
$ rpki-client -vvf rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.mft
File: jVvm9QWF2v57SAa6CeIlsMxvKQs.mft (raw, json)
Hash identifier: BliTTBM/HSMYdnTx2O4zIXN8vQaIurIc2kP5JXX3U+E=
Subject key identifier: 52:3B:E3:3B:CE:B1:68:35:7A:1C:FB:13:65:96:7E:6E:2B:C7:62:20
Authority key identifier: 8D:5B:E6:F5:05:85:DA:FE:7B:48:06:BA:09:E2:25:B0:CC:6F:29:0B
Certificate issuer: /CN=A911681C/serialNumber=8D5BE6F50585DAFE7B4806BA09E225B0CC6F290B
Certificate serial: 0A2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVvm9QWF2v57SAa6CeIlsMxvKQs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.mft
Manifest number: 0A19
Signing time: Sun 01 Mar 2026 23:23:03 +0000
Manifest this update: Sun 01 Mar 2026 23:23:01 +0000
Manifest next update: Sun 08 Mar 2026 23:23:01 +0000
Files and hashes: 1: jVvm9QWF2v57SAa6CeIlsMxvKQs.crl (hash: AC/1W9uLD3HWA6hDKIsb/+G+FpPLVoRC3VTAaIcxD9w=)
2: E7BABAC2217111EC9C97E95CC4F9AE02.roa (hash: qvkCUWNVDf0eYzay+dMyQK+QMdrK0NOed+DI+LY6hA0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.crl
rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVvm9QWF2v57SAa6CeIlsMxvKQs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:22:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2602 (0xa2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911681C, serialNumber=8D5BE6F50585DAFE7B4806BA09E225B0CC6F290B
Validity
Not Before: Mar 1 23:23:01 2026 GMT
Not After : Mar 8 23:23:01 2026 GMT
Subject: CN=69a4ca57-e870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4a:1a:88:85:0e:df:97:ac:30:67:d6:82:a7:
e7:1b:f6:c1:17:fe:f6:04:ec:78:0e:8c:89:fc:a3:
1e:a6:91:76:ee:1d:22:9f:63:b0:19:42:ff:92:95:
7a:0c:25:6f:a5:a0:10:84:00:c5:3e:da:19:f3:6c:
28:c0:c4:dc:8b:40:a2:e3:98:d7:e8:34:2d:e1:49:
ea:06:75:3c:f8:2c:96:1c:91:b9:c3:f4:11:7f:3b:
43:2d:c7:04:c8:11:c6:23:8c:ea:26:89:1d:5f:1c:
9a:b2:8d:eb:e6:97:1b:be:68:76:ec:25:ca:1c:3b:
d4:b9:b4:5b:ee:9b:86:4a:8c:95:ee:80:c7:3a:d7:
2d:45:5e:50:50:29:0b:07:44:77:3e:97:c2:e7:f9:
f3:44:fb:88:97:4f:ce:24:98:43:00:57:ce:d4:01:
43:bd:f0:6f:68:ac:92:3d:07:c7:d1:e4:e3:87:c3:
2f:ca:6c:8c:81:d9:c1:98:62:6a:79:fd:54:9f:20:
43:31:17:90:e9:9a:8b:75:e7:a8:25:37:5d:06:a3:
cb:d7:23:69:58:6c:e6:ec:97:12:85:18:06:3e:16:
da:74:db:32:f2:67:c4:c0:7b:20:09:aa:58:f5:2f:
0f:81:fc:fc:d9:66:10:73:b8:cd:f6:27:36:06:47:
3b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:3B:E3:3B:CE:B1:68:35:7A:1C:FB:13:65:96:7E:6E:2B:C7:62:20
X509v3 Authority Key Identifier:
keyid:8D:5B:E6:F5:05:85:DA:FE:7B:48:06:BA:09:E2:25:B0:CC:6F:29:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVvm9QWF2v57SAa6CeIlsMxvKQs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:d2:a5:6f:bb:73:5e:ef:75:47:97:b5:7a:fa:bb:11:b5:29:
3f:55:08:3c:c8:75:7e:6d:e3:37:6b:b5:cd:45:2d:dc:86:41:
d8:98:5a:dc:f3:1b:1f:4b:41:49:f6:5e:dc:5e:46:8a:a2:18:
46:95:d8:73:be:d9:06:20:9c:ba:79:75:c1:1b:d8:4b:ce:bb:
d5:8f:c0:b7:cf:4f:ad:b4:20:6d:d7:99:b8:82:b1:98:d7:7c:
d5:08:3a:38:2f:67:14:54:bc:8b:c6:d9:37:13:19:07:dd:d2:
d0:1d:7d:60:f8:aa:66:9b:21:51:26:c8:03:04:6b:97:c5:f7:
f4:f5:11:a2:6e:fd:81:9f:b2:f3:02:bf:54:c6:84:ca:c0:32:
13:ae:f7:52:29:44:3a:f6:af:ca:f5:03:ea:0c:d8:b8:f7:26:
37:36:69:fa:4f:4e:50:28:df:80:23:ea:df:58:1c:2b:b8:e7:
43:25:4b:92:21:df:96:96:5b:a1:01:05:e2:da:f1:b8:4b:60:
c1:5d:27:5d:11:15:fc:5d:10:c5:df:33:89:c3:0d:c8:30:d1:
b7:23:5d:fb:37:95:89:0d:e0:1f:17:8d:78:c3:c0:2c:cc:a4:
07:9f:da:a1:65:d2:51:88:4d:84:bf:4b:0f:c9:51:a6:d5:63:
a7:e2:1d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:04:52 2026 by rpki-client