
$ rpki-client -vvf rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.mft
File: JieQzZFM6o7BHiWGm4mN4AAfvQk.mft (raw, json)
Hash identifier: AsSbcW1RQivqbkfH/fA3ForSekRu14k2TQ2iVOQH6X4=
Subject key identifier: 1C:37:7A:27:5C:B5:D7:51:14:4A:99:66:AB:71:64:C0:ED:E6:60:CF
Authority key identifier: 26:27:90:CD:91:4C:EA:8E:C1:1E:25:86:9B:89:8D:E0:00:1F:BD:09
Certificate issuer: /CN=A914589A/serialNumber=262790CD914CEA8EC11E25869B898DE0001FBD09
Certificate serial: 1A5A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JieQzZFM6o7BHiWGm4mN4AAfvQk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.mft
Manifest number: 1A24
Signing time: Tue 28 Jul 2026 16:27:01 +0000
Manifest this update: Tue 28 Jul 2026 16:27:00 +0000
Manifest next update: Tue 04 Aug 2026 16:27:00 +0000
Files and hashes: 1: JieQzZFM6o7BHiWGm4mN4AAfvQk.crl (hash: ofkhyWsvbpiDzNvV4LjNRzxeGrvCsoJJ0ipusqwJjbg=)
2: BE466468B8D611ED876CBD7CC4F9AE02.roa (hash: 49/FK2no0+eXe8VXT3R+zqFMOagQDVzOLbP2aHJeuSw=)
3: 7F716274C95611E9A630AC3DC4F9AE02.roa (hash: 0wOhsRH1t2lYaZC2VY4/RdxjFMV42UhjtMVgT8IP8Mg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.crl
rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JieQzZFM6o7BHiWGm4mN4AAfvQk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 16:26:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6746 (0x1a5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914589A, serialNumber=262790CD914CEA8EC11E25869B898DE0001FBD09
Validity
Not Before: Jul 28 16:27:00 2026 GMT
Not After : Aug 4 16:27:00 2026 GMT
Subject: CN=6a68d854-19b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:85:dc:fa:e1:e6:98:91:7f:54:08:56:f6:3c:
d0:d6:5d:16:e8:7b:54:cc:39:a7:6a:e8:7d:9d:f3:
55:cd:bc:de:20:51:0a:02:10:06:34:09:42:7c:46:
2a:31:0a:47:d6:89:b4:52:28:45:68:66:9c:cb:5e:
89:5e:26:66:a3:98:0c:5b:a4:05:c8:4a:c8:00:08:
c8:b6:61:87:03:aa:7c:dd:0e:1a:63:ad:fd:6b:82:
a5:07:3b:ba:27:0a:3b:09:e8:d4:a9:e1:eb:76:75:
f1:e7:66:f2:73:be:ac:df:38:7b:18:3d:18:c1:55:
c0:81:da:ce:66:2c:1c:a7:a3:36:38:84:7d:72:8e:
4b:49:b1:16:a2:76:19:6c:21:cf:2d:d5:0f:99:72:
45:e4:64:0e:a1:bb:e5:2b:bf:a6:85:39:25:0d:77:
d9:8e:38:a0:34:ed:14:95:31:9c:fe:a5:01:62:3d:
22:e0:56:46:76:b0:df:22:7c:c5:c9:12:05:f7:74:
79:5b:14:dc:44:cb:41:07:a5:33:02:af:de:0a:3c:
d6:f2:b0:f3:c1:57:eb:61:8d:46:0e:b8:e3:15:77:
ab:54:83:08:07:1b:8a:aa:f7:e8:7d:d2:a8:4f:e7:
c1:69:f6:59:72:f3:23:7e:75:9b:51:bd:d8:5a:81:
bc:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:37:7A:27:5C:B5:D7:51:14:4A:99:66:AB:71:64:C0:ED:E6:60:CF
X509v3 Authority Key Identifier:
keyid:26:27:90:CD:91:4C:EA:8E:C1:1E:25:86:9B:89:8D:E0:00:1F:BD:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JieQzZFM6o7BHiWGm4mN4AAfvQk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:5a:2e:c7:32:02:fd:9f:2e:b6:e3:d5:48:eb:73:87:6e:7b:
bc:97:66:f8:cc:9c:0a:0b:4d:a7:8f:b7:9a:f8:36:c3:f6:f8:
91:39:7a:e4:65:37:2c:43:bf:5a:09:fb:dd:7c:d9:0b:c9:35:
42:ab:a0:f5:e9:88:2e:41:7e:d5:17:55:ab:e0:45:b6:e0:0b:
ab:df:71:58:4f:1d:b6:8c:39:a2:bb:30:d9:84:b4:3c:87:ac:
91:35:ee:87:2d:bd:6f:cc:cc:8a:1f:55:a0:58:35:16:25:e8:
e2:b0:e5:8b:12:91:f0:c2:01:e5:45:8e:7a:6e:b9:31:2d:3a:
91:88:3c:61:d8:1e:ed:aa:c5:97:21:7e:76:ec:ad:14:b3:7a:
f9:54:66:86:c4:02:4e:ae:38:8b:e3:0e:3a:1b:b3:31:0e:a6:
f2:db:cf:e2:7d:3d:99:3a:c9:8b:25:46:e9:7b:e7:7a:75:5e:
a8:64:11:ac:fa:52:55:8d:e7:3c:8a:c0:c8:d4:fc:92:a5:fe:
65:84:31:a6:df:83:fb:85:40:63:6f:f0:41:76:2a:35:6a:5c:
0b:f8:81:66:3e:60:8c:7a:54:fe:d8:4f:1c:4a:9c:a7:7b:8e:
e8:16:f4:76:a9:78:21:c1:51:c2:1d:f9:cb:22:65:67:69:74:
e6:46:0d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:26:23 2026 by rpki-client