
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft
File: jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft (raw, json)
Hash identifier: fOqE8Wnx50BwMxueITsVxR/SMhJYJZ/svijZ+KXXagA=
Subject key identifier: 82:C1:DA:8C:26:29:F8:0F:B1:7A:6C:B2:B4:BD:59:20:71:7C:CF:8E
Authority key identifier: 8D:5A:FF:32:19:01:2A:1C:99:E2:73:C2:B7:E6:3A:2D:0C:39:62:E7
Certificate issuer: /CN=A9132FA5/serialNumber=8D5AFF3219012A1C99E273C2B7E63A2D0C3962E7
Certificate serial: 0B8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft
Manifest number: 0B6F
Signing time: Fri 12 Jun 2026 19:12:44 +0000
Manifest this update: Fri 12 Jun 2026 19:12:44 +0000
Manifest next update: Fri 19 Jun 2026 19:12:44 +0000
Files and hashes: 1: jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.crl (hash: rb18Q1bwUnbNphZFHYh+1xwXaDkG1Zrr0Qf+9695cx8=)
2: 202A9E5E8B7811EF9E21317AC4F9AE02.roa (hash: P0XyvHwBGggVbQZbOe1bIJujZu5ouX/vYydjKa177IM=)
3: 0A9169068B7811EFB0820F7AC4F9AE02.roa (hash: +Jnq3fWUlBiBnB5IyzqavBaEae0mnvwuiwcKw5QbKqA=)
4: C6766086579811EAA245BE5EC4F9AE02.roa (hash: 6McwifOEsChy78SbBd4r2bAdhC4Hhk5/bZNr5Apkj8E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.crl
rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 19:12:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2956 (0xb8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132FA5, serialNumber=8D5AFF3219012A1C99E273C2B7E63A2D0C3962E7
Validity
Not Before: Jun 12 19:12:44 2026 GMT
Not After : Jun 19 19:12:44 2026 GMT
Subject: CN=6a2c5a2c-a8ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:85:fd:77:4a:c0:25:22:24:92:55:fd:7a:97:
0b:7e:37:9b:d8:b2:d7:7a:f6:db:5d:46:a7:78:c4:
cf:7d:63:4f:4d:aa:70:b6:3c:da:94:32:b5:05:ac:
18:a0:2b:b1:d3:83:87:8c:42:da:e5:ec:4b:70:47:
0d:1a:7f:f2:68:c7:2a:03:ee:95:54:1f:84:ef:36:
d2:b9:39:b4:dd:ae:ed:41:48:39:e1:08:f3:0d:3f:
85:66:92:f4:df:47:18:29:af:bd:ae:a6:9a:5d:47:
64:09:df:5f:77:c1:32:88:e2:ee:df:e5:5e:c3:15:
3f:69:ce:54:1a:46:60:d6:ea:49:5f:8b:25:2e:6d:
41:e3:40:3e:40:00:2d:c0:cd:57:9c:15:54:b9:92:
79:74:18:73:d2:7d:f3:7f:0d:a1:d2:58:5e:14:f4:
bc:8d:30:bb:a6:f2:e6:25:65:c0:68:56:22:67:00:
56:83:66:94:4e:a0:b1:a1:69:85:ac:2a:92:b0:8c:
83:08:01:98:1f:98:bf:c2:48:07:a7:0d:dd:49:83:
15:2d:25:9d:90:ff:65:1a:07:dd:60:33:43:15:d2:
81:df:ba:5b:0e:b9:b8:8b:2e:4b:87:9c:0d:93:6b:
89:c4:79:a5:25:b7:d5:b8:11:61:3b:a3:b4:ac:80:
f8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C1:DA:8C:26:29:F8:0F:B1:7A:6C:B2:B4:BD:59:20:71:7C:CF:8E
X509v3 Authority Key Identifier:
