
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft
File: JnQ7Hk4OkKGbJAwJNpecojdojfI.mft (raw, json)
Hash identifier: nxaIpfvp2ZNc9KJzTW/eavFT5w0MjyaNiEL6KLTSiFQ=
Subject key identifier: 7C:AD:26:29:7C:08:77:1E:47:FC:E6:4F:36:C6:87:92:D1:6B:CC:D8
Authority key identifier: 26:74:3B:1E:4E:0E:90:A1:9B:24:0C:09:36:97:9C:A2:37:68:8D:F2
Certificate issuer: /CN=A9144F59/serialNumber=26743B1E4E0E90A19B240C0936979CA237688DF2
Certificate serial: 17B3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft
Manifest number: 1787
Signing time: Mon 20 Jul 2026 16:42:51 +0000
Manifest this update: Mon 20 Jul 2026 16:42:51 +0000
Manifest next update: Mon 27 Jul 2026 16:42:51 +0000
Files and hashes: 1: JnQ7Hk4OkKGbJAwJNpecojdojfI.crl (hash: EYITcLz9y6ugBypq9CjsKEtAE1iduEbgukW8Os+t0Is=)
2: DED757CC013811EF8A7E136EC4F9AE02.roa (hash: TmKZTioxlMesMkEEvyPRrkxii6ZYxhGxhSFj/5ba424=)
3: AFB50D7A2AAD11EEA5D9705CC4F9AE02.roa (hash: G4irpBG19slrulSAFYlR+PU5Eph/ynSR0m07o08AgsU=)
4: CB91C8D2514D11EEADBDDC4DC4F9AE02.roa (hash: Vo4hXEocOsaARTcy4r/0nnenE+IAT7B33HFUwDy31kM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.crl
rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 16:42:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6067 (0x17b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144F59, serialNumber=26743B1E4E0E90A19B240C0936979CA237688DF2
Validity
Not Before: Jul 20 16:42:51 2026 GMT
Not After : Jul 27 16:42:51 2026 GMT
Subject: CN=6a5e500b-2057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:07:8b:64:b3:b6:e0:5d:3f:c7:0d:3c:ca:98:
7a:cb:df:16:4b:ac:eb:4c:8e:e9:f0:63:b3:39:59:
fb:9a:86:9f:ae:c3:59:a8:ef:2f:f1:41:e1:d5:fe:
d3:b7:bf:4b:4d:86:14:fb:5c:46:2b:39:d1:99:aa:
ca:b4:ce:ff:49:84:b5:a4:f7:2f:5b:8f:4c:ec:8a:
89:3d:12:8a:72:bf:b7:ba:55:e3:3b:db:fd:c1:8f:
15:72:34:63:88:1d:be:47:45:2b:ad:2b:b1:83:4f:
db:74:0b:8f:d9:20:04:fe:b0:76:02:f1:a0:d4:50:
8c:c8:e5:20:53:04:17:1c:48:0a:e1:e8:2d:ba:a0:
c2:51:34:e9:ca:b9:2a:3d:a8:79:16:c5:9d:01:b3:
34:ef:dc:ad:48:12:a5:06:a6:50:9f:63:ef:28:54:
4d:11:e8:ba:cb:02:8e:51:40:e7:5b:82:e0:cc:8f:
be:01:31:30:30:f2:61:21:0a:e4:4d:4f:5a:9a:0e:
99:63:13:5d:90:2e:cd:30:57:e8:02:50:d7:9e:15:
d7:7d:79:20:e1:58:cd:be:51:ba:60:9f:b6:a2:41:
03:3f:9e:0b:88:47:f3:11:90:b5:a8:14:24:13:83:
1d:8c:84:c6:0d:73:f6:65:96:fd:34:36:9d:be:85:
1e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:AD:26:29:7C:08:77:1E:47:FC:E6:4F:36:C6:87:92:D1:6B:CC:D8
X509v3 Authority Key Identifier:
