
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.mft
File: JAYggSHro_x0NhyJ5jVgtJht3wg.mft (raw, json)
Hash identifier: K04J09f3togIt7Nanvt9bp02dDpVPX66hCG/hH7C1Ew=
Subject key identifier: 73:BF:AC:04:B1:C5:5C:2E:2E:01:5E:BA:F4:3B:FF:7F:8A:81:9B:D4
Authority key identifier: 24:06:20:81:21:EB:A3:FC:74:36:1C:89:E6:35:60:B4:98:6D:DF:08
Certificate issuer: /CN=A915D35E/serialNumber=2406208121EBA3FC74361C89E63560B4986DDF08
Certificate serial: 08AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.mft
Manifest number: 0887
Signing time: Mon 22 Jun 2026 20:44:55 +0000
Manifest this update: Mon 22 Jun 2026 20:44:55 +0000
Manifest next update: Mon 29 Jun 2026 20:44:55 +0000
Files and hashes: 1: JAYggSHro_x0NhyJ5jVgtJht3wg.crl (hash: kZlcO3B6I/DY1kGc35HGt3pkiypq8OmlAr/raVu2lx8=)
2: 7AE0B322AFEB11F08458536FC4F9AE02.roa (hash: 9sJCZKKfgfjBQ9o8IhmGd8UYq/aKs+NwoAZL/4isg5g=)
3: 997C96220CC211ED8C32645BC4F9AE02.roa (hash: m0VczHunCUj3NnxAFWU5QA67YBiWaVQ6jnViwqflf+8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.crl
rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 20:44:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2223 (0x8af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D35E, serialNumber=2406208121EBA3FC74361C89E63560B4986DDF08
Validity
Not Before: Jun 22 20:44:55 2026 GMT
Not After : Jun 29 20:44:55 2026 GMT
Subject: CN=6a399ec7-49d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7e:7e:b3:08:b7:26:db:3a:99:c9:7a:63:ab:
2a:1f:54:22:4f:be:56:4c:b8:1b:ef:5e:6c:1f:f6:
49:57:af:9d:11:d9:64:da:a1:38:e5:ed:2c:6e:15:
05:a0:31:b6:01:e8:34:7c:60:b5:d5:f4:d1:3b:94:
a8:31:ec:d5:9d:cd:71:c5:76:f5:e6:d2:0a:29:58:
c9:a6:d5:69:82:ec:eb:d8:0e:aa:d3:3e:c8:4f:82:
5a:f8:a6:b6:26:82:46:70:e0:cb:29:c0:3e:6a:31:
4e:63:ab:a3:0b:dc:4d:46:06:d4:65:8e:65:98:70:
b2:86:c6:8e:25:a1:71:e7:37:fc:42:12:25:4e:d8:
e1:a5:58:35:64:ee:53:a4:47:cd:a9:18:b1:67:5c:
90:5b:cb:e2:58:30:98:06:18:3a:c8:6a:df:3b:89:
14:9d:a3:60:51:af:19:b6:eb:a0:5a:57:57:c6:82:
c5:d1:c2:10:31:af:9f:4f:4a:aa:36:ca:aa:e5:4c:
dc:ae:6a:7a:7c:1c:a6:86:c2:c4:70:4c:70:98:98:
52:35:d8:f2:a4:05:3f:aa:16:46:26:c2:51:41:84:
7d:2d:a6:14:52:e1:79:4c:2a:ab:7e:2c:a7:29:1a:
14:a5:d0:27:9a:d1:a1:f2:91:85:8a:c8:1e:9a:7f:
c1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:BF:AC:04:B1:C5:5C:2E:2E:01:5E:BA:F4:3B:FF:7F:8A:81:9B:D4
X509v3 Authority Key Identifier:
