
$ rpki-client -vvf rpki.apnic.net/member_repository/A918497E/C320C226B5D811EE8DA66D85C4F9AE02/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.mft
File: jUv3mkGe7A-lM-X8pQ_zcqM8s5A.mft (raw, json)
Hash identifier: Fz3OmU9Npj3taSD4snMBMHjMRpf7Jd1T3gYVNJEAksY=
Subject key identifier: 3C:80:4A:4C:CA:C2:C7:DF:5F:D0:43:1B:D6:F6:D5:69:2D:76:B9:3C
Authority key identifier: 8D:4B:F7:9A:41:9E:EC:0F:A5:33:E5:FC:A5:0F:F3:72:A3:3C:B3:90
Certificate issuer: /CN=A918497E/serialNumber=8D4BF79A419EEC0FA533E5FCA50FF372A33CB390
Certificate serial: 01C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918497E/C320C226B5D811EE8DA66D85C4F9AE02/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.mft
Manifest number: 01C4
Signing time: Mon 01 Jun 2026 04:37:19 +0000
Manifest this update: Mon 01 Jun 2026 04:37:19 +0000
Manifest next update: Mon 08 Jun 2026 04:37:19 +0000
Files and hashes: 1: jUv3mkGe7A-lM-X8pQ_zcqM8s5A.crl (hash: VTul175VMJIGBq59XA1FbXtG/D8a/b/87dgUXhcZhgQ=)
2: D8FEAF6C637611EFB2D9FD47C4F9AE02.roa (hash: Vy56QzLj3xyE23NG6q6W7GkOltoRSJz12saYaOd0mlc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918497E/C320C226B5D811EE8DA66D85C4F9AE02/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.crl
rsync://rpki.apnic.net/member_repository/A918497E/C320C226B5D811EE8DA66D85C4F9AE02/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 04:37:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 457 (0x1c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918497E, serialNumber=8D4BF79A419EEC0FA533E5FCA50FF372A33CB390
Validity
Not Before: Jun 1 04:37:19 2026 GMT
Not After : Jun 8 04:37:19 2026 GMT
Subject: CN=6a1d0c7f-cafb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e7:83:2d:d4:7a:b5:2e:3c:a6:e7:4b:6f:f2:
46:91:79:fd:9a:d6:b4:28:e9:23:8c:25:7e:68:ae:
e5:f8:28:e3:5c:db:97:99:b2:ed:26:ad:a4:e6:69:
d4:bf:e5:a8:3f:7f:dc:48:8c:69:cb:59:9d:24:23:
10:01:23:71:ee:85:64:07:e2:52:c8:4e:26:ee:99:
c5:b6:39:1e:46:b4:1c:c3:d8:3f:ce:2f:b5:ef:85:
cf:ea:ff:96:db:64:6f:2b:8d:a4:81:f6:65:e9:6a:
4c:25:84:6c:08:97:54:7a:73:24:b2:86:6e:87:43:
1a:e9:50:52:fc:6f:06:f8:3e:45:68:5d:c9:6e:51:
e0:6d:36:8e:ed:50:95:ec:3b:29:92:ba:0b:bb:0c:
e4:04:33:b2:94:21:9d:b9:7b:fe:ee:87:d4:2b:2e:
88:a9:f0:50:39:cc:67:4d:87:31:2a:58:18:b3:a3:
11:60:fb:23:48:ba:bd:45:83:6f:cd:8b:6f:54:04:
22:7d:15:b6:2e:3d:ef:00:28:88:a9:65:0f:a0:a1:
b1:32:1e:80:64:1c:de:57:aa:13:b6:75:4e:2c:42:
7d:55:16:bd:c2:41:d4:7c:18:54:5c:8d:83:9a:bc:
ac:61:98:a8:1c:7e:38:cf:3d:d4:06:13:15:08:0c:
5c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:80:4A:4C:CA:C2:C7:DF:5F:D0:43:1B:D6:F6:D5:69:2D:76:B9:3C
X509v3 Authority Key Identifier:
keyid:8D:4B:F7:9A:41:9E:EC:0F:A5:33:E5:FC:A5:0F:F3:72:A3:3C:B3:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918497E/C320C226B5D811EE8DA66D85C4F9AE02/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918497E/C320C226B5D811EE8DA66D85C4F9AE02/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:f6:52:5f:f8:57:b4:fa:90:de:2b:f8:cc:d5:9b:97:0b:fb:
0e:d9:dd:2f:56:52:49:ec:dc:ab:f4:7f:05:12:51:aa:45:7c:
7f:9c:18:b4:c3:14:a7:24:83:d9:bc:1c:8c:cc:8b:82:9f:c3:
23:d2:65:3c:bd:71:f7:47:3f:64:c8:d5:38:e1:90:71:f9:7a:
8b:16:53:1c:ff:d7:5c:6a:a4:6f:25:5d:f7:93:6b:0f:14:b4:
75:10:a9:e5:4a:c3:09:71:c6:13:2d:99:f1:3a:7c:22:b1:f8:
90:9c:d1:66:46:6d:e2:24:be:93:9a:f9:a9:7b:66:98:67:69:
f4:06:54:88:0a:3e:56:cf:00:3a:db:8a:20:66:0e:89:b1:12:
9c:99:e9:19:28:48:0f:01:3a:c7:1d:4f:59:4a:e5:4c:df:09:
7f:80:48:e1:cb:4f:21:ca:fb:0c:4a:bf:bc:90:ba:d0:85:59:
18:27:d0:c9:51:ed:38:b1:4b:e0:5d:f5:e2:67:88:9c:3a:d0:
61:73:92:a1:e7:b1:49:e8:ca:2c:7c:27:00:46:ad:70:c4:f4:
74:78:2e:a9:ee:5f:69:d3:71:bc:5e:c2:c1:b3:74:a8:45:8d:
b1:7e:7b:18:06:cb:90:22:f8:23:5e:34:e3:4d:37:b0:f4:cd:
cb:2e:e1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:20:47 2026 by rpki-client