
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft
File: JU6vZJB1T1B9uBzpDdtim2IvRmA.mft (raw, json)
Hash identifier: K8BYprLUO34ha1in92MPb1w6X8cZBDZQls/81g8ayyA=
Subject key identifier: C3:51:5D:46:C8:48:48:83:95:7F:9A:06:29:FD:8C:2B:90:9F:17:3E
Authority key identifier: 25:4E:AF:64:90:75:4F:50:7D:B8:1C:E9:0D:DB:62:9B:62:2F:46:60
Certificate issuer: /CN=A915B8D0/serialNumber=254EAF6490754F507DB81CE90DDB629B622F4660
Certificate serial: 01A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft
Manifest number: 019B
Signing time: Thu 21 May 2026 04:23:17 +0000
Manifest this update: Thu 21 May 2026 04:23:16 +0000
Manifest next update: Thu 28 May 2026 04:23:16 +0000
Files and hashes: 1: JU6vZJB1T1B9uBzpDdtim2IvRmA.crl (hash: K51/WNmFTr0Uw6ssRUQgFXMlhT9Tiqm5TkJsWsTUh2k=)
2: 0B2E53E422B711EFB2B15160C4F9AE02.roa (hash: HMdh5qQbMBugOBpZmqbwDLsg01Y9XQwAxnZyu8Z1p8o=)
3: FD6286EA22B611EFBF5D3960C4F9AE02.roa (hash: Y/Om0EuE4DxLCw/qgrFqWJHVkuUt8pRbj21WLvoBDpA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.crl
rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 04:23:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 424 (0x1a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B8D0, serialNumber=254EAF6490754F507DB81CE90DDB629B622F4660
Validity
Not Before: May 21 04:23:16 2026 GMT
Not After : May 28 04:23:16 2026 GMT
Subject: CN=6a0e88b4-64c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:27:e9:b6:77:57:1a:72:b6:df:d6:59:0c:70:
34:c4:25:90:0c:c7:03:e6:0b:87:8f:64:be:45:67:
65:db:de:bb:4f:f4:dc:b8:d8:9d:f6:61:23:f8:60:
16:62:8a:96:72:f3:b4:9c:df:b3:60:ac:2d:60:2a:
9a:1b:89:95:4b:66:80:e0:97:a0:af:ee:19:16:1f:
fe:9c:e3:8d:c5:24:f0:03:95:4d:98:dd:07:b8:37:
e2:40:cd:f6:35:e7:36:e4:ca:6f:40:c7:b1:79:65:
f6:c1:de:9d:60:74:7a:59:e7:ab:0b:6b:18:52:94:
a1:2a:da:09:af:7e:03:80:04:27:06:24:61:cf:3b:
dc:bb:8b:d8:98:8c:28:0b:b5:e8:ae:c6:ff:aa:05:
53:3c:b5:45:50:19:63:e7:2e:e2:ec:a8:a5:23:81:
19:2c:3f:18:d6:07:d8:33:b8:8b:f5:0d:a3:d0:31:
13:b2:43:57:5f:b7:58:c8:78:25:01:85:6a:e9:af:
47:2f:df:35:ba:2f:3e:c0:0f:21:13:79:80:0c:d2:
43:31:0c:4a:14:d3:0f:97:9b:e7:5c:09:be:9f:3d:
4d:b7:e2:31:08:ed:55:22:13:c9:aa:d6:65:1d:da:
90:b7:70:6f:65:3b:13:43:87:ea:29:ad:77:87:91:
94:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:51:5D:46:C8:48:48:83:95:7F:9A:06:29:FD:8C:2B:90:9F:17:3E
X509v3 Authority Key Identifier:
keyid:25:4E:AF:64:90:75:4F:50:7D:B8:1C:E9:0D:DB:62:9B:62:2F:46:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:6d:f4:d0:c9:a4:1e:63:7b:69:bf:5b:32:80:66:84:02:82:
bd:ae:b7:11:90:0f:25:d0:5f:bb:c7:17:d2:85:24:20:4f:3a:
7f:bd:d2:0e:6d:de:2a:08:a1:33:1b:72:d2:73:75:e2:7b:68:
0e:8a:02:31:5d:b7:0e:0d:22:1c:ee:b4:ff:b2:87:3f:f5:78:
f9:4f:41:fc:7f:61:d4:29:83:7e:0e:6a:0c:7a:aa:c3:5a:1a:
d1:40:f7:2c:ba:be:b1:ab:99:45:c0:44:32:3a:3e:98:39:bb:
53:e6:9f:df:dd:2f:b6:26:48:54:d8:d1:a9:80:cf:7c:16:0b:
f3:c6:b8:7d:f4:a1:3b:c4:a1:86:25:db:f5:55:e5:2b:05:b5:
bf:ca:03:30:7b:dc:ad:10:30:16:fb:00:f6:6c:30:9d:df:d5:
e0:6b:b4:75:2f:41:1c:2c:98:64:2e:8a:76:88:c5:bd:5c:66:
2f:5a:e2:d2:b6:1d:67:2a:0c:20:49:45:f4:12:57:5a:b0:a5:
7b:48:78:ec:21:9e:24:d2:1f:7e:f9:c3:76:fb:18:d2:46:c8:
a7:9b:71:36:c3:08:31:38:c5:b7:01:f4:e2:a2:01:fb:01:3e:
61:e6:55:48:a8:07:1f:cb:d9:d9:7d:86:97:f9:5c:92:e6:53:
70:5a:df:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:14:43 2026 by rpki-client