
$ rpki-client -vvf rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.mft
File: JSwA6X56eGlZOIzyBKTH5kVYDGg.mft (raw, json)
Hash identifier: 2kdOnBmcRN+zQFRbrJ0JSnvUDKIvATTkFcJ4gJ4OtmY=
Subject key identifier: 26:A6:0C:27:A3:36:59:E2:F3:E6:7B:3E:F6:6D:FF:67:B3:E4:BB:6C
Authority key identifier: 25:2C:00:E9:7E:7A:78:69:59:38:8C:F2:04:A4:C7:E6:45:58:0C:68
Certificate issuer: /CN=A919DA26/serialNumber=252C00E97E7A786959388CF204A4C7E645580C68
Certificate serial: 0112
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JSwA6X56eGlZOIzyBKTH5kVYDGg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.mft
Manifest number: 010E
Signing time: Tue 21 Apr 2026 01:55:04 +0000
Manifest this update: Tue 21 Apr 2026 01:55:03 +0000
Manifest next update: Tue 28 Apr 2026 01:55:03 +0000
Files and hashes: 1: JSwA6X56eGlZOIzyBKTH5kVYDGg.crl (hash: WhvINRRA4//iufWqbij8laJDiIkfHL0xgpOeVVkpN3A=)
2: F17996F2B21C11EFBDB2BA25C4F9AE02.roa (hash: VXtDiwiZo4Ue40kQIlfUesjgEwjjrX0+c0GVZ1Q0Ke4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.crl
rsync://rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JSwA6X56eGlZOIzyBKTH5kVYDGg.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 01:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 274 (0x112)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919DA26, serialNumber=252C00E97E7A786959388CF204A4C7E645580C68
Validity
Not Before: Apr 21 01:55:03 2026 GMT
Not After : Apr 28 01:55:03 2026 GMT
Subject: CN=69e6d8f8-d35f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c7:ab:84:bd:ca:43:16:9b:ac:34:0a:15:2c:
1b:ff:3d:56:56:f9:72:36:1e:74:38:0f:16:39:37:
fb:9b:1d:02:41:f2:58:b5:b5:6c:a4:3f:1d:16:61:
89:09:87:70:b3:5f:1c:41:59:0e:b5:c9:14:36:d1:
3a:b1:d4:a9:88:5a:16:e8:31:02:72:1d:c0:9f:67:
93:49:4c:60:04:02:35:07:f8:26:dc:16:20:c8:f0:
96:d8:8f:c5:8c:72:36:42:a6:d3:7b:12:d4:d4:c6:
a3:85:ad:f5:6d:a0:c6:9e:7f:4d:d3:31:44:87:d6:
a9:96:d0:b0:52:0f:5d:c3:38:e7:89:48:63:84:c2:
86:44:2b:c5:0f:f4:74:50:64:9d:af:7a:01:f0:2b:
4a:19:8f:a4:a8:99:34:4d:6f:d6:d7:51:07:ef:28:
4a:bf:09:2c:e5:3d:94:8e:b4:58:03:27:56:d4:38:
34:b5:b0:91:7d:76:c3:04:43:2b:0e:62:4b:6f:0e:
b9:14:07:99:96:e7:57:3a:27:8e:bf:26:0f:12:46:
52:bf:0e:de:8d:3a:f5:f1:40:91:f9:c3:2d:36:1a:
1c:b2:17:e0:54:65:eb:5c:a7:97:27:32:30:e4:43:
14:28:ad:d1:97:97:f6:87:92:f1:a1:2f:77:2a:a4:
f3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A6:0C:27:A3:36:59:E2:F3:E6:7B:3E:F6:6D:FF:67:B3:E4:BB:6C
X509v3 Authority Key Identifier:
keyid:25:2C:00:E9:7E:7A:78:69:59:38:8C:F2:04:A4:C7:E6:45:58:0C:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JSwA6X56eGlZOIzyBKTH5kVYDGg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:03:d4:7f:b8:23:f5:0b:fe:1c:c6:be:7a:c8:4d:a1:49:7c:
3c:24:c9:ae:bc:51:99:f5:28:82:02:15:09:8a:38:04:12:11:
cf:45:d9:4f:2d:c3:19:3a:84:e2:0b:2b:fc:bf:4f:b6:d6:72:
07:b6:fb:15:4f:0e:6d:b3:2c:a8:7b:75:d2:a7:f5:ed:ec:0e:
b9:78:1a:69:ca:31:5c:75:75:88:53:d2:1f:9f:d0:30:97:8f:
77:fe:f4:40:71:44:59:9a:ea:ad:a4:bd:c9:ab:37:c1:da:c2:
3e:fd:94:96:4f:02:f4:70:0f:45:fe:ed:f6:aa:74:e6:3f:17:
d9:c0:e4:3d:e8:0c:12:7d:58:02:7c:1b:83:a5:54:87:59:cf:
b8:40:1e:c6:28:78:bc:5a:1c:36:47:c5:91:ab:bc:01:bf:d3:
89:05:ac:2d:e7:a1:b1:10:9a:f2:34:1a:22:0c:f4:6a:26:13:
51:08:6a:b7:4f:99:ce:50:ba:db:74:07:f1:16:82:e8:ca:6e:
bc:ae:16:87:00:5e:94:5b:8b:1d:1a:23:59:15:7b:f7:fd:5e:
3e:a0:d8:d1:0e:b1:85:ef:53:6f:36:66:31:dd:2a:05:b6:31:
18:c0:2f:69:06:8b:b8:48:4c:f6:d6:bb:e5:c5:f5:b3:5e:3a:
ba:98:e9:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 21:36:29 2026 by rpki-client