
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft
File: j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft (raw, json)
Hash identifier: DC1BQOFdnbULpNUC3UiYhNDgvM2jAKEONQzNkmLCeC0=
Subject key identifier: 71:15:90:75:14:BF:F0:8D:A9:78:3D:34:FF:7C:9A:41:02:CD:0D:9F
Authority key identifier: 8F:9F:8A:45:F7:89:1E:2F:15:9F:3C:CB:C8:27:88:87:D7:5F:BD:27
Certificate issuer: /CN=A9147493/serialNumber=8F9F8A45F7891E2F159F3CCBC8278887D75FBD27
Certificate serial: 088E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft
Manifest number: 0867
Signing time: Fri 12 Jun 2026 20:49:30 +0000
Manifest this update: Fri 12 Jun 2026 20:49:30 +0000
Manifest next update: Fri 19 Jun 2026 20:49:30 +0000
Files and hashes: 1: j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl (hash: XdD6NHS9CYJnqY8g/9ojdJN8GTCa9VHtvMVFXS8ihKA=)
2: AFDBAB82BAE911F09182A92BC4F9AE02.roa (hash: PVjkDP7T0tezEoMksg6Sf8gOirpdO87qwsau6puOlUc=)
3: 97786014BAE711F08A930863C4F9AE02.roa (hash: n9Kxrr3pps9EWJc6FJJvW5XN8lfbolwtiiuJt22fhTQ=)
4: 66D426F0E55D11F0B49EA6E0396F56BC.roa (hash: MLnSJZ7wlMAlzMFJZwoCnvZfMjGPgiWNcDMGC+8J2FI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl
rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:49:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2190 (0x88e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147493, serialNumber=8F9F8A45F7891E2F159F3CCBC8278887D75FBD27
Validity
Not Before: Jun 12 20:49:30 2026 GMT
Not After : Jun 19 20:49:30 2026 GMT
Subject: CN=6a2c70da-7d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:51:d7:bb:98:fc:75:86:ec:8c:55:a0:5e:bd:
55:a9:de:1f:48:4c:c6:e0:74:9c:83:62:e7:a7:57:
fd:d7:2a:c1:62:92:7b:0d:2f:24:9e:d1:33:1f:b1:
60:82:11:38:a9:42:9d:f3:b3:0d:b8:bd:ef:2f:fa:
4a:8d:7d:04:7c:6f:0a:84:83:52:4c:cc:92:13:3d:
cb:29:b8:2b:90:ad:f2:60:2b:94:25:57:aa:3e:4d:
42:06:a3:15:9a:fd:ad:f6:83:9d:cb:38:29:fd:53:
e1:be:b2:a2:ad:4c:61:24:5b:26:f6:b9:b9:60:bd:
e0:3b:e6:0c:cf:fe:02:92:39:d9:63:11:ac:4a:7a:
f7:a5:f0:80:a7:c2:ba:8b:a1:59:68:41:3b:d3:7f:
94:7c:45:dd:62:d0:d3:02:39:ee:e7:47:59:45:08:
2d:43:8c:52:27:e7:d6:6e:32:24:73:d3:a2:f2:10:
2c:f5:ef:3e:df:41:bf:6d:06:ad:a2:af:b5:b1:71:
c4:76:5b:3e:ba:de:4b:9b:e6:78:41:fe:92:83:cb:
d4:c1:76:5d:07:c6:33:eb:d4:8c:e0:e1:f3:6b:91:
f2:be:5d:5d:c6:d3:df:be:c4:98:87:8a:7e:ee:4c:
73:f5:39:9e:4f:6f:6f:aa:d5:d6:7e:ee:b1:8a:fa:
78:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:15:90:75:14:BF:F0:8D:A9:78:3D:34:FF:7C:9A:41:02:CD:0D:9F
X509v3 Authority Key Identifier:
keyid:8F:9F:8A:45:F7:89:1E:2F:15:9F:3C:CB:C8:27:88:87:D7:5F:BD:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:d9:47:93:54:25:a3:e5:46:12:de:8e:03:be:7e:bf:f4:28:
a0:2d:a4:85:d3:da:1d:6e:4c:43:46:e3:31:e3:a6:58:a4:54:
ea:0e:62:6a:ad:97:5b:81:87:bb:d3:63:cc:71:42:b1:48:bb:
32:34:5f:a6:69:69:57:af:c5:e7:e7:d0:7e:21:10:fe:c9:4d:
47:da:1a:3e:5f:d4:89:a7:32:60:90:2c:d9:07:49:04:35:30:
b3:44:4a:93:96:f4:44:db:ed:15:ab:f9:2b:11:14:7f:47:0e:
c7:7d:5c:4e:4b:e8:c2:89:b1:a5:12:45:2b:b9:77:c8:46:c2:
2a:a7:e5:1c:4c:1b:08:de:72:48:8a:2d:d0:05:cd:17:72:72:
69:5e:db:de:16:af:71:91:a7:4b:a7:6c:e4:5f:0d:f5:c5:0d:
31:14:2b:a7:45:ff:7c:df:1b:a4:9b:c7:4f:02:c4:cd:aa:6c:
d1:4c:62:5f:46:8e:2b:02:53:4d:f8:11:17:23:7a:04:46:49:
d9:83:9c:a6:82:8f:eb:68:e7:5e:ac:c3:d6:e4:d2:bd:40:60:
82:b9:76:98:96:c5:9c:da:b9:d1:17:0f:67:c3:1b:b6:1f:0e:
03:af:51:83:f6:e2:8c:01:a4:cd:00:af:b9:14:99:b4:e9:b7:
16:0b:bc:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:16:17 2026 by rpki-client