
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft
File: JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft (raw, json)
Hash identifier: naQEzwwTOx8aXaJmhK7IsGqJCd/gQxfz2OMYPWW/uJU=
Subject key identifier: CA:24:3F:E3:38:EC:9B:1D:42:1E:24:CB:50:D9:EE:55:FB:E8:94:F8
Authority key identifier: 25:09:90:46:EB:59:D6:45:D4:19:A4:28:FC:70:1A:57:35:3F:BF:2C
Certificate issuer: /CN=A919EAAD/serialNumber=25099046EB59D645D419A428FC701A57353FBF2C
Certificate serial: 0CF1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQmQRutZ1kXUGaQo_HAaVzU_vyw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft
Manifest number: 0CDF
Signing time: Sat 04 Apr 2026 18:12:58 +0000
Manifest this update: Sat 04 Apr 2026 18:12:57 +0000
Manifest next update: Sat 11 Apr 2026 18:12:57 +0000
Files and hashes: 1: JQmQRutZ1kXUGaQo_HAaVzU_vyw.crl (hash: CIRrmyuxlbpTV3AK+w4tTcQAFY2TFChlVnCCF1PB5Yw=)
2: 956DEFE80CDB11EAB14B9162C4F9AE02.roa (hash: 3M325K9PcHmy3y6ghRr+Gv64zJGXAL4b/FNW6UDE+Hg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.crl
rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQmQRutZ1kXUGaQo_HAaVzU_vyw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 18:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3313 (0xcf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EAAD, serialNumber=25099046EB59D645D419A428FC701A57353FBF2C
Validity
Not Before: Apr 4 18:12:57 2026 GMT
Not After : Apr 11 18:12:57 2026 GMT
Subject: CN=69d154a9-0923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:43:13:c9:32:a4:3e:37:0b:7d:04:ab:9f:24:
fc:a1:f3:e7:bd:e9:a3:bb:a9:2d:30:42:f4:ee:ef:
b3:74:b7:ec:c6:b7:6c:c7:fe:07:21:9e:09:7e:8a:
f5:ec:2b:ce:30:3b:41:0b:02:7c:25:ba:5f:33:c0:
d3:fb:ba:df:2b:dd:19:1c:ff:d0:b9:17:b4:5c:ea:
38:db:ae:14:47:1b:33:65:be:bf:84:44:ac:55:57:
94:51:37:a5:eb:de:4a:86:65:d3:0d:49:af:a8:0e:
88:43:ac:cc:6c:46:17:bf:0e:2b:86:05:d6:17:82:
d4:95:00:e4:ce:74:bc:6c:2c:38:7c:75:bb:68:45:
52:8d:dc:63:b7:32:0f:6d:11:e8:05:9a:8d:7c:de:
b2:51:c7:81:c2:db:f9:2b:11:4f:20:66:a9:07:e6:
35:ba:5b:1b:6c:0a:14:a1:b2:61:1e:28:68:b1:8b:
3e:ca:54:1a:01:52:da:e7:81:ab:2e:24:75:28:b4:
da:0f:a0:73:c9:e1:ab:4e:ec:5f:d9:b1:25:6d:20:
76:28:57:9c:16:c1:aa:10:24:e5:55:a7:d2:85:26:
29:25:43:f5:4a:33:c4:bd:40:2d:43:c3:1f:d9:e9:
a8:2a:88:55:97:5f:df:68:e9:e1:cd:fa:c5:58:b0:
c3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:24:3F:E3:38:EC:9B:1D:42:1E:24:CB:50:D9:EE:55:FB:E8:94:F8
X509v3 Authority Key Identifier:
