
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft
File: JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft (raw, json)
Hash identifier: MDn7o07b6917F209NIy1Cj239BymWdZE5K3+ktlnloY=
Subject key identifier: 4F:02:96:57:A1:AB:61:05:81:8D:04:79:49:84:EF:97:32:49:A0:77
Authority key identifier: 25:09:90:46:EB:59:D6:45:D4:19:A4:28:FC:70:1A:57:35:3F:BF:2C
Certificate issuer: /CN=A919EAAD/serialNumber=25099046EB59D645D419A428FC701A57353FBF2C
Certificate serial: 0D04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQmQRutZ1kXUGaQo_HAaVzU_vyw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft
Manifest number: 0CF2
Signing time: Tue 12 May 2026 18:23:39 +0000
Manifest this update: Tue 12 May 2026 18:23:38 +0000
Manifest next update: Tue 19 May 2026 18:23:38 +0000
Files and hashes: 1: JQmQRutZ1kXUGaQo_HAaVzU_vyw.crl (hash: ozk/vK94NuGGZnJISw9ri47v7rUNNC+K6u4yLBuYJGA=)
2: 956DEFE80CDB11EAB14B9162C4F9AE02.roa (hash: 3M325K9PcHmy3y6ghRr+Gv64zJGXAL4b/FNW6UDE+Hg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.crl
rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQmQRutZ1kXUGaQo_HAaVzU_vyw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:23:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3332 (0xd04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EAAD, serialNumber=25099046EB59D645D419A428FC701A57353FBF2C
Validity
Not Before: May 12 18:23:38 2026 GMT
Not After : May 19 18:23:38 2026 GMT
Subject: CN=6a03702b-d932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2a:93:3f:79:4e:bf:85:ce:33:78:2d:03:2b:
a0:73:8d:f3:83:4f:8d:bb:87:e2:2a:c2:8b:cb:00:
39:bf:aa:81:41:aa:d3:3f:d7:19:3c:c7:6b:29:8e:
fb:6b:c1:07:b0:f8:3b:7a:45:ff:05:9b:fd:ed:43:
13:e5:0a:b5:2c:b3:51:39:20:d0:46:aa:3f:a5:3d:
c7:e1:cf:88:54:46:cb:0e:f7:46:cd:20:70:c9:1b:
a5:f6:3e:8e:42:78:e8:0a:95:dd:65:e3:9a:3e:06:
48:60:5a:e1:bd:53:4c:4f:54:fc:1f:a7:9f:76:8e:
63:c4:68:cf:58:b4:c8:d2:86:97:17:67:d0:1a:4c:
f3:bd:4c:f7:43:fa:09:8f:1f:36:41:9b:2c:50:ba:
c2:22:31:17:05:8a:e0:df:c5:86:b0:ac:20:90:6c:
96:96:5f:a1:bb:d2:e3:37:f4:39:2f:65:2f:7a:36:
c5:2b:1b:5b:58:e9:97:b2:e9:d8:55:3f:d0:9d:cc:
4d:70:91:cd:5b:ea:66:08:6a:bd:90:ab:34:46:b7:
a7:ca:db:12:e9:07:b2:5d:c3:01:61:99:7d:92:f8:
51:fa:47:b6:d9:bf:ea:05:f9:21:dd:d8:f7:aa:bd:
8b:63:72:9c:bf:ea:da:dd:3b:48:2e:12:12:bc:3e:
2c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:02:96:57:A1:AB:61:05:81:8D:04:79:49:84:EF:97:32:49:A0:77
X509v3 Authority Key Identifier:
