
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft
File: JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft (raw, json)
Hash identifier: D/stie9C9KKJJR9FPrHfy/0W43WoytmpBDJEltHxHHQ=
Subject key identifier: B1:9E:15:1E:B2:05:AA:A3:86:10:91:90:51:02:C8:AC:21:48:BB:0E
Authority key identifier: 24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98
Certificate issuer: /CN=A911BDA9/serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198
Certificate serial: 014C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft
Manifest number: 0144
Signing time: Sun 05 Apr 2026 04:41:33 +0000
Manifest this update: Sun 05 Apr 2026 04:41:33 +0000
Manifest next update: Sun 12 Apr 2026 04:41:33 +0000
Files and hashes: 1: JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl (hash: JQJyON9BL/xFzAzfeiEspjiHUZwLVrc59SZ1MDyVW38=)
2: 08D9C8604ABE11EF8708395BC4F9AE02.roa (hash: ORm53sfx2hhoKeW+AllOGpPuP99qec7a8uPMzE4I0Zw=)
3: C470564044BD11EFA8F7157FC4F9AE02.roa (hash: 2nH7N4ovFMEiAx6nSrcLjxkbYh/zpbNAaRQrma2Npz0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl
rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 04:41:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 332 (0x14c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BDA9, serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198
Validity
Not Before: Apr 5 04:41:33 2026 GMT
Not After : Apr 12 04:41:33 2026 GMT
Subject: CN=69d1e7fd-6140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fa:26:3e:f5:94:75:fa:d6:48:3d:03:11:cf:
2a:74:68:21:dd:f6:49:64:45:9a:59:04:46:4b:71:
d9:54:af:61:5f:42:fa:ff:7f:a5:a3:f5:38:02:fc:
69:9f:78:c3:3a:e9:a8:55:3f:7e:8f:cd:a8:f7:a6:
85:91:f3:e4:1a:51:24:bc:b8:23:6a:cb:ee:2c:b3:
e8:6e:39:3b:0f:99:69:37:a5:e8:cf:18:59:b1:bf:
47:49:b5:d6:0e:69:86:d1:9b:9d:c7:10:9f:50:ff:
97:89:b5:1e:59:3d:d2:98:d7:ec:d0:06:19:99:99:
50:12:7d:8e:4a:f3:16:1e:54:33:86:ba:84:eb:ac:
27:5e:4b:dd:ba:66:fd:1d:33:e8:65:be:02:59:9d:
60:0c:c7:e6:28:a6:0a:71:06:5b:e6:b0:f5:1d:49:
37:c7:15:f6:be:08:b3:38:1f:35:4e:8e:6e:1d:f6:
4e:36:ee:e7:11:11:8a:b9:75:54:c6:97:33:ea:4f:
a1:57:6e:8f:6f:34:62:20:5f:09:01:63:6d:bb:85:
26:c7:a7:3c:9c:27:55:81:8b:ff:04:eb:fe:1b:6c:
ca:0e:cf:55:4e:cc:ea:15:bb:0e:1f:71:c4:2d:e8:
7e:de:07:2b:37:e1:ff:ab:33:20:0e:64:65:56:b4:
1e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:9E:15:1E:B2:05:AA:A3:86:10:91:90:51:02:C8:AC:21:48:BB:0E
X509v3 Authority Key Identifier:
keyid:24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:f4:67:01:14:9a:fc:09:b5:6a:aa:d9:a9:f5:d2:eb:dc:a5:
dd:0e:a2:10:63:7d:c4:b0:f4:15:de:a0:b9:65:8d:c6:5b:13:
f3:d1:1f:79:35:1b:60:8d:91:b5:8e:c4:e3:cb:59:ff:9f:1a:
14:84:fc:15:6c:e5:6f:33:00:a9:96:28:26:e2:34:07:4f:af:
89:f1:ea:15:ef:b8:54:cd:cb:0e:4d:ff:a3:84:bb:9b:f0:31:
de:da:bd:96:b5:b1:2a:a2:74:59:d9:be:8f:94:14:f7:81:d4:
1e:a7:c5:de:da:49:19:2a:ef:f0:fe:ef:69:ed:69:22:9c:42:
29:a0:04:18:40:04:a5:8e:9c:ef:99:b1:ea:98:c9:de:d3:02:
61:d1:cd:51:d3:a8:42:65:1f:da:1a:5c:fa:b9:bf:a9:2a:1b:
55:21:ed:df:ab:af:15:f5:df:6f:2d:29:9e:46:fb:5d:85:f3:
71:80:6a:b9:2b:bd:5c:d9:63:af:5f:ed:cd:37:9a:03:7b:aa:
30:e6:28:47:d6:0c:f8:71:21:28:1a:f9:03:81:21:56:0e:21:
22:aa:a8:2c:9b:69:0b:33:f3:8b:73:f2:d4:71:0d:71:26:66:
27:09:74:0a:39:eb:4a:1d:2d:08:18:c6:13:84:43:f7:10:3d:
26:a5:91:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:48:35 2026 by rpki-client