
$ rpki-client -vvf rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft
File: JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft (raw, json)
Hash identifier: 9cOLDJbLIKUC+TGE2F9RbmisLhA52OL8C8Vl8K7WqUg=
Subject key identifier: D3:5E:ED:9C:F0:92:8D:89:8E:BC:F9:F7:0D:96:13:90:E5:77:9A:E3
Authority key identifier: 25:59:CF:5C:80:CB:FD:45:47:20:3B:D0:51:68:CC:36:49:D5:64:C4
Certificate issuer: /CN=A916AA0F/serialNumber=2559CF5C80CBFD4547203BD05168CC3649D564C4
Certificate serial: 25AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft
Manifest number: 2597
Signing time: Wed 20 May 2026 15:44:36 +0000
Manifest this update: Wed 20 May 2026 15:44:35 +0000
Manifest next update: Wed 27 May 2026 15:44:35 +0000
Files and hashes: 1: JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl (hash: ohFLsI+q3mTdhfbEpoAmJGBSLFwgn5QVyIFf0GbV02w=)
2: DFA7FACA54F711E7BFB4804BC4F9AE02.roa (hash: hS+s1nIXItEij56ye/fB0UYF3lqIxxiOI5UAFSDn8N8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl
rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 15:44:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9647 (0x25af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916AA0F, serialNumber=2559CF5C80CBFD4547203BD05168CC3649D564C4
Validity
Not Before: May 20 15:44:35 2026 GMT
Not After : May 27 15:44:35 2026 GMT
Subject: CN=6a0dd6e3-84da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:39:07:19:37:b7:1d:07:b1:4b:f5:60:75:4f:
38:45:e8:64:0a:e7:1a:9d:c6:bc:d0:49:7f:e4:36:
af:bb:33:cb:eb:76:00:50:18:2b:b8:4c:f3:73:d8:
ca:6f:cc:16:9e:a7:98:09:b2:b9:db:77:4f:e4:1b:
2c:cf:15:52:f8:c5:62:c5:5e:dc:d7:aa:58:74:9d:
c0:91:df:29:b7:90:38:b4:b4:00:6c:46:87:1c:23:
65:74:20:c2:b0:ec:0b:ae:33:d0:ed:da:5e:d6:d1:
b2:f2:4a:66:13:48:31:1c:c8:0d:f5:55:66:23:21:
a2:7a:fb:da:0f:65:10:10:e8:c3:8d:09:24:19:8c:
5f:cb:e8:09:00:ef:0e:e4:14:0f:e1:1b:db:e0:06:
e7:81:10:9c:9e:5d:61:b1:3c:f4:d0:84:a7:d7:a6:
e6:ef:6a:ba:df:c3:e3:2f:59:99:9f:7a:4e:86:a8:
4e:d4:2c:be:4a:cd:90:3b:6a:f0:87:ad:e9:dd:8c:
f8:2f:70:ce:c1:b4:e6:cc:12:4e:63:ef:3e:24:bc:
5a:44:8e:6c:cb:bb:85:01:36:2a:31:b7:85:d1:16:
21:67:8a:6a:74:cf:52:90:2d:de:2a:d9:89:83:d2:
8c:c2:5e:53:33:12:f3:07:26:39:ee:ed:99:3e:36:
4a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:5E:ED:9C:F0:92:8D:89:8E:BC:F9:F7:0D:96:13:90:E5:77:9A:E3
X509v3 Authority Key Identifier:
keyid:25:59:CF:5C:80:CB:FD:45:47:20:3B:D0:51:68:CC:36:49:D5:64:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:9b:86:67:25:90:9e:e6:66:62:4f:4c:53:6d:ab:b7:0c:97:
6f:fa:7e:f9:60:4f:2c:9a:86:b5:e5:30:1f:2b:c8:17:98:f0:
0f:d8:73:d7:89:5c:16:e2:33:fe:ae:7e:7f:02:76:4b:6c:3c:
af:3e:09:76:87:69:0f:58:da:c7:88:b8:5a:3f:74:6c:93:96:
da:6a:ab:15:e0:90:7c:a9:b5:70:44:07:b2:b6:c3:18:5f:5f:
5d:58:b2:5d:fa:b5:71:f1:f8:e7:4d:c1:99:53:8e:78:51:dd:
e6:3b:6a:92:41:7b:54:c9:a6:8f:4d:3b:d8:1c:0b:e7:e1:57:
06:f5:72:a9:1f:51:62:49:81:7b:d4:ae:0c:b5:9f:a3:a9:63:
58:5e:50:0d:65:4a:3c:56:2e:41:a4:25:14:de:a2:d3:f4:6c:
71:55:0d:b1:79:f5:12:70:7e:18:ee:72:01:3b:9f:a0:9c:22:
fb:6c:12:a8:c6:3a:5e:9b:cd:9e:c6:d7:b8:33:0b:ee:93:9e:
08:a5:73:18:89:67:ac:22:f1:23:83:81:ae:c5:64:10:1f:8f:
a1:a1:1b:eb:ae:0b:d6:9d:45:33:11:85:43:4b:41:a7:f8:b0:
ac:9f:58:99:1f:92:8c:ec:1c:93:30:f7:f1:dc:43:c3:59:bb:
24:af:a9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:40:11 2026 by rpki-client