keyid:25:09:90:46:EB:59:D6:45:D4:19:A4:28:FC:70:1A:57:35:3F:BF:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQmQRutZ1kXUGaQo_HAaVzU_vyw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:cb:32:e5:df:7d:c1:b3:c6:51:59:2d:ff:ab:48:9b:12:28:
5d:27:97:5e:14:37:57:02:fe:a2:21:18:b3:ef:d9:25:7b:75:
d5:5f:7a:d9:2a:ad:32:56:dd:c7:d8:6b:93:3a:4d:f8:2d:b4:
91:d4:a4:76:b1:82:e9:aa:81:9f:d5:9b:1f:b0:45:7e:42:0b:
e3:fd:6d:f0:7b:7c:16:34:bb:cc:1b:e0:59:70:6a:50:ca:62:
eb:0e:35:84:73:8c:f7:41:ab:43:ed:5c:2b:13:35:04:b6:d7:
7c:83:99:2d:c7:dd:6e:f2:c2:09:f4:d2:bb:0f:0f:ad:f1:03:
a2:82:0c:f2:16:0b:16:4c:68:a2:39:ac:50:d7:84:6c:7d:a7:
50:4b:d8:7c:3c:ff:e9:08:14:34:95:2d:47:4f:01:ba:cf:69:
79:c6:77:51:98:d5:6a:38:1d:80:db:f1:4c:db:28:bf:da:10:
cf:ae:43:89:40:2e:5b:6f:09:14:aa:9f:26:3a:c4:9d:ad:c0:
d0:c1:fc:88:35:07:33:31:56:c9:f9:29:86:db:a0:8f:d0:64:
26:c9:d5:c9:0e:79:e3:31:ba:74:20:e0:3f:f9:72:ef:ff:9c:
b6:f4:c6:9a:de:99:aa:6e:ac:57:b7:98:21:03:34:d6:b1:24:
0f:e2:c8:93
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUVBQUQxMTAvBgNVBAUTKDI1MDk5MDQ2RUI1OUQ2NDVENDE5QTQyOEZDNzAxQTU3
MzUzRkJGMkMwHhcNMjYwNDA0MTgxMjU3WhcNMjYwNDExMTgxMjU3WjAYMRYwFAYD
VQQDEw02OWQxNTRhOS0wOTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqUMTyTKkPjcLfQSrnyT8ofPnvemju6ktMEL07u+zdLfsxrdsx/4HIZ4Jfor1
7CvOMDtBCwJ8JbpfM8DT+7rfK90ZHP/QuRe0XOo4264URxszZb6/hESsVVeUUTel
695KhmXTDUmvqA6IQ6zMbEYXvw4rhgXWF4LUlQDkznS8bCw4fHW7aEVSjdxjtzIP
bRHoBZqNfN6yUceBwtv5KxFPIGapB+Y1ulsbbAoUobJhHihosYs+ylQaAVLa54Gr
LiR1KLTaD6BzyeGrTuxf2bElbSB2KFecFsGqECTlVafShSYpJUP1SjPEvUAtQ8Mf
2emoKohVl1/faOnhzfrFWLDDaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMokP+M4
7JsdQh4ky1DZ7lX76JT4MB8GA1UdIwQYMBaAFCUJkEbrWdZF1BmkKPxwGlc1P78s
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUFBRC83N0Q5NTBGMjA5
RDUxMUVBQjc2QzczMTdDNEY5QUUwMi9KUW1RUnV0WjFrWFVHYVFvX0hBYVZ6VV92
eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pRbVFSdXRaMWtYVUdhUW9fSEFhVnpVX3Z5dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RUFBRC83N0Q5NTBGMjA5RDUxMUVBQjc2QzczMTdDNEY5QUUwMi9KUW1RUnV0WjFr
WFVHYVFvX0hBYVZ6VV92eXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdssy5d99wbPGUVkt/6tImxIoXSeXXhQ3VwL+oiEYs+/ZJXt11V962SqtMlbd
x9hrkzpN+C20kdSkdrGC6aqBn9WbH7BFfkIL4/1t8Ht8FjS7zBvgWXBqUMpi6w41
hHOM90GrQ+1cKxM1BLbXfIOZLcfdbvLCCfTSuw8PrfEDooIM8hYLFkxoojmsUNeE
bH2nUEvYfDz/6QgUNJUtR08Bus9pecZ3UZjVajgdgNvxTNsov9oQz65DiUAuW28J
FKqfJjrEna3A0MH8iDUHMzFWyfkphtugj9BkJsnVyQ554zG6dCDgP/ly7/+ctvTG
mt6Zqm6sV7eYIQM01rEkD+LIkw==
-----END CERTIFICATE-----
Generated at Sun Apr 5 19:43:03 2026 by rpki-client