keyid:24:06:20:81:21:EB:A3:FC:74:36:1C:89:E6:35:60:B4:98:6D:DF:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:3e:d8:06:e8:f4:db:22:eb:64:26:c2:9f:f1:43:d0:60:52:
08:d9:ce:21:58:92:fc:f1:97:a4:12:6f:56:c2:05:62:54:ea:
c5:ed:ca:bb:a5:ae:74:ec:d7:2d:f2:da:49:9e:cd:33:ca:d7:
ce:03:06:02:44:d8:74:29:a1:b5:a7:76:5d:a6:e6:30:32:22:
2a:60:0d:71:66:c7:ba:cf:19:8e:5f:08:53:fd:4a:fb:0b:c2:
3a:b4:f6:56:bc:32:83:34:05:58:22:aa:a6:0a:2a:f5:58:10:
4f:51:e9:a6:76:87:bf:7f:77:90:ba:9f:65:87:42:39:23:db:
c8:d3:d1:69:7f:bf:dc:28:bd:9e:49:b6:77:07:5d:9c:64:30:
03:61:2c:60:cd:13:6f:a2:b2:94:97:5e:e9:1b:b8:63:a2:f6:
97:c7:46:c5:59:57:4d:c9:3e:5a:52:41:b5:d6:e6:4e:a9:a9:
ac:7f:60:47:08:7a:00:12:b1:b7:77:57:89:79:a2:7d:9a:24:
98:34:c7:af:fc:ec:72:26:7c:35:58:ea:db:00:66:62:e9:05:
8a:fb:f6:88:1e:18:c5:3d:f5:03:8f:2d:13:57:82:30:d8:22:
5a:a6:db:26:ce:39:52:95:44:f6:9d:81:46:64:12:22:b7:3c:
3c:6f:70:03
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUQzNUUxMTAvBgNVBAUTKDI0MDYyMDgxMjFFQkEzRkM3NDM2MUM4OUU2MzU2MEI0
OTg2RERGMDgwHhcNMjYwNjIyMjA0NDU1WhcNMjYwNjI5MjA0NDU1WjAYMRYwFAYD
VQQDEw02YTM5OWVjNy00OWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs35+swi3Jts6mcl6Y6sqH1QiT75WTLgb715sH/ZJV6+dEdlk2qE45e0sbhUF
oDG2Aeg0fGC11fTRO5SoMezVnc1xxXb15tIKKVjJptVpguzr2A6q0z7IT4Ja+Ka2
JoJGcODLKcA+ajFOY6ujC9xNRgbUZY5lmHCyhsaOJaFx5zf8QhIlTtjhpVg1ZO5T
pEfNqRixZ1yQW8viWDCYBhg6yGrfO4kUnaNgUa8ZtuugWldXxoLF0cIQMa+fT0qq
Nsqq5Uzcrmp6fBymhsLEcExwmJhSNdjypAU/qhZGJsJRQYR9LaYUUuF5TCqrfiyn
KRoUpdAnmtGh8pGFisgemn/BdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHO/rASx
xVwuLgFeuvQ7/3+KgZvUMB8GA1UdIwQYMBaAFCQGIIEh66P8dDYcieY1YLSYbd8I
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDM1RS83RDM5NEM2QTAx
NkQxMUVCOEREMkMyNTlDNEY5QUUwMi9KQVlnZ1NIcm9feDBOaHlKNWpWZ3RKaHQz
d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pBWWdnU0hyb194ME5oeUo1alZndEpodDN3Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RDM1RS83RDM5NEM2QTAxNkQxMUVCOEREMkMyNTlDNEY5QUUwMi9KQVlnZ1NIcm9f
eDBOaHlKNWpWZ3RKaHQzd2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACT7YBuj02yLrZCbCn/FD0GBSCNnOIViS/PGXpBJvVsIFYlTqxe3Ku6WudOzX
LfLaSZ7NM8rXzgMGAkTYdCmhtad2XabmMDIiKmANcWbHus8Zjl8IU/1K+wvCOrT2
VrwygzQFWCKqpgoq9VgQT1HppnaHv393kLqfZYdCOSPbyNPRaX+/3Ci9nkm2dwdd
nGQwA2EsYM0Tb6KylJde6Ru4Y6L2l8dGxVlXTck+WlJBtdbmTqmprH9gRwh6ABKx
t3dXiXmifZokmDTHr/zsciZ8NVjq2wBmYukFivv2iB4YxT31A48tE1eCMNgiWqbb
Js45UpVE9p2BRmQSIrc8PG9wAw==
-----END CERTIFICATE-----
Generated at Wed Jun 24 11:28:23 2026 by rpki-client