
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft
File: 2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft (raw, json)
Hash identifier: Ypyfkp00zXbj/C+38lcQ6Z4SLlhikYodpWQHP9cIZs4=
Subject key identifier: 0D:26:15:6B:FA:00:34:99:9B:F3:A7:AA:A0:4F:FE:C3:D2:98:E7:66
Authority key identifier: D8:9C:FF:6D:7D:95:51:AE:70:4D:93:E9:75:53:61:6C:8D:B1:3F:5E
Certificate issuer: /CN=A919C19A/serialNumber=D89CFF6D7D9551AE704D93E97553616C8DB13F5E
Certificate serial: 0554
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft
Manifest number: 053C
Signing time: Thu 23 Jul 2026 00:18:33 +0000
Manifest this update: Thu 23 Jul 2026 00:18:32 +0000
Manifest next update: Thu 30 Jul 2026 00:18:32 +0000
Files and hashes: 1: 2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl (hash: WOJFZyyjy+wT1VmYWeq1nA8UzP4QBN8G9RH9k+yQ6fA=)
2: F943257E12F511EDA9E7C939C4F9AE02.roa (hash: /qXHBT4MA1qmjnYwgB6pugXd54FZZQ+3x08eX/UUmSg=)
3: 5542C1D66D7E11F1B74F03108747A888.roa (hash: GK+s6oT3MEUn7idrDMZYD/2eUrDgfq7a0JF4Bt8bdJM=)
4: D9A7B280C4FA11EEA3AF2932C4F9AE02.roa (hash: gyHSwtQl6vEkaJUZPDO/MMRfEGWi04eS/Wu0admRoDM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl
rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:18:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1364 (0x554)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C19A, serialNumber=D89CFF6D7D9551AE704D93E97553616C8DB13F5E
Validity
Not Before: Jul 23 00:18:32 2026 GMT
Not After : Jul 30 00:18:32 2026 GMT
Subject: CN=6a615dd8-2a53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:49:21:10:43:e9:e7:99:b7:0e:82:04:94:12:
82:07:1c:37:97:44:25:65:8e:5e:f8:34:53:42:2d:
88:45:d0:c2:4a:88:b1:55:1c:0b:41:5b:04:9c:0d:
75:5d:97:5c:19:9c:6c:4b:e3:53:a9:58:9d:31:e1:
70:15:04:1d:c8:ae:24:2d:5a:0a:db:bb:17:93:18:
ba:44:f7:79:47:89:6b:f5:73:5b:44:89:ab:f1:ce:
05:b1:1a:3f:9d:1b:9b:cb:6e:1a:f0:83:0f:bb:0e:
25:21:62:30:d1:40:32:3c:af:fc:9b:fa:3e:30:3f:
4b:5c:e6:7c:4c:7f:72:a8:ab:bf:f9:6c:f0:70:84:
8d:89:c7:7d:7f:f3:b5:b0:77:f7:e5:d0:2f:a7:7b:
ad:66:91:76:98:4c:e2:3c:56:e3:73:a1:04:ba:51:
69:c8:87:28:e7:48:c2:cf:2a:3c:54:65:45:41:bd:
0c:a3:25:0c:c7:55:3c:25:a4:05:68:00:aa:a7:d2:
3b:2f:bb:7e:7a:94:cd:86:fd:a5:c8:0e:0f:d2:e3:
ba:df:2f:4a:01:e6:dd:0b:24:55:f4:4b:fe:9b:b8:
e5:9c:5d:6c:f6:58:fe:51:4b:b5:9f:f9:7f:e7:26:
b5:66:cc:8d:ac:05:21:bd:6c:33:23:fe:6c:ac:66:
e8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:26:15:6B:FA:00:34:99:9B:F3:A7:AA:A0:4F:FE:C3:D2:98:E7:66
X509v3 Authority Key Identifier:
keyid:D8:9C:FF:6D:7D:95:51:AE:70:4D:93:E9:75:53:61:6C:8D:B1:3F:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:56:60:6b:48:c3:03:62:6c:a6:d2:c3:3a:99:cd:0d:de:ba:
d2:53:30:d2:0f:35:ca:21:8f:f9:1e:d6:53:e7:84:17:f6:c1:
92:16:49:29:ca:0b:96:27:4b:65:88:0c:18:07:ad:57:a3:19:
8f:bf:f2:c9:27:5d:9a:0f:49:32:d7:68:2c:7e:2d:d1:51:d6:
db:92:b8:ea:3d:e3:f3:e2:b1:7a:b8:b7:7b:0d:0f:d2:fe:45:
c1:d8:01:9a:8b:6b:4b:1b:3c:de:fc:9a:03:85:7f:12:5a:c8:
dd:70:fe:e4:18:73:01:ff:b2:f2:67:e8:60:4c:2f:03:a9:c9:
16:a9:97:f0:06:2b:99:5a:5c:be:58:9c:65:35:ef:1d:05:e0:
40:22:da:e0:0b:3b:5a:52:b1:a4:00:35:6b:ca:3b:96:b1:8e:
04:28:2e:c8:b4:03:0c:7a:84:c5:2b:fe:d8:1c:fa:cd:6e:5c:
44:22:d2:3b:0c:21:0e:9a:d4:10:b9:50:14:aa:f7:67:b5:52:
76:77:02:4b:70:63:83:ca:80:f9:5e:10:3a:cb:d0:bd:9f:74:
2f:a0:f7:f8:23:f7:2c:71:2c:50:25:24:ee:8e:2a:fb:6e:de:
0f:9e:11:01:5e:32:01:10:50:8b:51:49:0d:a5:75:74:0a:19:
9f:55:e4:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:30:46 2026 by rpki-client