
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft
File: JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft (raw, json)
Hash identifier: mW6yDau9NWJjuYsDfl64F/sNraWaeir4upwFngk1nWk=
Subject key identifier: B8:F9:43:36:A6:5C:24:73:26:14:D0:3D:C4:45:DC:0B:AB:11:7C:5A
Authority key identifier: 24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98
Certificate issuer: /CN=A911BDA9/serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198
Certificate serial: 013A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft
Manifest number: 0132
Signing time: Mon 02 Mar 2026 00:18:35 +0000
Manifest this update: Mon 02 Mar 2026 00:18:33 +0000
Manifest next update: Mon 09 Mar 2026 00:18:33 +0000
Files and hashes: 1: JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl (hash: e3ujkkvEK7r1z1HTOsmwmTAiwIbSxjobvTW57HLx7eM=)
2: C470564044BD11EFA8F7157FC4F9AE02.roa (hash: 2nH7N4ovFMEiAx6nSrcLjxkbYh/zpbNAaRQrma2Npz0=)
3: 08D9C8604ABE11EF8708395BC4F9AE02.roa (hash: ORm53sfx2hhoKeW+AllOGpPuP99qec7a8uPMzE4I0Zw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl
rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:18:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 314 (0x13a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BDA9, serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198
Validity
Not Before: Mar 2 00:18:33 2026 GMT
Not After : Mar 9 00:18:33 2026 GMT
Subject: CN=69a4d75b-3bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0f:41:5b:f3:40:53:e0:68:6a:6b:59:5f:ba:
f8:b7:e2:c1:22:e0:76:d1:84:95:04:5b:3e:c9:44:
08:4c:9f:5a:5d:1a:46:32:dd:24:c3:2e:45:23:39:
11:ed:98:c6:66:7d:a4:07:dd:30:f2:66:c0:0e:92:
7a:88:0e:a7:46:61:66:34:02:d2:36:a5:ec:ce:b7:
fa:d1:bb:d4:18:f3:76:76:45:58:8d:ef:21:a7:c1:
ae:21:c6:ea:87:5d:7b:e7:18:60:e5:ab:da:7d:3e:
1f:07:40:10:22:42:5a:a3:cc:e9:4e:03:34:c1:c8:
3a:5d:bd:98:3b:74:15:14:a2:a1:32:49:22:f7:9f:
fa:4c:38:92:80:5d:90:4c:79:e2:a2:68:54:9f:fd:
66:5e:75:08:98:87:6f:c1:59:7b:c8:22:75:6d:43:
33:b2:88:28:9a:b5:34:76:63:25:36:6c:e0:a3:cd:
7b:05:40:00:c5:ff:2d:46:d1:ef:e1:fd:90:fe:ef:
06:25:7d:67:f7:dc:80:23:8f:63:57:88:b7:23:5f:
04:22:9c:26:d4:5c:c5:bf:a1:5d:7e:1d:e3:4e:58:
2b:76:4b:4e:62:d7:24:37:09:d6:e6:dd:86:ba:3b:
98:67:cc:3b:c8:d3:bf:9e:50:74:d9:9e:53:99:5f:
1c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F9:43:36:A6:5C:24:73:26:14:D0:3D:C4:45:DC:0B:AB:11:7C:5A
X509v3 Authority Key Identifier:
keyid:24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:6b:8d:cb:4e:d9:e1:d6:58:03:54:bc:68:51:f0:f4:1d:bd:
4a:bb:f3:5c:a6:ec:b1:3e:93:7b:14:cc:81:9b:ee:60:f4:3b:
1e:ca:98:d7:70:20:7d:a8:89:b0:1d:23:be:e2:a0:69:00:1f:
c0:61:36:76:20:c7:cc:04:05:47:12:93:c2:ed:df:3c:2b:71:
fd:5e:a1:5f:15:b5:f5:49:fb:1e:06:16:d1:5e:55:3f:5e:d7:
ac:49:e1:a3:04:79:a6:41:b9:05:8e:ee:23:86:d1:e5:8e:2a:
6e:2e:35:87:3b:51:4f:ee:9d:e0:18:49:a8:b3:f4:c6:d6:d7:
a5:c1:39:eb:fa:86:44:20:f3:07:2f:ee:17:82:2a:42:9c:b8:
bd:4c:d9:e0:22:9b:75:89:63:71:18:c7:f8:2e:05:65:2b:ca:
ca:59:88:4f:1b:f6:1d:74:5a:99:20:00:c1:13:5b:f4:bf:14:
5f:c5:b0:14:bf:df:97:7a:17:2c:56:a9:69:9a:58:0a:32:60:
a6:55:4c:3b:43:f3:0d:16:a8:02:e9:2c:64:f7:ed:4e:93:07:
b1:c8:de:9b:e4:29:8b:a2:d2:e7:fd:29:48:38:34:08:0c:ec:
90:9e:30:d0:01:51:41:74:2b:eb:7f:4b:8d:5a:df:3e:6c:51:
7d:e6:9d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:35:08 2026 by rpki-client