
$ rpki-client -vvf rpki.apnic.net/member_repository/A913C35A/1F2A72383DE511F1AD5235459C833773/JuWb695DQKtmcU_i2e3_bMyBofk.mft
File: JuWb695DQKtmcU_i2e3_bMyBofk.mft (raw, json)
Hash identifier: 4mZRnHf3ydJS89RLvLGi1E+/2JwZQGVlFsIZqXh0zkE=
Subject key identifier: 69:CE:FC:C4:AA:C2:05:B2:CC:8E:48:9E:6B:DB:AE:1D:6B:0D:AA:43
Authority key identifier: 26:E5:9B:EB:DE:43:40:AB:66:71:4F:E2:D9:ED:FF:6C:CC:81:A1:F9
Certificate issuer: /CN=A913C35A/serialNumber=26E59BEBDE4340AB66714FE2D9EDFF6CCC81A1F9
Certificate serial: 11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JuWb695DQKtmcU_i2e3_bMyBofk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C35A/1F2A72383DE511F1AD5235459C833773/JuWb695DQKtmcU_i2e3_bMyBofk.mft
Manifest number: 10
Signing time: Tue 19 May 2026 08:55:41 +0000
Manifest this update: Tue 19 May 2026 08:55:40 +0000
Manifest next update: Tue 26 May 2026 08:55:40 +0000
Files and hashes: 1: JuWb695DQKtmcU_i2e3_bMyBofk.crl (hash: Q/D+dOog/zBEZxnocok/Ye3yqoudXUsDIWTIMXRGCow=)
2: 6FACCFD03DE511F19BE7396A9C833773.roa (hash: hx73FbUhhYSn4YdY28vMT/48260o2dLNY4f4/5t+UtU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913C35A/1F2A72383DE511F1AD5235459C833773/JuWb695DQKtmcU_i2e3_bMyBofk.crl
rsync://rpki.apnic.net/member_repository/A913C35A/1F2A72383DE511F1AD5235459C833773/JuWb695DQKtmcU_i2e3_bMyBofk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JuWb695DQKtmcU_i2e3_bMyBofk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 26 May 2026 08:55:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17 (0x11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C35A, serialNumber=26E59BEBDE4340AB66714FE2D9EDFF6CCC81A1F9
Validity
Not Before: May 19 08:55:40 2026 GMT
Not After : May 26 08:55:40 2026 GMT
Subject: CN=6a0c258d-6c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:7b:e0:9f:b6:57:70:a0:2f:e0:93:3f:bd:2c:
26:85:79:55:99:92:24:ee:70:47:5d:aa:6e:a1:91:
d6:7f:fc:d8:e6:09:06:eb:46:67:18:6c:19:f6:dc:
cd:98:fa:e6:45:a7:88:67:5a:1e:d9:da:57:b4:bb:
22:1b:f9:07:59:0f:86:d5:d1:96:c7:07:7b:db:9d:
a7:1f:b8:b2:5d:6d:7c:09:d4:a0:2d:d4:41:37:d8:
19:b9:63:4c:e5:eb:96:66:b3:b5:45:d1:4d:47:7b:
3b:4e:07:5e:f7:af:a6:ea:c6:74:bf:ef:e1:26:9e:
27:d3:53:f8:33:2f:28:eb:22:23:64:4e:5b:33:4f:
a9:dc:ec:73:6b:19:6f:f6:17:06:64:f3:e1:1c:9e:
98:1e:9b:9c:71:84:ff:2e:c6:b0:87:80:f7:d3:64:
3a:0c:74:d4:a3:1b:12:9a:28:24:ac:8c:82:39:89:
72:05:46:e2:74:ad:e2:f9:cc:42:05:64:d2:48:5b:
40:cc:77:21:08:85:dc:21:ac:e5:7a:ac:76:e0:07:
35:f0:43:b6:6c:21:b3:e9:60:8e:b9:e6:97:ea:dc:
a8:1f:cd:3f:8d:12:56:ad:58:66:9b:8b:9c:6e:80:
0d:aa:97:95:ec:0f:43:42:b0:49:83:bc:8a:79:66:
1c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:CE:FC:C4:AA:C2:05:B2:CC:8E:48:9E:6B:DB:AE:1D:6B:0D:AA:43
X509v3 Authority Key Identifier:
keyid:26:E5:9B:EB:DE:43:40:AB:66:71:4F:E2:D9:ED:FF:6C:CC:81:A1:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C35A/1F2A72383DE511F1AD5235459C833773/JuWb695DQKtmcU_i2e3_bMyBofk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JuWb695DQKtmcU_i2e3_bMyBofk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C35A/1F2A72383DE511F1AD5235459C833773/JuWb695DQKtmcU_i2e3_bMyBofk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:cd:73:f3:e3:e3:d2:08:09:f1:0b:21:d1:73:cc:a0:d8:0a:
5c:cf:25:87:76:62:d1:2a:21:34:22:be:16:2a:3e:1c:0f:d3:
0a:66:04:c1:69:50:32:e5:3e:ef:c8:cd:76:b6:76:2e:ee:80:
77:80:1d:eb:48:1c:de:8c:fe:fc:c2:6b:fd:4c:86:1f:59:7a:
fb:50:45:2e:9b:f3:ac:fa:66:53:f4:b9:de:f0:63:ae:81:1b:
eb:b4:73:2d:2a:22:a1:e7:bf:9e:09:59:9c:1b:d9:fb:49:51:
3c:1d:65:f6:69:5d:82:cb:45:ae:52:a2:f5:9a:f4:c7:c0:0d:
9b:15:64:7a:c0:da:c4:76:cb:ac:0a:c5:12:0e:a9:38:33:62:
45:7e:e6:4f:cc:b9:e0:b9:4b:a5:4a:12:94:17:d6:9c:70:1d:
54:04:ee:27:85:36:5a:2b:03:25:f2:8b:bd:7c:1f:b7:cc:68:
5e:e2:9a:e2:be:bc:9b:5f:5b:2b:f0:2f:fc:46:2c:16:09:b9:
01:e8:de:8d:d2:5c:c7:d1:88:c1:14:c2:21:de:79:95:36:82:
b7:ae:1c:c0:36:1c:d6:be:3e:5e:5c:3b:2d:6f:87:f5:d8:70:
9b:ac:20:c2:0d:43:82:2a:c5:de:14:31:72:49:8e:1f:79:89:
1e:8e:94:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:34:25 2026 by rpki-client