keyid:26:74:3B:1E:4E:0E:90:A1:9B:24:0C:09:36:97:9C:A2:37:68:8D:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:54:50:46:12:56:cc:ce:86:b5:ed:b3:a4:79:66:ed:ad:68:
dd:3e:5a:f2:33:62:84:5c:94:df:52:a0:6a:7c:18:4f:36:9f:
94:ae:7d:04:3c:ab:6d:85:7f:67:9a:6a:16:87:45:5f:1f:42:
61:a3:48:c3:d1:ec:bb:bb:a6:38:d9:9f:4d:99:aa:54:fb:fd:
24:52:cf:85:99:82:f9:61:3e:6c:ec:6b:de:f7:fe:e4:4c:bf:
d0:b6:52:1c:df:b7:11:63:cb:aa:2f:f2:f1:1c:fc:7e:e8:fb:
b9:da:b2:71:b8:5b:b4:87:b1:b4:c2:0f:38:19:6e:34:d5:57:
12:9b:74:91:34:79:4f:e3:24:99:84:35:55:0a:7f:f7:4c:6b:
12:64:48:b9:e1:16:af:9c:55:3b:b6:6a:46:8b:ff:b0:4c:29:
9d:6a:aa:80:04:be:72:9c:bf:a7:cc:70:dd:fc:01:09:16:19:
d3:bb:76:c2:40:59:7a:39:f9:8a:fc:6e:91:36:4d:3f:d6:1c:
df:b9:2a:e7:82:a1:3e:01:39:3b:60:55:0f:e1:67:22:ea:ce:
bf:bc:33:e3:4a:5a:82:1d:34:ee:13:b0:69:ef:12:a9:ad:f9:
27:f0:19:58:b0:e0:38:46:b0:e9:34:88:53:4b:ca:9b:42:9b:
44:08:dd:df
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICF7MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDRGNTkxMTAvBgNVBAUTKDI2NzQzQjFFNEUwRTkwQTE5QjI0MEMwOTM2OTc5Q0Ey
Mzc2ODhERjIwHhcNMjYwNzIwMTY0MjUxWhcNMjYwNzI3MTY0MjUxWjAYMRYwFAYD
VQQDEw02YTVlNTAwYi0yMDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAugeLZLO24F0/xw08yph6y98WS6zrTI7p8GOzOVn7moafrsNZqO8v8UHh1f7T
t79LTYYU+1xGKznRmarKtM7/SYS1pPcvW49M7IqJPRKKcr+3ulXjO9v9wY8VcjRj
iB2+R0UrrSuxg0/bdAuP2SAE/rB2AvGg1FCMyOUgUwQXHEgK4egtuqDCUTTpyrkq
Pah5FsWdAbM079ytSBKlBqZQn2PvKFRNEei6ywKOUUDnW4LgzI++ATEwMPJhIQrk
TU9amg6ZYxNdkC7NMFfoAlDXnhXXfXkg4VjNvlG6YJ+2okEDP54LiEfzEZC1qBQk
E4MdjITGDXP2ZZb9NDadvoUeNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHytJil8
CHceR/zmTzbGh5LRa8zYMB8GA1UdIwQYMBaAFCZ0Ox5ODpChmyQMCTaXnKI3aI3y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEY1OS80NEE2RkY2NDAw
Q0IxMUU4QkVCMUVGMTBDNEY5QUUwMi9KblE3SGs0T2tLR2JKQXdKTnBlY29qZG9q
ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0puUTdIazRPa0tHYkpBd0pOcGVjb2pkb2pmSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NEY1OS80NEE2RkY2NDAwQ0IxMUU4QkVCMUVGMTBDNEY5QUUwMi9KblE3SGs0T2tL
R2JKQXdKTnBlY29qZG9qZkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfFRQRhJWzM6Gte2zpHlm7a1o3T5a8jNihFyU31KganwYTzaflK59BDyrbYV/
Z5pqFodFXx9CYaNIw9Hsu7umONmfTZmqVPv9JFLPhZmC+WE+bOxr3vf+5Ey/0LZS
HN+3EWPLqi/y8Rz8fuj7udqycbhbtIextMIPOBluNNVXEpt0kTR5T+MkmYQ1VQp/
90xrEmRIueEWr5xVO7ZqRov/sEwpnWqqgAS+cpy/p8xw3fwBCRYZ07t2wkBZejn5
ivxukTZNP9Yc37kq54KhPgE5O2BVD+FnIurOv7wz40pagh007hOwae8Sqa35J/AZ
WLDgOEaw6TSIU0vKm0KbRAjd3w==
-----END CERTIFICATE-----
Generated at Tue Jul 21 23:47:18 2026 by rpki-client