
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft
File: JG9qS-FbAM_sDcOZpehDn5OckXQ.mft (raw, json)
Hash identifier: Ey09xmHEXLs3PhvmlKDnSzBpAIR1z4rkIAxDq4+NoZI=
Subject key identifier: DB:37:47:CE:64:59:37:08:29:63:7A:69:BF:F7:8D:DA:4B:4C:95:32
Authority key identifier: 24:6F:6A:4B:E1:5B:00:CF:EC:0D:C3:99:A5:E8:43:9F:93:9C:91:74
Certificate issuer: /CN=A912E99B/serialNumber=246F6A4BE15B00CFEC0DC399A5E8439F939C9174
Certificate serial: 07E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft
Manifest number: 07C0
Signing time: Tue 28 Jul 2026 21:58:06 +0000
Manifest this update: Tue 28 Jul 2026 21:58:06 +0000
Manifest next update: Tue 04 Aug 2026 21:58:06 +0000
Files and hashes: 1: JG9qS-FbAM_sDcOZpehDn5OckXQ.crl (hash: CdDdDSKe5p0bqTdejcWgYTRbKSP1CB+LXyT4Un5oYaI=)
2: DD9876F4B19911EFA6C3FD55C4F9AE02.roa (hash: OlUYHfxgsq3VvSrhhkQb6Q/TDtAt7UfH0OhxtkAQu0U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.crl
rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 21:58:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2020 (0x7e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E99B, serialNumber=246F6A4BE15B00CFEC0DC399A5E8439F939C9174
Validity
Not Before: Jul 28 21:58:06 2026 GMT
Not After : Aug 4 21:58:06 2026 GMT
Subject: CN=6a6925ee-9862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8b:ca:a1:21:06:c3:49:6f:f3:42:dc:cd:38:
b4:39:e7:81:04:b9:07:62:b7:fe:0d:82:64:09:e6:
ee:26:db:53:31:d9:8b:45:12:53:51:70:e7:8f:12:
ec:d2:44:ab:03:37:ea:6c:ea:d5:37:d5:37:2f:77:
ca:b3:83:7d:f8:89:7c:dc:1e:30:19:62:ff:be:e1:
a2:6a:76:31:ac:c2:25:be:74:15:93:4e:fa:e5:11:
c7:46:55:3a:70:6f:61:af:2a:f6:b7:9e:e6:dc:77:
93:fd:b1:f5:44:56:00:ec:82:72:16:80:97:26:3a:
d6:d3:15:77:59:3c:41:c6:07:f4:0b:d4:5f:5e:aa:
11:74:ba:1d:cb:d5:80:65:32:02:4d:8a:b8:85:2a:
ce:d2:ce:99:f0:6d:bf:0a:50:94:e5:c2:8c:fa:17:
2c:26:d7:b0:f8:3c:33:2d:36:71:cb:95:e2:9a:ad:
4b:5a:d3:f9:29:10:ac:88:9f:fb:bd:ef:c8:bd:b6:
28:43:69:37:18:35:46:c6:e7:66:4c:45:99:f1:d4:
77:0a:5e:ce:3a:35:1a:d4:ff:21:c6:32:1f:d0:a2:
29:3b:64:94:c2:16:2d:05:d7:0d:ac:f3:55:e6:12:
f5:b7:40:54:c0:72:db:63:38:30:0e:be:20:38:89:
11:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:37:47:CE:64:59:37:08:29:63:7A:69:BF:F7:8D:DA:4B:4C:95:32
X509v3 Authority Key Identifier:
keyid:24:6F:6A:4B:E1:5B:00:CF:EC:0D:C3:99:A5:E8:43:9F:93:9C:91:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:9f:4b:ae:d1:cc:59:45:25:f4:26:7e:a7:0a:1f:ad:53:d5:
94:90:4e:67:6b:ff:09:bc:05:c3:86:e0:a0:32:0c:83:0a:02:
94:46:f3:c9:0c:b7:e3:c6:e5:ef:99:89:f2:2e:4f:27:fd:df:
e5:d1:bf:a2:1e:77:7b:85:8c:44:bc:d3:be:5f:16:d4:69:3c:
7f:b7:27:d1:76:2f:11:09:fa:50:d9:b4:62:6e:06:f1:32:4c:
31:68:e6:b0:7b:96:31:1b:45:fd:61:26:d3:02:6e:e8:12:27:
d5:8c:f2:b0:85:fe:ba:3e:e3:2a:e2:25:5b:8f:e7:f8:3c:ee:
ed:32:80:c8:3d:99:bb:65:82:b9:2a:ec:6e:2c:28:67:69:15:
23:a6:a3:12:be:53:95:ce:5a:38:b7:6f:08:15:fc:77:40:94:
07:15:09:a0:2c:ac:f7:df:4c:c7:bc:7d:e2:63:b8:7b:7b:3f:
c4:1f:e2:65:0a:e1:dd:2e:8b:10:4e:10:29:50:f9:33:cd:39:
1e:60:df:f9:34:67:9c:67:12:91:65:08:a6:8e:d3:8d:1c:40:
49:0a:e0:cf:89:3e:bc:f9:1e:5b:f4:ea:cf:84:d9:eb:d3:c6:
f3:71:fc:90:8f:21:34:6a:1a:b7:a5:ce:40:f4:16:76:60:5d:
68:3f:95:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:40:52 2026 by rpki-client