keyid:8D:5A:FF:32:19:01:2A:1C:99:E2:73:C2:B7:E6:3A:2D:0C:39:62:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:0f:f4:7d:b8:a6:6d:47:a6:89:1a:9c:67:63:d1:28:1e:ba:
84:9d:50:83:27:93:f3:b3:83:e3:06:d3:86:69:d6:d7:8c:64:
31:e3:58:f6:88:6c:66:70:e8:64:f7:8e:e2:9c:a8:be:5c:c1:
7a:29:24:dc:6c:95:1b:40:2b:93:0d:1d:49:aa:7e:1d:c2:a1:
1f:a7:c9:3c:a5:7f:d6:a6:f4:8c:c6:4c:a2:ac:ba:91:67:96:
38:35:b1:d8:a9:79:b0:a5:c0:dc:bc:3f:9c:d1:27:46:e8:9a:
90:b7:77:30:68:8d:34:36:47:6a:55:78:a9:fb:0c:f0:1a:d5:
fb:bc:91:6e:47:41:5c:3b:fe:c9:44:a3:19:e0:8b:23:14:b2:
38:a3:4a:0b:aa:cd:6f:27:47:85:1a:17:d7:53:bf:a7:f4:32:
83:5d:b2:d9:7c:f9:e9:34:67:a4:1a:11:38:e1:d0:8c:2e:57:
e7:a8:d8:d4:26:38:99:ba:52:be:56:2d:81:d6:62:95:1d:b8:
84:8c:6e:eb:fe:69:47:2d:6a:82:14:cf:7d:ad:4b:32:48:9f:
29:4c:eb:79:6f:ce:b9:c8:16:3c:38:66:69:5e:e8:b5:92:c3:
05:dc:a3:6f:9a:a1:97:97:72:35:63:2d:bf:fc:1c:3b:5d:88:
c9:40:b6:8f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC4wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzJGQTUxMTAvBgNVBAUTKDhENUFGRjMyMTkwMTJBMUM5OUUyNzNDMkI3RTYzQTJE
MEMzOTYyRTcwHhcNMjYwNjEyMTkxMjQ0WhcNMjYwNjE5MTkxMjQ0WjAYMRYwFAYD
VQQDEw02YTJjNWEyYy1hOGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA24X9d0rAJSIkklX9epcLfjeb2LLXevbbXUaneMTPfWNPTapwtjzalDK1BawY
oCux04OHjELa5exLcEcNGn/yaMcqA+6VVB+E7zbSuTm03a7tQUg54QjzDT+FZpL0
30cYKa+9rqaaXUdkCd9fd8EyiOLu3+VewxU/ac5UGkZg1upJX4slLm1B40A+QAAt
wM1XnBVUuZJ5dBhz0n3zfw2h0lheFPS8jTC7pvLmJWXAaFYiZwBWg2aUTqCxoWmF
rCqSsIyDCAGYH5i/wkgHpw3dSYMVLSWdkP9lGgfdYDNDFdKB37pbDrm4iy5Lh5wN
k2uJxHmlJbfVuBFhO6O0rID48QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFILB2owm
KfgPsXpssrS9WSBxfM+OMB8GA1UdIwQYMBaAFI1a/zIZASocmeJzwrfmOi0MOWLn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkZBNS9BQkQ0NzEwODU2
OTExMUVBQjVDNUM3MEZDNEY5QUUwMi9qVnJfTWhrQktoeVo0blBDdC1ZNkxRdzVZ
dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pWcl9NaGtCS2h5WjRuUEN0LVk2TFF3NVl1Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MkZBNS9BQkQ0NzEwODU2OTExMUVBQjVDNUM3MEZDNEY5QUUwMi9qVnJfTWhrQkto
eVo0blBDdC1ZNkxRdzVZdWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANw/0fbimbUemiRqcZ2PRKB66hJ1QgyeT87OD4wbThmnW14xkMeNY9ohsZnDo
ZPeO4pyovlzBeikk3GyVG0Arkw0dSap+HcKhH6fJPKV/1qb0jMZMoqy6kWeWODWx
2Kl5sKXA3Lw/nNEnRuiakLd3MGiNNDZHalV4qfsM8BrV+7yRbkdBXDv+yUSjGeCL
IxSyOKNKC6rNbydHhRoX11O/p/Qyg12y2Xz56TRnpBoROOHQjC5X56jY1CY4mbpS
vlYtgdZilR24hIxu6/5pRy1qghTPfa1LMkifKUzreW/OucgWPDhmaV7otZLDBdyj
b5qhl5dyNWMtv/wcO12IyUC2jw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:58:41 2026 by rpki-client