
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft
File: JYXaC5gKR_66DiNSBd7uQC8gs8s.mft (raw, json)
Hash identifier: i73aIYSItvQfjGQIWmRUlkNBbfzccu6kmBy0sAcNwTo=
Subject key identifier: 9C:52:DB:FB:A0:11:AE:2F:84:32:D6:7B:BF:23:FF:1D:89:75:F3:9A
Authority key identifier: 25:85:DA:0B:98:0A:47:FE:BA:0E:23:52:05:DE:EE:40:2F:20:B3:CB
Certificate issuer: /CN=A919B63C/serialNumber=2585DA0B980A47FEBA0E235205DEEE402F20B3CB
Certificate serial: 3575
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft
Manifest number: 3542
Signing time: Sat 04 Apr 2026 14:52:09 +0000
Manifest this update: Sat 04 Apr 2026 14:52:08 +0000
Manifest next update: Sat 11 Apr 2026 14:52:08 +0000
Files and hashes: 1: JYXaC5gKR_66DiNSBd7uQC8gs8s.crl (hash: QgCh3OU9sx9QSGV6iAdwUu6bEa60aVl54DFvw9vvm/E=)
2: AE0AC88EBBF511ECAA816D52C4F9AE02.roa (hash: LkOFtlvDvVHc0ZNLuKrnvGYIEotlD6j+W+85rR40mHY=)
3: 547D2C14BBDF11ECA1F12A0DC4F9AE02.roa (hash: 3ig2r60kyfmtYJRWGcIJl7cKFWqwv9xiBJqPqUpD+eM=)
4: B054EA98BBF511ECAA816D52C4F9AE02.roa (hash: +OUonNoiyUOGF0f4Z3OGxLOQzJKSnBzUR9bxqdYodV8=)
5: 9343CE6EE07211E7995BD42EC4F9AE02.roa (hash: zsd1YPRYIIbXeUvGCOJGUA1HAh90PsLIwSx0tabJHcU=)
6: AF00AECABBF511ECAA816D52C4F9AE02.roa (hash: aH4iu9X+4P6MZeDtIF9t7IKHGLI6a0EK+DvaoXs0IFs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.crl
rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 14:52:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13685 (0x3575)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B63C, serialNumber=2585DA0B980A47FEBA0E235205DEEE402F20B3CB
Validity
Not Before: Apr 4 14:52:08 2026 GMT
Not After : Apr 11 14:52:08 2026 GMT
Subject: CN=69d12599-5b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:07:3a:15:4f:89:1e:f9:4a:3a:cb:a2:cc:9e:
b8:8a:d8:ad:79:a7:ac:bf:06:d5:b4:8c:31:f4:05:
ef:39:f4:cb:de:16:a7:bc:00:d7:50:6c:78:e6:40:
78:4a:37:a0:d6:15:7f:a4:11:73:45:65:61:6e:1b:
bf:32:20:81:e3:75:0e:eb:d6:91:ed:c7:4c:dd:49:
b2:e6:63:75:60:4a:64:75:9b:75:b2:a0:b5:6d:5a:
a2:cd:21:1b:d8:47:f9:3d:ff:04:da:a1:2d:38:8e:
61:61:99:26:04:e6:ee:a4:72:21:d3:2a:96:6e:62:
5c:5b:d1:6a:ac:51:92:20:e3:2e:f6:7c:80:c1:8a:
3c:d8:c6:f3:00:ab:18:80:ba:cb:ce:14:32:a8:77:
31:f7:79:2e:e9:87:b5:70:8a:fe:ee:6e:d5:e2:52:
2a:cb:21:37:7e:18:63:e2:c2:ee:17:1c:0a:d3:f4:
6f:7a:96:64:2a:7e:94:3a:70:66:29:01:a6:43:25:
84:63:cf:e4:18:ad:ce:4b:ad:9b:95:01:7d:9b:fd:
6b:42:40:10:f9:63:44:de:41:27:31:da:5a:34:14:
51:94:53:2f:5b:8e:05:f8:35:10:03:26:de:56:f3:
8b:3e:18:7c:39:bb:a4:e2:26:76:5b:b0:48:e9:64:
8c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:52:DB:FB:A0:11:AE:2F:84:32:D6:7B:BF:23:FF:1D:89:75:F3:9A
X509v3 Authority Key Identifier:
keyid:25:85:DA:0B:98:0A:47:FE:BA:0E:23:52:05:DE:EE:40:2F:20:B3:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:96:af:dc:fd:f6:75:e2:b8:d1:b7:1b:eb:7d:b8:21:6c:23:
75:59:63:da:dc:47:cf:bc:ad:c8:c4:32:1b:76:2c:99:da:41:
68:7f:05:a7:de:77:6c:15:11:d3:58:52:6f:94:03:33:8f:87:
45:42:10:ae:85:ad:23:81:f0:34:0e:82:42:d5:19:b1:71:63:
5e:ce:dd:48:c0:87:e8:ff:87:d4:31:86:fb:de:06:9b:82:14:
cb:64:c5:dc:d6:f3:39:55:e6:b9:ee:b0:5f:27:e4:71:e4:1b:
e9:24:d8:d5:cd:1b:51:9d:62:cd:f7:a1:87:d5:a7:70:93:2f:
68:3f:c9:04:6d:82:64:09:40:c7:46:e1:da:10:50:ca:d5:01:
a6:99:87:7c:9a:bd:bc:f0:91:82:a0:0a:c7:e7:71:4d:f7:7f:
2c:ea:d3:63:26:d8:ca:66:98:27:31:75:89:9f:69:8f:39:ea:
7d:4d:06:1d:40:c8:8c:b8:6d:e2:5b:f9:f8:c1:22:61:10:3e:
55:99:65:ae:76:84:0b:dd:39:0e:39:a6:ae:74:af:73:fb:95:
2b:9c:5d:9d:cf:db:6a:5d:a1:22:98:5e:5c:80:61:a8:ed:13:
77:f6:a6:55:90:90:b1:15:cf:aa:53:87:a0:6d:da:23:f8:e4:
16:90:7c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:02 2026 by rpki-client