
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft
File: J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft (raw, json)
Hash identifier: /gdKgdMLW+ohvoilHO7cMVHV/h1qifvYDATFm4JSslQ=
Subject key identifier: 59:5F:CE:CF:90:C8:B2:3F:0F:50:70:20:73:F3:96:43:A5:03:4D:74
Authority key identifier: 27:68:90:43:C4:3F:E6:1B:3C:E3:C4:EB:E6:B6:C1:5F:BC:CD:2D:07
Certificate issuer: /CN=A9141BED/serialNumber=27689043C43FE61B3CE3C4EBE6B6C15FBCCD2D07
Certificate serial: 0282
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft
Manifest number: 0270
Signing time: Sat 13 Jun 2026 02:05:56 +0000
Manifest this update: Sat 13 Jun 2026 02:05:56 +0000
Manifest next update: Sat 20 Jun 2026 02:05:56 +0000
Files and hashes: 1: J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl (hash: 0tbyGDbWRFrMPK46tHbdLCPSQoU80ROosUhTk0FA2Hg=)
2: 643F1F08B72F11ED85F55F23C4F9AE02.roa (hash: iSo5vuWbG03RQHVz/yWnx8Hzh3kOIF3ZXYUxF1Dp2jI=)
3: 6023AFB22F5F11EEBE311577C4F9AE02.roa (hash: 5QEuxCPhlNT5MkVim+JlJUzX9cGTTGSeehOabrAMH3w=)
4: 85BB7A4E2AB311EE98EA0315C4F9AE02.roa (hash: u9cehntkmN+Per/glhjpUt2xiu+ij4ZxhwGHfN+ijAE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl
rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:05:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 642 (0x282)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141BED, serialNumber=27689043C43FE61B3CE3C4EBE6B6C15FBCCD2D07
Validity
Not Before: Jun 13 02:05:56 2026 GMT
Not After : Jun 20 02:05:56 2026 GMT
Subject: CN=6a2cbb04-5c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ad:0c:83:0b:3a:6b:31:5f:c6:3e:fc:9a:b2:
55:1b:d4:94:8e:f0:4a:8d:c6:79:31:52:d2:6c:5e:
96:22:63:9e:87:0a:ec:a0:72:ac:c1:cb:d4:c6:e3:
f4:4f:ae:a9:f4:37:f7:b8:0d:4c:7b:c9:93:e3:06:
38:46:02:3d:99:99:bc:19:d0:89:2a:95:33:cc:b8:
a7:09:b8:82:b2:96:42:f2:61:34:cb:87:c9:a7:ea:
cc:6b:0e:a2:eb:fb:6b:8e:38:26:86:8c:11:33:2f:
c1:05:47:0c:b9:c2:06:bd:68:e0:ce:cb:57:65:76:
fe:e4:68:ae:f1:3d:7a:7a:16:a8:ca:52:3f:ee:8f:
98:98:5b:a4:0a:f0:c7:9d:30:61:a3:fd:54:9b:9f:
8b:df:23:be:21:70:53:00:3f:07:91:9c:fc:82:8b:
49:b6:9d:17:52:da:9f:d8:81:3d:e1:99:8a:c8:1c:
54:ef:ec:4f:dd:0e:21:1b:8d:57:11:18:41:d5:97:
8e:6c:d3:e6:a8:86:6d:ce:2f:48:ab:f0:c1:df:e5:
6c:90:e1:2c:fa:71:d1:1f:cb:d0:48:c3:d7:a2:ac:
53:b3:45:1b:b3:ad:9a:ff:bc:6f:4e:d4:1a:40:80:
f6:ce:aa:48:08:62:65:7e:52:57:81:2e:43:c9:db:
37:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:5F:CE:CF:90:C8:B2:3F:0F:50:70:20:73:F3:96:43:A5:03:4D:74
X509v3 Authority Key Identifier:
keyid:27:68:90:43:C4:3F:E6:1B:3C:E3:C4:EB:E6:B6:C1:5F:BC:CD:2D:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:db:5a:7c:b7:51:5d:67:31:4d:e7:56:bf:1c:ce:88:7c:11:
2f:3b:e6:9a:12:8c:be:81:4d:df:5c:22:df:5f:00:72:33:f0:
c6:c7:58:4d:44:c9:c8:36:52:48:c9:69:d1:90:35:37:75:26:
79:2b:fc:0b:f2:ab:34:de:29:4f:b8:84:73:1b:02:06:b4:d0:
f8:be:d0:8b:a5:ab:43:79:f2:5e:42:4c:48:8b:0a:e8:f6:ae:
e5:68:2f:d2:38:ba:ff:44:c8:e9:a4:da:e3:59:8e:af:1b:92:
7d:a5:73:9c:40:db:87:5a:19:af:d6:a7:81:aa:6c:26:61:c6:
8d:ba:9f:bf:0d:db:49:1c:ca:90:24:54:51:ce:b7:fb:8a:db:
88:53:7b:b3:50:ea:40:e3:28:22:19:f7:b0:2b:8c:3f:6b:6b:
85:f6:b9:04:e5:05:a8:ec:ef:32:66:59:39:25:4f:29:3f:c6:
4a:c6:f7:f0:1f:2f:ba:a6:a8:64:40:66:df:4f:9d:7a:d9:d5:
38:a2:ba:ac:5a:d7:0b:c7:32:e5:5b:5c:5b:c4:eb:1c:c5:bb:
df:82:c9:90:7a:68:94:ff:f4:19:0e:c1:1a:21:cb:bd:e0:3f:
db:ac:3f:c7:60:d8:cb:8e:1d:9f:59:de:77:eb:ec:0f:13:04:
39:5f:a4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:34:35 2026 by rpki-client