
$ rpki-client -vvf rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.mft
File: J4qsn8YiO7A3FX6zn5bbvajm0lY.mft (raw, json)
Hash identifier: Y/PYqe9TNqEvMcqwF24JjEH69YOR10DaP4CUCRpy1w4=
Subject key identifier: 4B:40:E2:16:AA:27:EC:89:7F:18:97:2E:66:9A:E5:19:58:1E:43:F9
Authority key identifier: 27:8A:AC:9F:C6:22:3B:B0:37:15:7E:B3:9F:96:DB:BD:A8:E6:D2:56
Certificate issuer: /CN=A913BC05/serialNumber=278AAC9FC6223BB037157EB39F96DBBDA8E6D256
Certificate serial: 06D0
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/J4qsn8YiO7A3FX6zn5bbvajm0lY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.mft
Manifest number: 06C8
Signing time: Mon 20 Jul 2026 18:55:03 +0000
Manifest this update: Mon 20 Jul 2026 18:55:02 +0000
Manifest next update: Mon 27 Jul 2026 18:55:02 +0000
Files and hashes: 1: J4qsn8YiO7A3FX6zn5bbvajm0lY.crl (hash: Xo7vWHpjktLjbfrdnYopfVhhxszctn1BAv7RBYNndd4=)
2: 9C89E3D2B21A11EBAC1DBF83C4F9AE02.roa (hash: C9xOCAlI2ugXqr2LkeMuXjVj2fsjnMUChwzmuRA9WBg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.crl
rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/J4qsn8YiO7A3FX6zn5bbvajm0lY.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 18:55:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1744 (0x6d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913BC05, serialNumber=278AAC9FC6223BB037157EB39F96DBBDA8E6D256
Validity
Not Before: Jul 20 18:55:02 2026 GMT
Not After : Jul 27 18:55:02 2026 GMT
Subject: CN=6a5e6f06-c042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:39:5d:24:23:b0:61:37:52:65:8b:f1:60:22:
72:5c:b7:56:db:8d:01:98:06:e9:e0:d5:fe:8e:16:
00:b8:5a:16:5a:a4:39:7a:39:6c:5a:d8:3c:62:c2:
c4:e0:4d:d2:79:34:cc:a4:5a:f1:93:62:52:a3:58:
bd:2c:56:52:14:e9:33:74:7b:61:27:f0:f9:e1:0f:
1c:26:a4:14:4d:98:7e:07:cb:4e:52:13:83:30:89:
fc:8c:6e:aa:0c:a1:62:8c:14:f2:dd:70:7f:6e:d5:
db:87:27:e9:42:fd:a8:2c:78:d2:c0:23:be:3c:51:
82:3b:fc:e0:c7:c0:1f:84:bf:7f:69:d5:49:8e:c7:
c8:30:b0:e1:40:26:27:e9:e9:d6:7a:f6:41:f5:fc:
7b:56:34:44:64:01:80:99:c6:d0:49:82:9f:6d:0a:
82:02:7a:aa:37:5c:53:b2:34:ff:36:9a:48:2d:e9:
d3:ca:6f:98:79:f7:68:bc:f0:4a:3c:5d:c3:ac:05:
bb:f1:34:cf:b6:41:42:e5:ec:b5:a5:05:61:bc:65:
3a:da:fa:74:c0:c8:50:5d:70:52:90:f8:2d:69:19:
a1:f6:c7:3e:f8:5a:21:f5:e4:37:32:5d:cb:cf:2b:
40:8e:47:10:05:2d:4a:35:28:51:e8:5f:f5:1f:13:
56:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:40:E2:16:AA:27:EC:89:7F:18:97:2E:66:9A:E5:19:58:1E:43:F9
X509v3 Authority Key Identifier:
