
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.mft
File: JAYggSHro_x0NhyJ5jVgtJht3wg.mft (raw, json)
Hash identifier: qbKNdsldNdDuzpr3ds/RrCHj14p8DxZBW8GLHe0lPIU=
Subject key identifier: 1F:DD:42:D1:23:63:2B:37:EE:AA:45:F8:43:6B:67:3F:2A:FE:82:F1
Authority key identifier: 24:06:20:81:21:EB:A3:FC:74:36:1C:89:E6:35:60:B4:98:6D:DF:08
Certificate issuer: /CN=A915D35E/serialNumber=2406208121EBA3FC74361C89E63560B4986DDF08
Certificate serial: 0883
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.mft
Manifest number: 085C
Signing time: Sat 04 Apr 2026 20:35:41 +0000
Manifest this update: Sat 04 Apr 2026 20:35:40 +0000
Manifest next update: Sat 11 Apr 2026 20:35:40 +0000
Files and hashes: 1: JAYggSHro_x0NhyJ5jVgtJht3wg.crl (hash: +oevUq1f/CcsCpxNhrwJarlumyzP26W9rHMv/8AygZE=)
2: 7AE0B322AFEB11F08458536FC4F9AE02.roa (hash: lvBgsJNBEu3OJi7G0u8obCCadwKeypPMdN+vG2Lispo=)
3: 997C96220CC211ED8C32645BC4F9AE02.roa (hash: m0VczHunCUj3NnxAFWU5QA67YBiWaVQ6jnViwqflf+8=)
4: F5CABDCAAFEC11F09FCD3B73C4F9AE02.roa (hash: EUsut2FLyF5LpYeC+ChqBUx/d1bJvIhQE3FoslwFs7U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.crl
rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 20:35:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2179 (0x883)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D35E, serialNumber=2406208121EBA3FC74361C89E63560B4986DDF08
Validity
Not Before: Apr 4 20:35:40 2026 GMT
Not After : Apr 11 20:35:40 2026 GMT
Subject: CN=69d1761d-c2e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:97:74:d8:20:0d:f2:17:0e:4d:4c:f3:b6:61:
a8:11:d4:ce:1b:a4:08:86:fc:02:6a:ed:80:12:c4:
c1:f5:28:05:9b:70:be:d6:9c:e6:bc:36:08:f2:a3:
e1:50:1b:d0:5a:47:5e:45:b7:15:c4:41:43:43:b2:
b3:b1:7a:9f:6a:38:62:b0:e5:79:12:03:fa:b1:5b:
88:b2:c8:f4:8e:8a:26:91:ba:ed:30:ef:5f:32:36:
9d:53:63:20:80:82:8f:83:e1:ac:81:a3:06:e1:19:
99:fe:8d:3e:39:96:42:88:c0:bf:f2:18:0e:05:23:
50:9c:ae:ab:1f:f6:22:d8:76:f0:50:b1:86:4d:ab:
11:a6:2a:48:42:29:da:7f:7c:a5:8b:5d:99:96:1f:
c3:14:10:88:0d:27:ae:05:c4:0d:4a:cb:bc:d2:de:
a9:ef:40:69:d0:de:1b:7f:61:f1:f4:41:1a:33:aa:
30:fc:f3:4e:8b:17:a9:2c:00:cc:6a:2d:a7:c2:1e:
08:59:38:a8:45:8a:12:f3:b2:25:a7:19:3c:f6:e7:
94:87:52:83:37:28:dc:61:ff:d1:86:37:c1:24:08:
a8:5d:b5:c7:e0:28:d8:42:d2:88:db:05:f6:bb:eb:
fd:46:86:1d:90:94:56:f2:3d:f5:62:2f:f0:01:74:
b4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:DD:42:D1:23:63:2B:37:EE:AA:45:F8:43:6B:67:3F:2A:FE:82:F1
X509v3 Authority Key Identifier:
