
$ rpki-client -vvf rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft
File: jQmbFr6Vddy0uwaFh5eZn1XmA18.mft (raw, json)
Hash identifier: Tpfgn9hrDAPlY4H3/6Fg4rgzS2Gn12DHoMMDE/kphhA=
Subject key identifier: 48:07:C2:AD:60:7E:9F:33:F5:2B:B1:45:DC:AE:0E:9E:B3:24:6E:7B
Authority key identifier: 8D:09:9B:16:BE:95:75:DC:B4:BB:06:85:87:97:99:9F:55:E6:03:5F
Certificate issuer: /CN=A912AEFA/serialNumber=8D099B16BE9575DCB4BB06858797999F55E6035F
Certificate serial: 35B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jQmbFr6Vddy0uwaFh5eZn1XmA18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft
Manifest number: 3588
Signing time: Tue 28 Jul 2026 15:20:02 +0000
Manifest this update: Tue 28 Jul 2026 15:20:01 +0000
Manifest next update: Tue 04 Aug 2026 15:20:01 +0000
Files and hashes: 1: jQmbFr6Vddy0uwaFh5eZn1XmA18.crl (hash: TMvsUjiyuQTciWEGjliqMhz4H6NT+epPN8EvnCIWbJs=)
2: 7192AD9E071211EAAD4E340AC4F9AE02.roa (hash: 8Jonk83mWaohXzy8u3pliKQ5Lui9A89G4dRwvaO5ka8=)
3: E92E6ACA025411F1B5CF90C0233D8C67.roa (hash: UV8f86HTjxEJSP4uwYb5rWdL2gxSvjECKlRWXIr/6K8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.crl
rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jQmbFr6Vddy0uwaFh5eZn1XmA18.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:20:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13746 (0x35b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912AEFA, serialNumber=8D099B16BE9575DCB4BB06858797999F55E6035F
Validity
Not Before: Jul 28 15:20:01 2026 GMT
Not After : Aug 4 15:20:01 2026 GMT
Subject: CN=6a68c8a2-b933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9b:cb:1f:4e:2b:ba:cd:10:fb:c6:e5:e9:e2:
b7:af:db:f4:40:9b:02:6b:77:2d:9e:86:f2:19:31:
92:69:be:07:1e:05:f9:88:5f:aa:37:59:02:b8:bc:
a6:32:55:70:2a:de:db:3e:e4:24:b3:a0:00:ea:88:
5f:a2:75:ed:b7:ab:16:51:5a:a1:b5:76:2d:1d:2d:
0b:90:c8:5c:c6:d2:e9:e2:65:a3:8c:e9:4b:82:8a:
e8:3e:0a:5c:c7:01:9c:c3:1a:f0:4b:34:85:4f:9b:
10:82:7a:5d:3f:4a:0a:02:7d:23:c1:a4:54:32:24:
40:ae:a8:8e:0e:08:ff:1a:af:88:52:22:36:5f:85:
3a:10:97:62:63:e1:41:5a:d2:e7:64:9c:ab:ee:b4:
5a:98:31:a5:e9:6e:7b:65:bf:21:26:a7:4c:53:da:
a4:cb:93:a1:1c:76:ab:27:e1:a1:e2:67:39:4f:9b:
67:32:1d:bd:13:b1:b9:42:3e:8a:7d:d5:b5:a1:bc:
27:28:fb:63:b6:44:56:5c:a0:02:4d:13:3d:1d:69:
54:dc:36:6d:50:b2:d3:66:47:76:37:b3:16:a2:75:
94:53:70:61:4b:83:64:7d:e1:95:a7:b4:7f:3e:bb:
54:e6:61:ba:2e:3d:bf:74:2d:5f:bd:d6:d6:02:9b:
46:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:07:C2:AD:60:7E:9F:33:F5:2B:B1:45:DC:AE:0E:9E:B3:24:6E:7B
X509v3 Authority Key Identifier:
keyid:8D:09:9B:16:BE:95:75:DC:B4:BB:06:85:87:97:99:9F:55:E6:03:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jQmbFr6Vddy0uwaFh5eZn1XmA18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:17:6d:c6:96:e2:de:72:a9:4f:ed:93:dd:e7:ae:2c:ee:d6:
07:08:99:f7:76:8e:37:2e:08:d2:e2:8d:7d:f5:fc:22:3b:8c:
53:8f:68:81:71:8a:df:fe:2f:fe:12:36:39:98:18:38:d7:5d:
59:7d:a6:a0:f2:5b:6f:c1:08:f3:43:67:50:ee:a2:2c:53:b2:
e6:50:5b:04:0d:36:d9:1d:ec:76:cb:8f:c7:3d:5d:85:04:90:
4e:9a:ec:06:d3:d7:6d:8d:f2:d5:83:8c:e4:43:84:0d:5d:a6:
ab:57:3f:3d:30:b2:3e:6f:88:56:ca:e8:31:fa:0c:d1:3a:be:
c4:ad:4c:1d:5d:57:de:ee:49:d7:6f:c4:f3:f7:65:39:e0:f9:
f6:d4:5d:ba:a2:6e:f2:4f:52:df:5f:f0:fd:6a:b0:a2:3e:d8:
70:30:42:1d:c7:7e:6c:2e:f7:1d:57:31:ec:91:c6:16:1c:48:
62:15:f4:0d:04:5f:2d:6d:76:42:38:36:8f:61:39:8f:66:4c:
25:91:f4:92:cd:a6:11:81:b1:40:6c:c4:b4:d3:0a:bb:d8:e1:
08:b9:fa:e5:4a:f2:96:24:8e:7b:db:39:d9:89:5e:bb:cc:51:
d8:81:77:86:af:b7:24:c3:61:69:ab:df:f9:0d:05:89:34:4e:
49:22:27:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:07:46 2026 by rpki-client