
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft
File: JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft (raw, json)
Hash identifier: NMXcr4I8MQehSUQ1aOglR63KoW5VfaJ0sghEZkbmCj8=
Subject key identifier: D9:4D:94:CC:CF:F5:80:04:F2:03:A2:18:02:7C:0F:2B:72:6A:37:3C
Authority key identifier: 25:59:CF:5C:80:CB:FD:45:47:20:3B:D0:51:68:CC:36:49:D5:64:C4
Certificate issuer: /CN=A916AA0F/serialNumber=2559CF5C80CBFD4547203BD05168CC3649D564C4
Certificate serial: 25F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft
Manifest number: 25DE
Signing time: Fri 02 Oct 2026 15:49:43 +0000
Manifest this update: Fri 02 Oct 2026 15:49:42 +0000
Manifest next update: Fri 09 Oct 2026 15:49:42 +0000
Files and hashes: 1: JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl (hash: K6E+y3A74R5SHwBVjiUR58xUEXTw2EZhACjzH1bU02A=)
2: DFA7FACA54F711E7BFB4804BC4F9AE02.roa (hash: 0hrvh4D9EDd6MqNbEXtgkqXuTp28uKtsLouLemWrWd4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl
rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 15:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9719 (0x25f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916AA0F, serialNumber=2559CF5C80CBFD4547203BD05168CC3649D564C4
Validity
Not Before: Oct 2 15:49:42 2026 GMT
Not After : Oct 9 15:49:42 2026 GMT
Subject: CN=6abfd296-c4fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a8:67:c1:06:dc:e2:30:cb:2c:72:76:72:51:
87:55:26:5a:a7:f0:71:03:33:99:e1:fa:6c:92:1f:
e1:a5:2b:57:68:52:9e:03:2c:c1:52:4c:f9:86:df:
3b:54:bb:69:1e:d1:fb:e8:22:98:07:44:1b:47:04:
04:76:0d:83:4f:74:24:2d:f5:75:6b:19:06:4b:5e:
b4:71:4d:32:2e:8a:05:bc:8e:b8:d0:aa:13:39:9d:
e2:9f:99:67:bb:b3:dc:02:10:d2:45:2e:6f:72:5d:
3c:db:60:36:db:7a:25:23:7e:0b:c2:00:94:63:53:
d7:16:3c:6c:c1:26:7c:bc:a9:b7:c8:cb:27:dc:92:
59:6d:29:a1:f2:3b:38:5d:cc:7c:12:86:49:d0:88:
6c:23:11:81:7f:ed:4e:c8:d6:98:80:18:71:95:3e:
4c:64:51:06:62:35:be:6a:e9:c4:12:33:a8:73:64:
b1:cd:36:b8:00:51:f1:e5:3a:21:43:97:48:9e:c2:
26:43:f6:8d:2a:1b:0b:9c:36:93:3c:37:d5:6f:68:
45:eb:84:f2:5b:7d:18:57:44:9f:eb:33:2e:dc:3b:
30:a0:f0:60:b1:f1:43:76:ed:a5:ee:85:c4:f7:05:
27:cb:32:f8:10:dc:87:96:20:fa:ae:9f:4e:97:f2:
42:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:4D:94:CC:CF:F5:80:04:F2:03:A2:18:02:7C:0F:2B:72:6A:37:3C
X509v3 Authority Key Identifier:
keyid:25:59:CF:5C:80:CB:FD:45:47:20:3B:D0:51:68:CC:36:49:D5:64:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:8c:fd:6a:39:cf:e9:db:9b:8b:08:62:77:9b:f3:30:e6:ab:
c5:4b:e0:dc:fb:25:af:ca:9d:6a:7a:9f:82:03:88:10:f3:78:
51:f6:1a:61:92:2e:b0:6e:e9:9b:72:4b:d7:37:34:1d:ec:95:
1f:38:27:1f:20:ef:84:23:e6:2d:c1:fd:d6:43:7a:bc:36:4b:
08:35:d0:d6:03:a2:a7:7c:71:aa:3e:6e:09:ed:e6:43:0e:2a:
aa:a0:f9:9f:45:3e:24:64:33:69:7d:34:17:d8:2d:b8:06:ce:
47:ad:1b:e2:6d:66:5b:0f:af:ce:51:a0:1c:94:04:93:7f:fc:
06:41:98:3c:25:f6:83:87:81:74:87:89:6e:68:cf:94:c8:43:
86:7e:65:2f:0c:9b:43:2d:52:cf:27:34:fb:5a:bb:bd:d3:54:
a2:55:47:2f:0c:40:b5:0b:bb:28:6c:a5:b0:99:9a:37:9e:0b:
1a:bf:a5:72:fb:fb:66:d7:43:75:e4:cc:66:00:bc:e3:5f:9f:
0d:9e:b3:a9:2b:78:6b:78:b7:db:b4:52:1e:52:66:ca:94:6b:
ae:ea:01:30:a1:9a:47:81:e1:1d:46:ab:2e:ee:4c:a6:e0:9a:
0c:29:2d:8f:60:9a:df:ea:20:99:0c:97:62:62:de:de:44:13:
4e:41:d8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:42:49 2026 by rpki-client