
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.mft
File: jPbyYoPglD4X1BKxnKKvLNYNRYc.mft (raw, json)
Hash identifier: rX8BAvXWwCApJY/aVCzLetiYDIKoE9tFJGs30QdOeSU=
Subject key identifier: E0:D3:3B:B4:A6:C2:DD:20:9F:45:4B:EC:C9:2D:B2:EB:04:BC:4C:AD
Authority key identifier: 8C:F6:F2:62:83:E0:94:3E:17:D4:12:B1:9C:A2:AF:2C:D6:0D:45:87
Certificate issuer: /CN=A911B7EB/serialNumber=8CF6F26283E0943E17D412B19CA2AF2CD60D4587
Certificate serial: 0B15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPbyYoPglD4X1BKxnKKvLNYNRYc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.mft
Manifest number: 0B05
Signing time: Tue 18 Aug 2026 19:39:20 +0000
Manifest this update: Tue 18 Aug 2026 19:39:20 +0000
Manifest next update: Tue 25 Aug 2026 19:39:20 +0000
Files and hashes: 1: jPbyYoPglD4X1BKxnKKvLNYNRYc.crl (hash: M7hiSDQ7dskfkRTV9lZrvwNYJdmw8eOsF1J0p1BwOk4=)
2: 4A074A90E19511EC8AD57C6CC4F9AE02.roa (hash: I2/+LVg2CfxpzHUvv4hVWxYLiDdlaCgmazTOqmpPue8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.crl
rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPbyYoPglD4X1BKxnKKvLNYNRYc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 19:39:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2837 (0xb15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B7EB, serialNumber=8CF6F26283E0943E17D412B19CA2AF2CD60D4587
Validity
Not Before: Aug 18 19:39:20 2026 GMT
Not After : Aug 25 19:39:20 2026 GMT
Subject: CN=6a84b4e8-8e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:af:ab:aa:94:0d:25:90:35:66:8e:d4:21:f0:
19:c3:a8:48:5e:c5:26:4d:3b:e7:bd:d6:64:2d:ad:
bd:03:a1:22:42:ee:93:a9:f2:eb:cf:5d:0d:22:7a:
f5:5c:a2:bb:ec:a3:81:af:2d:4d:1a:46:89:be:32:
62:59:73:95:4d:e5:fd:2e:1e:57:29:d7:13:7f:69:
ee:cf:bc:aa:3f:2d:1d:67:cd:f0:5c:5a:e2:2f:86:
87:d9:73:6d:b4:ca:ae:b5:d7:f6:6d:4d:7f:f6:4d:
07:43:b1:8b:b7:7f:5e:f0:0a:c1:d8:11:a1:4b:fd:
4d:75:37:a8:ce:66:7f:d1:ac:37:96:3a:5a:e6:0b:
38:5c:a3:5b:87:3f:11:13:7d:a1:d1:ff:57:4e:1b:
11:aa:8e:38:2f:e1:1a:ef:51:c7:2d:6f:73:9a:9a:
17:53:42:85:1c:6f:54:6c:b9:43:9d:f8:22:45:42:
7c:4c:a1:2c:8c:01:c5:f4:89:12:e1:1d:d9:e9:a6:
11:7e:d8:3d:51:85:51:da:7b:fd:37:39:53:d9:a7:
ca:51:d2:2f:5d:ec:de:0f:90:65:c1:26:ea:1d:e6:
03:b6:26:18:a5:2f:39:82:05:0a:d0:d2:87:b2:e0:
5b:c1:f8:d3:fc:f2:00:25:21:13:ee:b3:88:e4:dc:
9a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D3:3B:B4:A6:C2:DD:20:9F:45:4B:EC:C9:2D:B2:EB:04:BC:4C:AD
X509v3 Authority Key Identifier:
keyid:8C:F6:F2:62:83:E0:94:3E:17:D4:12:B1:9C:A2:AF:2C:D6:0D:45:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPbyYoPglD4X1BKxnKKvLNYNRYc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:3e:8f:56:b6:ee:cc:10:32:1e:62:36:f8:8b:60:c7:09:a1:
ac:ec:d4:ce:b6:e1:b7:2a:28:fd:69:64:3e:e9:a4:6a:bb:42:
82:5d:fc:37:8e:0f:76:59:94:f3:7d:af:d2:a3:c5:d1:e5:e4:
6f:22:e7:46:61:88:62:3b:ec:5e:c2:d5:af:6c:56:4d:e4:dc:
93:cd:d8:e3:55:eb:fd:7c:fb:5b:99:48:0f:6a:74:62:42:68:
9e:44:e2:69:52:ce:76:3f:8c:c5:ad:48:44:d3:12:ad:f8:91:
0f:b4:33:0c:fa:e4:46:af:cb:61:c2:0c:56:6a:f6:9a:3d:0e:
f6:84:78:49:f7:1f:3f:27:b9:ed:3c:aa:25:7f:47:dd:fd:72:
b8:d7:03:72:7e:91:46:d9:68:0d:3e:71:f8:ce:80:8c:f6:42:
2c:7a:18:08:19:b4:2c:46:98:90:c3:be:17:1f:dc:e5:f6:e0:
54:c0:6c:d5:94:57:b5:da:6a:ab:e0:3d:5f:df:50:06:48:09:
80:da:f7:89:ba:ac:38:b8:3e:42:9e:e0:33:11:9b:f9:f2:11:
c2:c6:c8:b0:d9:c0:9a:f6:ff:f5:c4:97:87:1f:dd:f3:68:b7:
31:62:09:53:5c:df:3e:f7:02:8c:fb:b9:11:80:7b:e3:9c:21:
df:09:e9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:25 2026 by rpki-client