
$ rpki-client -vvf rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.mft
File: JSwA6X56eGlZOIzyBKTH5kVYDGg.mft (raw, json)
Hash identifier: JMqvH8XlQ+nIYWoFa8j7b0V0tsS5yvKCr3qy9OJpyZg=
Subject key identifier: F8:00:C4:5A:3F:63:D4:01:BF:D4:1C:34:3A:49:0D:91:8A:1B:5E:7C
Authority key identifier: 25:2C:00:E9:7E:7A:78:69:59:38:8C:F2:04:A4:C7:E6:45:58:0C:68
Certificate issuer: /CN=A919DA26/serialNumber=252C00E97E7A786959388CF204A4C7E645580C68
Certificate serial: 0104
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JSwA6X56eGlZOIzyBKTH5kVYDGg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.mft
Manifest number: 0100
Signing time: Wed 25 Mar 2026 01:39:00 +0000
Manifest this update: Wed 25 Mar 2026 01:39:00 +0000
Manifest next update: Wed 01 Apr 2026 01:39:00 +0000
Files and hashes: 1: JSwA6X56eGlZOIzyBKTH5kVYDGg.crl (hash: SbtgT+XHdHB8NqNSE4ENICY52h0/OC/mD3EBVnSAgxE=)
2: F17996F2B21C11EFBDB2BA25C4F9AE02.roa (hash: VXtDiwiZo4Ue40kQIlfUesjgEwjjrX0+c0GVZ1Q0Ke4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.crl
rsync://rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JSwA6X56eGlZOIzyBKTH5kVYDGg.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:38:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 260 (0x104)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919DA26, serialNumber=252C00E97E7A786959388CF204A4C7E645580C68
Validity
Not Before: Mar 25 01:39:00 2026 GMT
Not After : Apr 1 01:39:00 2026 GMT
Subject: CN=69c33cb4-4938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7a:f6:77:ff:bf:68:8b:84:48:a1:69:6d:06:
33:07:e5:81:06:ef:f1:92:82:a2:a1:6d:87:f2:57:
1b:2a:47:6b:96:45:31:70:d5:0c:36:a3:97:31:1d:
da:89:72:24:58:36:f3:02:08:ea:5e:39:50:38:52:
b4:46:a1:d4:52:2a:bf:c5:38:6b:17:3e:48:51:a2:
50:10:92:b0:c8:f1:f5:c0:13:6b:34:0a:e3:51:d2:
40:08:58:8c:bf:70:6b:10:81:e8:9c:cf:86:37:94:
f0:78:30:39:75:2d:63:0e:24:66:b7:c9:1b:f9:63:
83:53:89:8e:6f:e4:d9:72:fc:2e:af:34:fa:66:a5:
20:40:c6:df:c8:4e:58:e3:57:86:6c:ff:6b:6e:3c:
af:01:95:e2:c0:38:9b:f4:6a:80:d5:bc:2d:f5:d2:
34:f9:e9:4e:e5:5c:d3:ce:fe:0a:58:39:14:3d:6e:
ea:6c:39:ec:d9:05:6c:6d:ab:df:ec:66:e6:ce:3c:
36:f8:20:5b:d1:2b:1e:a4:b5:50:af:29:d0:29:66:
52:be:af:e8:63:87:21:c0:80:34:9b:ca:55:9f:02:
54:93:b6:40:40:6c:e4:2d:1c:a7:7b:df:7b:5d:ea:
72:42:e2:cb:76:90:b0:00:b7:b9:0d:f2:92:1a:3b:
23:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:00:C4:5A:3F:63:D4:01:BF:D4:1C:34:3A:49:0D:91:8A:1B:5E:7C
X509v3 Authority Key Identifier:
keyid:25:2C:00:E9:7E:7A:78:69:59:38:8C:F2:04:A4:C7:E6:45:58:0C:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JSwA6X56eGlZOIzyBKTH5kVYDGg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:82:aa:da:9a:37:e3:07:53:bb:2e:b5:7c:9c:10:e8:dd:47:
22:41:7a:82:5a:92:b2:ef:f5:89:f2:8b:0d:a2:93:41:3c:2c:
03:a2:77:ec:f4:43:79:6f:fb:67:00:c1:bb:24:3f:03:86:3f:
37:16:3d:44:65:5e:f9:57:6f:83:9d:d3:6c:cd:86:6a:5f:48:
e5:47:91:dc:1a:b7:49:09:3c:6d:f0:8a:c2:d8:ec:c1:69:03:
ac:f4:ad:70:b4:ac:d2:79:22:aa:27:46:e1:31:a7:4e:d8:3b:
55:35:0c:71:8b:b2:6b:41:e6:9d:69:e0:65:a3:54:91:26:ed:
fe:51:6c:e2:38:6a:2c:7d:10:b2:8a:05:aa:10:3a:2d:eb:66:
9e:01:23:67:54:8b:87:e3:db:75:e6:72:2a:d6:cd:19:2c:c4:
72:f5:3e:f2:b4:9d:f6:ad:fb:d7:62:80:56:42:47:c8:4a:3b:
04:5b:8b:ea:1b:98:e3:fa:a0:01:35:42:a5:34:82:db:36:1e:
34:f2:40:ee:98:fb:dd:83:5d:d1:55:cb:48:9d:bd:29:8d:8b:
57:ea:96:e4:b8:35:c1:0e:df:a4:21:9b:fa:4b:a3:07:8d:6e:
6a:6d:4d:c2:c8:1c:37:7b:56:80:e5:0d:1a:cd:4a:4e:7d:60:
46:0d:1b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:14:44 2026 by rpki-client