
$ rpki-client -vvf rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.mft
File: JbYXi6T4b_C18lUXgJvfINlGjmk.mft (raw, json)
Hash identifier: jo/Vk8mthQk7c8MOBlnqJAS0TcS1uZlbJnlihSbXhU0=
Subject key identifier: 6A:86:D8:CE:DF:7C:1E:28:A5:8A:1F:B6:A4:99:83:12:8E:06:DC:8E
Authority key identifier: 25:B6:17:8B:A4:F8:6F:F0:B5:F2:55:17:80:9B:DF:20:D9:46:8E:69
Certificate issuer: /CN=A9114B57/serialNumber=25B6178BA4F86FF0B5F25517809BDF20D9468E69
Certificate serial: 071D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbYXi6T4b_C18lUXgJvfINlGjmk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.mft
Manifest number: 0716
Signing time: Wed 20 May 2026 21:59:06 +0000
Manifest this update: Wed 20 May 2026 21:59:06 +0000
Manifest next update: Wed 27 May 2026 21:59:06 +0000
Files and hashes: 1: JbYXi6T4b_C18lUXgJvfINlGjmk.crl (hash: 5rBdoShIypkL+ti/32kIehc2dzILJp9cTi8Qmc4iuFw=)
2: A74155FC835911EBBAB4A13CC4F9AE02.roa (hash: MkcM4pij8RY/rvo2aHmGL6k5vU/x2fBwM0XB9jiQ+GU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.crl
rsync://rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbYXi6T4b_C18lUXgJvfINlGjmk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 21:59:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1821 (0x71d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114B57, serialNumber=25B6178BA4F86FF0B5F25517809BDF20D9468E69
Validity
Not Before: May 20 21:59:06 2026 GMT
Not After : May 27 21:59:06 2026 GMT
Subject: CN=6a0e2eaa-8b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:73:c2:f4:0d:22:c8:2d:d6:a6:6f:d9:70:d8:
8f:f5:3f:48:80:78:09:89:0f:92:78:2e:c4:e9:f5:
a7:d3:3d:be:56:d0:21:bb:e2:22:82:5e:75:21:24:
6d:f5:d0:99:ea:a6:e8:21:ad:f1:e9:26:dd:82:b2:
93:60:02:b0:8c:76:6e:4e:50:53:bf:9f:1c:e4:ad:
ba:36:d6:c1:f9:66:db:8e:49:b8:0a:67:41:84:99:
a8:48:c9:ee:db:7e:fb:e0:11:33:ee:7f:1f:bd:9b:
63:64:c2:5b:c4:f5:22:68:83:12:4b:7a:80:27:a4:
ab:0d:49:e4:65:ea:09:1a:53:f5:6e:0a:3c:1e:58:
54:75:ce:9c:3d:45:8a:43:1e:dc:60:10:8b:cd:cf:
e0:2c:ac:5f:75:7b:57:b2:9c:37:a1:a0:84:77:2e:
d7:16:96:a4:2c:4a:39:85:ba:5d:2a:1d:94:1d:c2:
3c:46:0d:08:7e:d5:b0:b9:78:da:4d:3f:a5:7b:c1:
cb:d7:bc:04:40:91:62:47:9b:38:3d:05:34:56:83:
4a:d8:61:75:59:35:81:35:10:83:d2:7c:be:5a:2f:
d2:a0:a7:1b:0e:d5:52:38:45:25:95:01:05:26:26:
ca:3f:ee:75:90:ee:62:4a:a2:8c:69:3c:c2:c4:8d:
39:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:86:D8:CE:DF:7C:1E:28:A5:8A:1F:B6:A4:99:83:12:8E:06:DC:8E
X509v3 Authority Key Identifier:
keyid:25:B6:17:8B:A4:F8:6F:F0:B5:F2:55:17:80:9B:DF:20:D9:46:8E:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbYXi6T4b_C18lUXgJvfINlGjmk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:7a:01:fd:17:8b:20:ef:cf:69:38:6e:ec:ad:da:6e:6d:25:
d7:c5:02:44:59:23:66:0c:3e:1c:e9:ee:9f:2e:73:68:04:94:
35:a8:b7:12:a8:f9:54:49:1d:aa:69:0e:fe:5e:20:e2:bd:4a:
ec:98:94:cc:d6:d6:66:ab:ef:e3:71:e3:f2:f1:b0:ec:c0:f4:
32:af:5f:18:f0:11:95:d8:af:f5:b4:16:63:cb:b1:8b:45:28:
9f:f5:00:56:e7:dc:a3:c6:57:3d:30:e8:a2:c2:1d:96:52:c3:
16:b1:40:d9:7c:bc:7e:d2:e7:93:a2:b7:6e:cd:52:f1:9c:ee:
22:dc:36:9d:a0:a3:56:61:25:b8:ee:5d:ac:0f:20:57:e6:13:
56:f8:98:7b:39:ab:ba:a8:3e:84:72:3f:16:18:af:e0:5f:84:
b2:0b:7a:51:38:c9:42:c5:7a:13:15:08:9b:6f:37:0e:32:5a:
31:9d:ee:2e:e2:1a:ca:8f:ce:73:9e:50:8c:dd:49:c6:4e:e9:
c3:63:ab:66:16:a4:7a:ce:e1:b9:54:81:20:bc:b0:c9:ac:6a:
6a:97:3a:4b:cd:77:27:49:c5:31:5f:4e:af:97:45:51:f4:86:
59:58:5e:51:cd:c5:14:1a:a9:ba:d5:df:2f:49:92:32:85:69:
79:5b:b5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:59 2026 by rpki-client