
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft
File: JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft (raw, json)
Hash identifier: DUl/g4uEoW4X3Z6OkCZ22Wj5wTdtwMAE4OUehu7/erY=
Subject key identifier: 28:8A:78:62:F0:EB:9B:7C:D7:83:40:6E:81:9C:75:55:F9:C4:E7:EA
Authority key identifier: 24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98
Certificate issuer: /CN=A911BDA9/serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198
Certificate serial: 0184
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft
Manifest number: 017C
Signing time: Mon 27 Jul 2026 06:26:24 +0000
Manifest this update: Mon 27 Jul 2026 06:26:23 +0000
Manifest next update: Mon 03 Aug 2026 06:26:23 +0000
Files and hashes: 1: JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl (hash: 6l5l7CTx1T8PEVv1x2NHfCZv4AbW3i8xwYSZWqmMXQQ=)
2: C470564044BD11EFA8F7157FC4F9AE02.roa (hash: 2nH7N4ovFMEiAx6nSrcLjxkbYh/zpbNAaRQrma2Npz0=)
3: 08D9C8604ABE11EF8708395BC4F9AE02.roa (hash: ORm53sfx2hhoKeW+AllOGpPuP99qec7a8uPMzE4I0Zw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl
rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 06:26:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 388 (0x184)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BDA9, serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198
Validity
Not Before: Jul 27 06:26:23 2026 GMT
Not After : Aug 3 06:26:23 2026 GMT
Subject: CN=6a66fa10-0b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:57:9e:d3:b9:1d:44:58:82:0f:4e:b3:e1:a0:
b3:e0:3d:42:76:c8:15:a6:a2:f3:d7:a6:2a:99:29:
00:75:0d:1d:48:c8:9a:28:3e:8c:6a:d3:d7:8c:89:
32:1e:51:4c:1b:41:01:86:bd:5a:81:c2:c2:1b:21:
6c:4a:d9:cd:6a:cb:8e:b6:2e:07:f9:cb:8b:1e:88:
49:26:fb:46:87:ef:70:0b:43:47:cd:eb:86:42:b0:
6b:5c:17:68:74:a6:78:ea:57:64:4e:59:1d:2f:64:
77:df:0b:f5:46:25:c2:30:fc:75:65:e6:af:9a:90:
00:11:4c:44:9c:d9:7c:43:84:22:a4:89:93:b4:f5:
4b:65:80:29:b3:69:1e:53:f2:f0:66:5c:79:b5:79:
ea:a1:b0:3a:87:81:ee:a1:9e:d0:8a:d2:ad:06:f0:
6a:8e:56:ea:e9:1f:c4:22:d6:e7:77:6e:eb:a1:0c:
ac:25:4e:a8:a3:e7:32:b1:e0:64:7c:a1:b9:2d:ee:
14:f9:b6:ce:e0:ff:13:75:0a:6e:2e:ee:a7:6c:5c:
60:ea:8c:a6:fb:d9:5e:33:30:d7:76:d4:ac:6c:df:
44:ef:32:07:9b:b8:fb:7f:41:82:01:5c:57:44:da:
7f:aa:56:9d:87:59:74:eb:2e:7c:aa:52:cd:e1:4d:
46:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:8A:78:62:F0:EB:9B:7C:D7:83:40:6E:81:9C:75:55:F9:C4:E7:EA
X509v3 Authority Key Identifier:
keyid:24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:a4:fb:1a:84:99:23:4a:f4:19:a9:6a:b3:2e:f4:41:d2:b4:
61:8b:4b:99:6a:47:db:ac:86:9c:2a:72:9b:55:00:c4:3f:b0:
60:5a:5c:81:ee:18:d6:a7:d5:bb:a6:3a:cf:5d:27:21:64:57:
52:1e:e9:0f:02:bc:40:e3:77:46:ba:36:a5:45:3f:f0:9b:f8:
85:41:64:2e:0c:e5:46:e8:5d:fe:b3:4a:18:7c:1d:b7:39:89:
4a:c3:5f:04:98:48:1e:33:8f:da:f4:3b:73:37:d1:31:ec:11:
a5:c6:ad:32:86:22:67:96:0d:19:e3:ae:47:d2:09:29:60:6a:
db:b0:3c:75:21:97:d6:cf:ee:e6:e8:a5:bb:96:e4:eb:a5:6b:
50:9b:e0:3f:d3:35:89:75:fe:c9:03:92:b7:23:6e:ae:89:fe:
c4:9a:00:e6:bf:45:b1:2e:a4:db:c1:1a:a8:7c:24:d4:cb:fd:
1e:6b:80:6d:1b:46:88:ae:06:f8:22:d2:5d:29:54:b5:6d:e7:
a1:f1:f6:d8:5b:0c:f3:75:3d:aa:5c:44:dc:7c:63:6a:86:3a:
58:d9:98:01:21:59:82:0e:63:be:4d:e3:54:65:d5:eb:10:da:
61:5e:bf:cb:30:a6:e5:f8:53:e6:e8:af:c4:6c:68:05:19:ec:
31:ca:43:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:12:42 2026 by rpki-client