keyid:27:8A:AC:9F:C6:22:3B:B0:37:15:7E:B3:9F:96:DB:BD:A8:E6:D2:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/J4qsn8YiO7A3FX6zn5bbvajm0lY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:79:ee:02:b3:d6:d6:76:88:b1:22:86:22:1c:a4:a6:2d:ec:
ca:fd:9e:1a:18:a7:6e:8e:65:4c:18:91:15:fc:ef:7c:08:f8:
30:54:b6:32:7f:2e:b8:d0:9d:f1:28:1f:89:8c:e6:19:79:e0:
ea:a6:d3:d5:b3:5c:d6:7b:1c:d7:15:29:2b:8c:71:84:7c:bc:
fb:4b:38:f4:41:c7:a7:af:88:53:20:4c:11:d5:7a:18:4e:cb:
dc:4a:88:2b:50:b4:4f:ae:90:39:91:2e:6a:03:f7:9d:54:86:
c6:9c:f9:2b:c9:38:9b:79:77:ed:39:f4:cc:52:f0:cf:06:ec:
80:8e:16:b6:58:57:39:c1:83:14:0f:2c:2f:3f:d0:7d:dc:a6:
d5:c7:a1:fd:6a:7f:44:c5:fd:e6:3a:ca:56:bd:1c:bb:eb:07:
cf:91:a3:51:44:fd:05:40:81:d3:a6:70:c9:22:d3:3b:69:47:
9b:0e:db:6e:3f:08:77:2b:5e:93:e0:28:d7:ad:98:44:da:04:
ba:f5:01:17:6c:68:34:85:c5:c2:72:59:35:5d:39:8a:a2:0c:
28:b4:75:7b:a5:83:40:bd:22:f7:e7:0c:7c:17:c2:a7:cc:e2:
80:f2:2b:39:d8:87:26:b5:de:28:db:14:ee:81:e1:cf:00:99:
e2:63:a6:ad
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBtAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0JDMDUxMTAvBgNVBAUTKDI3OEFBQzlGQzYyMjNCQjAzNzE1N0VCMzlGOTZEQkJE
QThFNkQyNTYwHhcNMjYwNzIwMTg1NTAyWhcNMjYwNzI3MTg1NTAyWjAYMRYwFAYD
VQQDEw02YTVlNmYwNi1jMDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvjldJCOwYTdSZYvxYCJyXLdW240BmAbp4NX+jhYAuFoWWqQ5ejlsWtg8YsLE
4E3SeTTMpFrxk2JSo1i9LFZSFOkzdHthJ/D54Q8cJqQUTZh+B8tOUhODMIn8jG6q
DKFijBTy3XB/btXbhyfpQv2oLHjSwCO+PFGCO/zgx8AfhL9/adVJjsfIMLDhQCYn
6enWevZB9fx7VjREZAGAmcbQSYKfbQqCAnqqN1xTsjT/NppILenTym+YefdovPBK
PF3DrAW78TTPtkFC5ey1pQVhvGU62vp0wMhQXXBSkPgtaRmh9sc++Foh9eQ3Ml3L
zytAjkcQBS1KNShR6F/1HxNWEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEtA4haq
J+yJfxiXLmaa5RlYHkP5MB8GA1UdIwQYMBaAFCeKrJ/GIjuwNxV+s5+W272o5tJW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkMwNS84MzU1OUM3Q0Iy
MTkxMUVCODIwMzE0ODJDNEY5QUUwMi9KNHFzbjhZaU83QTNGWDZ6bjViYnZham0w
bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL0o0cXNuOFlpTzdBM0ZYNnpuNWJidmFqbTBsWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QkMwNS84MzU1OUM3Q0IyMTkxMUVCODIwMzE0ODJDNEY5QUUwMi9KNHFzbjhZaU83
QTNGWDZ6bjViYnZham0wbFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnnnuArPW1naIsSKGIhykpi3syv2eGhinbo5lTBiRFfzvfAj4MFS2Mn8uuNCd
8SgfiYzmGXng6qbT1bNc1nsc1xUpK4xxhHy8+0s49EHHp6+IUyBMEdV6GE7L3EqI
K1C0T66QOZEuagP3nVSGxpz5K8k4m3l37Tn0zFLwzwbsgI4WtlhXOcGDFA8sLz/Q
fdym1ceh/Wp/RMX95jrKVr0cu+sHz5GjUUT9BUCB06ZwySLTO2lHmw7bbj8Idyte
k+Ao162YRNoEuvUBF2xoNIXFwnJZNV05iqIMKLR1e6WDQL0i9+cMfBfCp8zigPIr
OdiHJrXeKNsU7oHhzwCZ4mOmrQ==
-----END CERTIFICATE-----
Generated at Tue Jul 21 17:50:53 2026 by rpki-client