keyid:24:06:20:81:21:EB:A3:FC:74:36:1C:89:E6:35:60:B4:98:6D:DF:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:9b:3e:6d:ab:7d:08:fc:86:74:f9:b4:e3:39:d2:3c:8c:fe:
db:e0:17:6e:f0:75:33:c9:7a:2c:b2:8c:cc:fe:d8:ac:07:00:
ea:7d:b1:53:96:74:de:7b:60:60:7a:ed:c9:4e:a4:fa:7e:03:
62:c4:d3:79:a3:f0:2f:07:c6:3e:e9:ec:05:f2:05:2e:d7:89:
a8:1b:20:df:eb:83:41:dc:57:1b:db:7f:5e:19:c7:03:85:c0:
05:0d:aa:ce:1b:aa:0d:01:38:de:e9:41:3c:1c:d4:3e:ea:57:
e1:03:3e:7c:92:74:a4:38:80:54:52:97:70:fe:47:e1:31:72:
ce:66:5e:58:79:2b:f8:77:35:79:3e:1d:08:c3:d4:a7:ee:e2:
25:ec:bc:09:5f:e0:1d:1b:a1:9a:2d:b3:11:2f:02:dd:d5:75:
00:1b:ae:5b:33:29:08:17:82:cb:d2:81:64:f6:d8:83:3a:95:
96:89:14:97:fb:ae:02:5a:0f:cd:71:6a:17:1e:42:b0:04:ba:
dc:e2:15:66:3a:58:c9:a2:c1:15:86:27:e0:57:ee:38:14:83:
ea:19:5b:00:4c:e5:da:36:5f:a9:13:4c:05:97:88:f3:81:3d:
fc:9a:c2:c4:9e:b0:7b:3e:75:11:14:01:97:c3:f2:df:b1:60:
5c:06:9c:aa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUQzNUUxMTAvBgNVBAUTKDI0MDYyMDgxMjFFQkEzRkM3NDM2MUM4OUU2MzU2MEI0
OTg2RERGMDgwHhcNMjYwNDA0MjAzNTQwWhcNMjYwNDExMjAzNTQwWjAYMRYwFAYD
VQQDEw02OWQxNzYxZC1jMmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApZd02CAN8hcOTUzztmGoEdTOG6QIhvwCau2AEsTB9SgFm3C+1pzmvDYI8qPh
UBvQWkdeRbcVxEFDQ7KzsXqfajhisOV5EgP6sVuIssj0joomkbrtMO9fMjadU2Mg
gIKPg+GsgaMG4RmZ/o0+OZZCiMC/8hgOBSNQnK6rH/Yi2HbwULGGTasRpipIQina
f3yli12Zlh/DFBCIDSeuBcQNSsu80t6p70Bp0N4bf2Hx9EEaM6ow/PNOixepLADM
ai2nwh4IWTioRYoS87Ilpxk89ueUh1KDNyjcYf/RhjfBJAioXbXH4CjYQtKI2wX2
u+v9RoYdkJRW8j31Yi/wAXS0eQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB/dQtEj
Yys37qpF+ENrZz8q/oLxMB8GA1UdIwQYMBaAFCQGIIEh66P8dDYcieY1YLSYbd8I
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDM1RS83RDM5NEM2QTAx
NkQxMUVCOEREMkMyNTlDNEY5QUUwMi9KQVlnZ1NIcm9feDBOaHlKNWpWZ3RKaHQz
d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pBWWdnU0hyb194ME5oeUo1alZndEpodDN3Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RDM1RS83RDM5NEM2QTAxNkQxMUVCOEREMkMyNTlDNEY5QUUwMi9KQVlnZ1NIcm9f
eDBOaHlKNWpWZ3RKaHQzd2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoZs+bat9CPyGdPm04znSPIz+2+AXbvB1M8l6LLKMzP7YrAcA6n2xU5Z03ntg
YHrtyU6k+n4DYsTTeaPwLwfGPunsBfIFLteJqBsg3+uDQdxXG9t/XhnHA4XABQ2q
zhuqDQE43ulBPBzUPupX4QM+fJJ0pDiAVFKXcP5H4TFyzmZeWHkr+Hc1eT4dCMPU
p+7iJey8CV/gHRuhmi2zES8C3dV1ABuuWzMpCBeCy9KBZPbYgzqVlokUl/uuAloP
zXFqFx5CsAS63OIVZjpYyaLBFYYn4FfuOBSD6hlbAEzl2jZfqRNMBZeI84E9/JrC
xJ6wez51ERQBl8Py37FgXAacqg==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:02 2026 by rpki-client