
$ rpki-client -vvf rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.mft
File: jTeJSwlB7P1NawXh4UyrhWmHsF0.mft (raw, json)
Hash identifier: ZknphZwfOIr/fJX0KWnKuvJhtO+OD4jdwKbvxnY+C0o=
Subject key identifier: 31:D2:A7:A9:62:2A:1C:9E:86:B5:BD:7F:D9:5E:D7:50:38:C4:5A:FB
Authority key identifier: 8D:37:89:4B:09:41:EC:FD:4D:6B:05:E1:E1:4C:AB:85:69:87:B0:5D
Certificate issuer: /CN=A915890D/serialNumber=8D37894B0941ECFD4D6B05E1E14CAB856987B05D
Certificate serial: 21A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jTeJSwlB7P1NawXh4UyrhWmHsF0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.mft
Manifest number: 2199
Signing time: Tue 28 Jul 2026 16:00:11 +0000
Manifest this update: Tue 28 Jul 2026 16:00:11 +0000
Manifest next update: Tue 04 Aug 2026 16:00:11 +0000
Files and hashes: 1: jTeJSwlB7P1NawXh4UyrhWmHsF0.crl (hash: ACUyV4pDybFwKaMM9vqjlmIKwMjDr0DI5LIz9CWeHG0=)
2: B492147E047B11EBBA181F4FC4F9AE02.roa (hash: q6obv3XbPXxFh/9pkLqSgiabaqoDxZSpOGQbzF+b7F4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.crl
rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jTeJSwlB7P1NawXh4UyrhWmHsF0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8610 (0x21a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915890D, serialNumber=8D37894B0941ECFD4D6B05E1E14CAB856987B05D
Validity
Not Before: Jul 28 16:00:11 2026 GMT
Not After : Aug 4 16:00:11 2026 GMT
Subject: CN=6a68d20b-bcf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d5:84:08:b2:9d:09:12:d3:9a:0d:a5:be:7d:
6f:25:73:ea:e6:f2:4f:05:f6:d7:c2:3d:47:2b:00:
fb:1a:4d:6f:a1:c5:9b:5b:bd:8b:4c:4c:ec:d6:18:
fb:fb:25:7e:cc:a7:47:5e:da:8a:e5:17:b5:73:ca:
44:31:52:07:72:f8:65:8a:51:56:9a:25:c6:f1:d5:
29:7d:2c:db:0f:9f:e5:7b:b2:04:f0:01:c8:9b:8a:
14:2d:5b:61:5b:eb:08:7c:bc:79:5e:10:02:1f:c5:
c7:66:e3:9a:06:2c:76:52:49:fb:68:ee:6e:1c:c5:
e2:1f:06:5d:b4:dc:87:3b:c1:8e:cb:f7:3f:e4:50:
02:2d:30:de:9c:19:fa:01:f5:30:73:bb:8b:4e:ac:
b4:89:74:51:39:dd:0c:f3:4d:9d:40:20:76:15:73:
70:fc:b9:0f:92:be:43:19:ef:1d:bd:c1:8f:d2:0c:
1d:98:30:b8:2d:36:9c:bb:40:76:af:82:b5:0c:89:
a8:b1:f7:81:65:2b:ba:30:78:0c:04:ca:81:bc:ce:
72:6b:a1:2d:4c:fd:71:41:c7:57:81:a2:83:42:74:
d6:2f:d8:ac:ea:ba:5e:31:c2:23:aa:5f:07:62:a3:
71:70:3c:97:15:7b:cb:69:68:26:d5:74:4d:91:5c:
62:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D2:A7:A9:62:2A:1C:9E:86:B5:BD:7F:D9:5E:D7:50:38:C4:5A:FB
X509v3 Authority Key Identifier:
keyid:8D:37:89:4B:09:41:EC:FD:4D:6B:05:E1:E1:4C:AB:85:69:87:B0:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jTeJSwlB7P1NawXh4UyrhWmHsF0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:06:c6:2e:03:3e:79:05:2b:0f:d4:27:e7:a4:b1:a5:42:47:
65:5c:50:6c:95:d5:ca:de:52:f2:d4:d9:ed:de:ce:40:c1:87:
35:2b:bc:33:17:73:ba:65:e8:d1:61:19:de:49:7d:78:94:e4:
12:c5:80:5d:64:66:88:86:89:f5:ce:b4:a5:9b:2f:ec:f5:e3:
77:26:42:e1:95:c9:ab:a6:e6:aa:f6:10:53:7a:a5:98:eb:24:
96:f8:43:41:c7:b4:a0:ea:d1:c7:4a:cc:8d:a6:9f:73:74:41:
0d:2d:7b:a8:0e:51:34:53:4b:f7:ff:b4:16:e0:1a:3e:3e:1e:
b1:8e:8f:cd:15:27:d3:19:9b:76:ef:d1:9a:88:22:df:49:a5:
b7:69:60:84:b5:c2:7c:bd:06:d9:68:c3:94:21:9e:7a:2e:e0:
c7:eb:e2:35:a6:ea:17:3d:44:97:77:44:c0:18:58:a5:2b:d9:
42:e3:76:8d:9f:d9:5b:7c:f0:29:f0:9e:13:be:90:95:52:e8:
71:cd:48:13:d2:05:85:1a:65:59:2d:ac:07:c9:dd:92:4a:ae:
ce:a6:06:9c:16:80:fe:6d:31:07:dd:44:0c:5f:82:5c:11:a7:
ef:5b:42:db:30:e4:bd:29:b3:c4:4e:5f:54:d2:0a:73:96:cc:
bd:20:96:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:39:28 2026 by rpki-client