5c:59:77:f6:ca:91:b4:a0:8d:6a:97:4d:37:a8:d4:8a:
6d:96:17:8a:9d:72:24:9e:ec:c5:73:df:82:6b:dc:de:5d:c6:
9a:a1:a6:06:dd:c8:fa:d5:52:c7:14:9b:82:bd:f6:03:27:dc:
c1:07:8d:45:9f:77:58:cf:21:08:b1:d4:d0:81:14:05:00:3b:
b4:26:54:8e:28:db:84:92:ac:e9:1c:03:bd:f3:62:ba:32:7f:
94:bf:e4:4e:ba:e1:6f:c5:d9:f5:9e:35:bc:18:97:62:a4:f3:
cb:f7:62:45:b9:bf:de:b2:14:49:08:e7:42:02:21:39:2d:dd:
39:2a:fd:46:74:47:52:22:dd:4e:86:83:5b:4c:86:a2:26:dd:
0d:df:e3:c8:fc:36:a0:38:88:6f:af:80:4a:16:14:0b:87:8f:
3c:f4:9e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:08:34 2026 by rpki-client