
$ rpki-client -vvf rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft
File: jQmbFr6Vddy0uwaFh5eZn1XmA18.mft (raw, json)
Hash identifier: Z21p93rKWeOZK3kCfNP92ocHo2kGds9s9eM6J/1k9QI=
Subject key identifier: B9:44:F0:20:EA:B7:59:F8:70:8D:17:DD:ED:3D:C5:4F:D0:07:2A:D5
Authority key identifier: 8D:09:9B:16:BE:95:75:DC:B4:BB:06:85:87:97:99:9F:55:E6:03:5F
Certificate issuer: /CN=A912AEFA/serialNumber=8D099B16BE9575DCB4BB06858797999F55E6035F
Certificate serial: 35BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jQmbFr6Vddy0uwaFh5eZn1XmA18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft
Manifest number: 3593
Signing time: Tue 18 Aug 2026 15:18:29 +0000
Manifest this update: Tue 18 Aug 2026 15:18:29 +0000
Manifest next update: Tue 25 Aug 2026 15:18:29 +0000
Files and hashes: 1: jQmbFr6Vddy0uwaFh5eZn1XmA18.crl (hash: MkTzKtwpUm4JOE+9aJyTrVppamTqeIcE4XXKgRWPCBo=)
2: 7192AD9E071211EAAD4E340AC4F9AE02.roa (hash: 8Jonk83mWaohXzy8u3pliKQ5Lui9A89G4dRwvaO5ka8=)
3: E92E6ACA025411F1B5CF90C0233D8C67.roa (hash: UV8f86HTjxEJSP4uwYb5rWdL2gxSvjECKlRWXIr/6K8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.crl
rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jQmbFr6Vddy0uwaFh5eZn1XmA18.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 15:18:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13757 (0x35bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912AEFA, serialNumber=8D099B16BE9575DCB4BB06858797999F55E6035F
Validity
Not Before: Aug 18 15:18:29 2026 GMT
Not After : Aug 25 15:18:29 2026 GMT
Subject: CN=6a8477c5-2224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:41:b8:1d:df:cf:e2:96:58:75:21:87:0a:f1:
e9:79:b3:9a:a9:e2:42:58:66:74:b9:04:f3:2f:5d:
8e:8f:53:aa:49:7d:09:e6:b8:4b:2b:32:39:27:e8:
3e:7d:e4:00:14:2f:78:85:cf:1f:4d:2d:cf:8a:90:
37:4f:8e:11:95:f1:b8:cc:9c:14:ba:4d:b3:5f:4d:
1a:f3:8b:50:f8:a8:50:cc:32:ab:77:fd:4a:27:e5:
9f:96:1f:7d:cb:52:18:4f:78:70:cd:d0:d0:5e:d4:
b7:78:ee:8f:f1:07:0b:7c:e1:ad:aa:e1:01:8b:9d:
60:ee:27:68:df:7f:24:d0:2c:d8:d0:29:9c:e3:da:
da:17:f4:69:2f:7a:e3:5c:c9:8e:75:12:be:45:a4:
14:dd:c4:4c:4e:e5:30:cb:9e:54:41:ce:44:aa:35:
bf:56:7c:16:82:5e:52:0d:02:87:5d:37:82:67:fc:
19:96:fb:b0:92:6d:45:5c:fe:93:8b:e4:34:4a:11:
43:38:21:f2:99:d9:a7:6c:83:a8:2e:13:96:5f:0f:
00:fc:62:03:02:17:dd:f4:3d:35:90:58:2b:c5:63:
f1:37:07:43:8f:98:16:87:b2:65:d8:ac:80:38:89:
4a:85:be:1b:33:82:06:b6:63:a4:15:95:94:e1:08:
05:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:44:F0:20:EA:B7:59:F8:70:8D:17:DD:ED:3D:C5:4F:D0:07:2A:D5
X509v3 Authority Key Identifier:
keyid:8D:09:9B:16:BE:95:75:DC:B4:BB:06:85:87:97:99:9F:55:E6:03:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jQmbFr6Vddy0uwaFh5eZn1XmA18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:f4:72:77:c0:44:32:e9:bb:9f:c7:21:15:3e:ae:f3:5f:94:
89:71:92:a9:b1:a9:37:35:c4:10:87:30:a3:3c:89:2c:84:92:
7d:7f:09:27:1f:81:dd:c4:5a:dc:fe:47:28:0d:f4:b5:d4:c3:
4e:87:b7:42:a4:a3:c1:43:6d:a7:0e:59:55:3c:f4:00:8a:4c:
c0:87:39:9f:f7:7c:ea:a1:3a:62:3f:0b:55:0f:de:b4:f5:31:
a9:c6:af:5c:ca:bd:08:ab:22:bb:cf:72:01:3a:27:15:83:bf:
76:ef:7b:eb:b7:11:fc:5f:1f:90:be:3f:ea:54:e6:31:52:be:
d8:19:c0:23:e7:2f:7b:9c:41:e1:27:8e:3c:33:35:86:92:e3:
97:50:bb:bf:69:f0:7b:1f:e4:54:07:c3:60:b3:5f:03:63:21:
e7:bf:d1:58:7c:55:02:42:fe:71:6e:b4:e9:45:df:a1:47:89:
93:29:33:95:a3:60:e4:81:7a:4f:77:7f:17:ec:d8:61:93:21:
9c:2f:bd:c8:10:11:24:c6:ef:a7:09:c8:55:5f:0e:5d:b4:9d:
5f:8b:9e:22:e7:33:22:6b:1c:43:07:77:b8:78:6d:ad:32:09:
94:00:70:78:03:23:e5:c6:ce:fd:1b:aa:4b:a5:f6:1a:da:2a:
c2:5f:bc:2b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkFFRkExMTAvBgNVBAUTKDhEMDk5QjE2QkU5NTc1RENCNEJCMDY4NTg3OTc5OTlG
NTVFNjAzNUYwHhcNMjYwODE4MTUxODI5WhcNMjYwODI1MTUxODI5WjAYMRYwFAYD
VQQDEw02YTg0NzdjNS0yMjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAokG4Hd/P4pZYdSGHCvHpebOaqeJCWGZ0uQTzL12Oj1OqSX0J5rhLKzI5J+g+
feQAFC94hc8fTS3PipA3T44RlfG4zJwUuk2zX00a84tQ+KhQzDKrd/1KJ+Wflh99
y1IYT3hwzdDQXtS3eO6P8QcLfOGtquEBi51g7ido338k0CzY0Cmc49raF/RpL3rj
XMmOdRK+RaQU3cRMTuUwy55UQc5EqjW/VnwWgl5SDQKHXTeCZ/wZlvuwkm1FXP6T
i+Q0ShFDOCHymdmnbIOoLhOWXw8A/GIDAhfd9D01kFgrxWPxNwdDj5gWh7Jl2KyA
OIlKhb4bM4IGtmOkFZWU4QgFtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLlE8CDq
t1n4cI0X3e09xU/QByrVMB8GA1UdIwQYMBaAFI0Jmxa+lXXctLsGhYeXmZ9V5gNf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUVGQS9DNEI1OTI2NjFE
QTkxMUUyOTZCQkZFQTQwOEIwMkNEMi9qUW1iRnI2VmRkeTB1d2FGaDVlWm4xWG1B
MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pRbWJGcjZWZGR5MHV3YUZoNWVabjFYbUExOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QUVGQS9DNEI1OTI2NjFEQTkxMUUyOTZCQkZFQTQwOEIwMkNEMi9qUW1iRnI2VmRk
eTB1d2FGaDVlWm4xWG1BMTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqfRyd8BEMum7n8chFT6u81+UiXGSqbGpNzXEEIcwozyJLISSfX8JJx+B3cRa
3P5HKA30tdTDToe3QqSjwUNtpw5ZVTz0AIpMwIc5n/d86qE6Yj8LVQ/etPUxqcav
XMq9CKsiu89yATonFYO/du9767cR/F8fkL4/6lTmMVK+2BnAI+cve5xB4SeOPDM1
hpLjl1C7v2nwex/kVAfDYLNfA2Mh57/RWHxVAkL+cW606UXfoUeJkykzlaNg5IF6
T3d/F+zYYZMhnC+9yBARJMbvpwnIVV8OXbSdX4ueIuczImscQwd3uHhtrTIJlABw
eAMj5cbO/RuqS6X2Gtoqwl+8Kw==
-----END CERTIFICATE-----
Generated at Wed Aug 19 11:46:02 2026 by rpki-client