
$ rpki-client -vvf rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft
File: JBKHZDDirPShqD5aV1x_l6srOy4.mft (raw, json)
Hash identifier: caoRr8FypXdDztKQuKk1H4bm7BScY8ja5cv1zONQDDY=
Subject key identifier: 31:B5:36:93:D4:3A:47:30:9E:12:58:F2:82:89:DF:1C:3E:FF:A9:81
Authority key identifier: 24:12:87:64:30:E2:AC:F4:A1:A8:3E:5A:57:5C:7F:97:AB:2B:3B:2E
Certificate issuer: /CN=A918BBEF/serialNumber=2412876430E2ACF4A1A83E5A575C7F97AB2B3B2E
Certificate serial: 06F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JBKHZDDirPShqD5aV1x_l6srOy4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft
Manifest number: 06DF
Signing time: Tue 02 Jun 2026 22:19:09 +0000
Manifest this update: Tue 02 Jun 2026 22:19:08 +0000
Manifest next update: Tue 09 Jun 2026 22:19:08 +0000
Files and hashes: 1: JBKHZDDirPShqD5aV1x_l6srOy4.crl (hash: HABGxObX3Ou8/6l/mFzBlVJft/G3dwTdGFtjYrDOvwI=)
2: 28D28DD0F1B511EE83596382C4F9AE02.roa (hash: Tsypd5PAGds9yTda5JDqiyaHkJ9ezgmOq8JDQWBskdY=)
3: 07BB530CF1B511EEACF12582C4F9AE02.roa (hash: nYcIeQB9IcGgvExSEHIx6oDpzX1PN/jNpepkPKnRr64=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.crl
rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JBKHZDDirPShqD5aV1x_l6srOy4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Jun 2026 22:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1782 (0x6f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918BBEF, serialNumber=2412876430E2ACF4A1A83E5A575C7F97AB2B3B2E
Validity
Not Before: Jun 2 22:19:08 2026 GMT
Not After : Jun 9 22:19:08 2026 GMT
Subject: CN=6a1f56dc-708d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:05:56:f8:a7:19:b0:fc:d4:e1:59:b7:a8:76:
66:0e:0d:de:8a:f5:7b:3c:28:a1:84:02:a7:af:41:
6c:b9:3d:e4:62:12:5e:ce:bb:78:9d:36:0f:3c:94:
4e:0f:c1:37:7d:a6:45:a7:3b:50:33:71:95:22:b2:
d3:66:1d:3a:64:93:5d:59:da:66:2e:55:da:fd:f8:
78:38:89:74:c3:6f:89:73:e8:09:d0:6e:7a:0c:f8:
d3:e6:9b:c8:6b:88:6c:6a:bf:9e:b0:26:5b:f2:c4:
41:6e:20:0d:e9:9e:9a:e4:50:9b:14:01:e4:03:c9:
16:26:09:d3:c0:54:b7:bd:1b:7e:0d:af:70:53:99:
69:6c:f1:fe:97:aa:b1:f1:6c:7a:c6:09:03:d2:9e:
ba:82:11:91:f5:bc:1e:fc:20:52:34:c4:96:95:1a:
a2:d4:bc:3f:ee:c4:a1:92:b8:b9:80:0f:39:33:a9:
b7:77:1a:8a:90:5b:40:45:ac:b7:68:7e:99:6d:e6:
64:aa:53:ff:b2:de:b8:36:d0:0d:22:d2:d7:07:b1:
9c:8f:d8:e2:e1:c6:60:ce:0c:cf:e7:3e:cb:06:9f:
44:3e:9e:09:14:55:d7:6d:e6:3f:c5:2a:47:0b:38:
43:b4:62:27:22:54:b2:22:e2:0d:2d:82:3f:2d:df:
59:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B5:36:93:D4:3A:47:30:9E:12:58:F2:82:89:DF:1C:3E:FF:A9:81
X509v3 Authority Key Identifier:
keyid:24:12:87:64:30:E2:AC:F4:A1:A8:3E:5A:57:5C:7F:97:AB:2B:3B:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JBKHZDDirPShqD5aV1x_l6srOy4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:21:56:08:9d:0a:2e:dc:aa:d9:be:71:d2:51:14:3f:fa:91:
ea:2d:eb:67:96:42:10:49:3f:e2:fe:f7:19:cd:35:7e:6a:15:
cb:0f:e5:32:64:d8:44:cc:27:d7:38:59:e1:ae:bb:90:bd:5b:
0a:6c:5d:1c:9c:0e:36:0b:49:b2:b1:b7:0f:36:62:9f:09:7b:
d3:aa:ec:73:67:c5:95:33:03:35:1e:f8:a3:05:6b:bb:62:f4:
5c:06:3d:ae:82:3d:28:91:40:c7:e4:e1:15:2b:27:31:d9:37:
93:ed:47:11:49:e1:48:5e:5c:76:7c:ab:c8:d8:02:22:c1:b8:
66:b5:ec:c9:4a:07:f1:fb:63:f8:9a:98:09:98:c9:d3:af:60:
93:98:86:06:17:b6:15:4b:46:a9:7d:a9:d0:09:74:ff:50:13:
f8:db:5e:cd:0f:09:37:dc:d1:a8:61:7a:84:4d:82:fc:89:fd:
db:e6:6b:36:59:ef:b6:5d:4c:32:d3:15:70:79:01:28:35:4e:
0b:fa:04:25:7f:7a:15:51:b6:19:b8:54:43:3c:a1:96:74:7b:
1b:7e:b0:27:44:14:0f:f0:74:a7:66:ad:e2:4b:b0:da:b0:ec:
72:eb:f6:f8:3a:cb:50:14:a5:03:3c:bb:77:0c:4e:3f:45:31:
b5:c6:50:e5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBvYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEJCRUYxMTAvBgNVBAUTKDI0MTI4NzY0MzBFMkFDRjRBMUE4M0U1QTU3NUM3Rjk3
QUIyQjNCMkUwHhcNMjYwNjAyMjIxOTA4WhcNMjYwNjA5MjIxOTA4WjAYMRYwFAYD
VQQDEw02YTFmNTZkYy03MDhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkwVW+KcZsPzU4Vm3qHZmDg3eivV7PCihhAKnr0FsuT3kYhJezrt4nTYPPJRO
D8E3faZFpztQM3GVIrLTZh06ZJNdWdpmLlXa/fh4OIl0w2+Jc+gJ0G56DPjT5pvI
a4hsar+esCZb8sRBbiAN6Z6a5FCbFAHkA8kWJgnTwFS3vRt+Da9wU5lpbPH+l6qx
8Wx6xgkD0p66ghGR9bwe/CBSNMSWlRqi1Lw/7sShkri5gA85M6m3dxqKkFtARay3
aH6ZbeZkqlP/st64NtANItLXB7Gcj9ji4cZgzgzP5z7LBp9EPp4JFFXXbeY/xSpH
CzhDtGInIlSyIuINLYI/Ld9ZfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDG1NpPU
OkcwnhJY8oKJ3xw+/6mBMB8GA1UdIwQYMBaAFCQSh2Qw4qz0oag+Wldcf5erKzsu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkJFRi9GNzkxQzM3RUEw
NDIxMUVCODU2OTlFMjFDNEY5QUUwMi9KQktIWkREaXJQU2hxRDVhVjF4X2w2c3JP
eTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pCS0haRERpclBTaHFENWFWMXhfbDZzck95NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QkJFRi9GNzkxQzM3RUEwNDIxMUVCODU2OTlFMjFDNEY5QUUwMi9KQktIWkREaXJQ
U2hxRDVhVjF4X2w2c3JPeTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALiFWCJ0KLtyq2b5x0lEUP/qR6i3rZ5ZCEEk/4v73Gc01fmoVyw/lMmTYRMwn
1zhZ4a67kL1bCmxdHJwONgtJsrG3DzZinwl706rsc2fFlTMDNR74owVru2L0XAY9
roI9KJFAx+ThFSsnMdk3k+1HEUnhSF5cdnyryNgCIsG4ZrXsyUoH8ftj+JqYCZjJ
069gk5iGBhe2FUtGqX2p0Al0/1AT+NtezQ8JN9zRqGF6hE2C/In92+ZrNlnvtl1M
MtMVcHkBKDVOC/oEJX96FVG2GbhUQzyhlnR7G36wJ0QUD/B0p2at4kuw2rDscuv2
+DrLUBSlAzy7dwxOP0UxtcZQ5Q==
-----END CERTIFICATE-----
Generated at Thu Jun 4 04:17:42 2026 by rpki-client