keyid:25:09:90:46:EB:59:D6:45:D4:19:A4:28:FC:70:1A:57:35:3F:BF:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQmQRutZ1kXUGaQo_HAaVzU_vyw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:1a:93:2a:af:4c:80:cf:2a:3a:56:2c:8d:0f:0a:76:82:8d:
af:10:71:88:d6:c4:be:13:36:ba:d3:e2:e6:0a:b2:9f:fe:33:
5c:c1:b1:54:8d:fe:0d:9a:b3:7e:af:ec:a6:1d:dc:73:90:75:
fc:fc:df:41:84:5a:b7:95:27:d2:38:4d:77:a8:62:64:3a:07:
d5:18:bc:cf:e9:f1:a9:42:e6:6e:32:e0:f1:1e:28:ad:9c:4d:
92:96:de:a1:c3:34:91:97:76:1d:3c:97:ad:9b:00:dc:28:88:
9c:b7:81:05:68:e7:aa:45:7e:21:cc:15:d3:bb:79:93:84:87:
88:8e:eb:27:88:74:44:3b:e0:9c:fc:36:cc:8b:8d:d8:8b:f5:
3d:34:f9:1d:56:44:a4:8d:17:3e:97:8d:48:c3:63:3b:28:28:
85:16:5c:ea:a3:bc:0f:29:25:6b:22:85:ed:7f:be:cf:6c:0b:
1e:d8:53:3d:59:29:b4:35:ba:30:ef:aa:42:d5:95:07:ec:71:
b8:84:a8:dc:9a:76:a6:49:89:2c:42:07:77:a0:cc:2d:4b:70:
52:37:59:71:c9:08:f7:f8:34:0c:dd:f2:c9:73:3b:d4:4f:f8:
36:7d:60:0c:71:71:d1:98:33:d1:35:30:cf:7f:60:4a:bf:0c:
d8:f9:1a:34
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUVBQUQxMTAvBgNVBAUTKDI1MDk5MDQ2RUI1OUQ2NDVENDE5QTQyOEZDNzAxQTU3
MzUzRkJGMkMwHhcNMjYwNTEyMTgyMzM4WhcNMjYwNTE5MTgyMzM4WjAYMRYwFAYD
VQQDEw02YTAzNzAyYi1kOTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuSqTP3lOv4XOM3gtAyugc43zg0+Nu4fiKsKLywA5v6qBQarTP9cZPMdrKY77
a8EHsPg7ekX/BZv97UMT5Qq1LLNROSDQRqo/pT3H4c+IVEbLDvdGzSBwyRul9j6O
QnjoCpXdZeOaPgZIYFrhvVNMT1T8H6efdo5jxGjPWLTI0oaXF2fQGkzzvUz3Q/oJ
jx82QZssULrCIjEXBYrg38WGsKwgkGyWll+hu9LjN/Q5L2UvejbFKxtbWOmXsunY
VT/QncxNcJHNW+pmCGq9kKs0RrenytsS6QeyXcMBYZl9kvhR+ke22b/qBfkh3dj3
qr2LY3Kcv+ra3TtILhISvD4sfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE8Clleh
q2EFgY0EeUmE75cySaB3MB8GA1UdIwQYMBaAFCUJkEbrWdZF1BmkKPxwGlc1P78s
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUFBRC83N0Q5NTBGMjA5
RDUxMUVBQjc2QzczMTdDNEY5QUUwMi9KUW1RUnV0WjFrWFVHYVFvX0hBYVZ6VV92
eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pRbVFSdXRaMWtYVUdhUW9fSEFhVnpVX3Z5dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RUFBRC83N0Q5NTBGMjA5RDUxMUVBQjc2QzczMTdDNEY5QUUwMi9KUW1RUnV0WjFr
WFVHYVFvX0hBYVZ6VV92eXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhRqTKq9MgM8qOlYsjQ8KdoKNrxBxiNbEvhM2utPi5gqyn/4zXMGxVI3+DZqz
fq/sph3cc5B1/PzfQYRat5Un0jhNd6hiZDoH1Ri8z+nxqULmbjLg8R4orZxNkpbe
ocM0kZd2HTyXrZsA3CiInLeBBWjnqkV+IcwV07t5k4SHiI7rJ4h0RDvgnPw2zIuN
2Iv1PTT5HVZEpI0XPpeNSMNjOygohRZc6qO8DyklayKF7X++z2wLHthTPVkptDW6
MO+qQtWVB+xxuISo3Jp2pkmJLEIHd6DMLUtwUjdZcckI9/g0DN3yyXM71E/4Nn1g
DHFx0Zgz0TUwz39gSr8M2PkaNA==
-----END CERTIFICATE-----
Generated at Wed May 13 07:06:35 2026 by rpki-client