
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft
File: JU6vZJB1T1B9uBzpDdtim2IvRmA.mft (raw, json)
Hash identifier: ODLUsc2sHPEAXmzCDzcfuN9ulKeouVZ23J6U+7kx3qM=
Subject key identifier: D9:10:B3:4A:B6:89:AA:08:DA:C0:14:D8:B4:DA:15:EC:2D:6D:0F:07
Authority key identifier: 25:4E:AF:64:90:75:4F:50:7D:B8:1C:E9:0D:DB:62:9B:62:2F:46:60
Certificate issuer: /CN=A915B8D0/serialNumber=254EAF6490754F507DB81CE90DDB629B622F4660
Certificate serial: 01C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft
Manifest number: 01BC
Signing time: Mon 27 Jul 2026 05:41:37 +0000
Manifest this update: Mon 27 Jul 2026 05:41:37 +0000
Manifest next update: Mon 03 Aug 2026 05:41:37 +0000
Files and hashes: 1: JU6vZJB1T1B9uBzpDdtim2IvRmA.crl (hash: gOlDUS30/5HW7Dqf2dYsca6tuMsF62ryk4rzCKORHC8=)
2: 0B2E53E422B711EFB2B15160C4F9AE02.roa (hash: HMdh5qQbMBugOBpZmqbwDLsg01Y9XQwAxnZyu8Z1p8o=)
3: FD6286EA22B611EFBF5D3960C4F9AE02.roa (hash: Y/Om0EuE4DxLCw/qgrFqWJHVkuUt8pRbj21WLvoBDpA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.crl
rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 05:41:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 457 (0x1c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B8D0, serialNumber=254EAF6490754F507DB81CE90DDB629B622F4660
Validity
Not Before: Jul 27 05:41:37 2026 GMT
Not After : Aug 3 05:41:37 2026 GMT
Subject: CN=6a66ef91-fcd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:70:35:c7:9e:40:37:30:1d:c0:7f:f5:67:ec:
ee:1d:61:c3:4e:c6:3a:59:64:b6:21:ac:12:a6:78:
e4:64:2e:0a:96:2e:29:f9:dc:81:52:93:03:7a:27:
7d:fa:d3:41:c6:ad:da:e6:4d:e4:b8:9b:a7:d5:ef:
61:06:cc:04:be:fb:31:52:4b:37:3e:c7:a6:7a:9b:
8a:36:90:b5:cf:64:02:ad:c9:7b:1e:5a:18:cf:de:
91:a9:f0:fd:66:31:63:c7:65:74:3c:fe:e2:99:59:
ad:c6:71:84:67:c1:74:3b:ac:6b:93:1b:70:91:1d:
3d:35:09:e7:6f:9d:bc:dd:b6:60:8e:41:ae:c6:c4:
1d:d0:0b:42:59:98:9b:72:6b:62:ae:f3:da:45:1d:
fb:f5:2f:ce:17:4f:39:c7:5f:6e:2c:a1:e3:61:8b:
29:36:2f:20:aa:40:bf:08:91:92:a0:a7:78:21:c2:
77:c6:73:93:f6:22:32:6a:6f:e0:dd:97:80:20:f1:
ec:2e:5e:11:4a:97:c4:28:10:4f:0d:16:1a:d9:7f:
6f:f7:b9:13:cd:29:cb:e4:4e:3c:21:7c:4b:78:8d:
99:8d:a4:9a:54:a9:67:75:ea:f7:78:b4:55:01:ea:
de:ad:e6:6c:e7:32:cd:43:3e:1c:6d:14:83:45:b5:
e4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:10:B3:4A:B6:89:AA:08:DA:C0:14:D8:B4:DA:15:EC:2D:6D:0F:07
X509v3 Authority Key Identifier:
keyid:25:4E:AF:64:90:75:4F:50:7D:B8:1C:E9:0D:DB:62:9B:62:2F:46:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:9d:4f:4b:dd:0c:08:a9:6e:5f:a4:df:27:89:d3:19:00:62:
fe:92:78:03:fb:cb:65:e1:65:9f:8e:9a:ae:a3:a1:97:63:f5:
0d:43:5e:2f:a9:90:61:b1:32:68:be:c2:df:7a:f1:07:73:2a:
40:d1:e1:f8:a3:e8:29:71:04:ed:7d:af:93:5f:9f:a8:d1:08:
d3:90:fe:6a:49:8a:5b:a4:e3:bd:8a:ae:d5:ad:44:68:cf:a5:
13:96:23:99:d6:6e:7a:27:d4:c4:b4:45:2d:f0:80:4e:fc:8e:
c9:e7:1c:67:ab:e3:e6:4c:4c:6d:86:18:46:56:c2:01:6c:66:
48:49:61:bc:1e:9e:e7:e4:30:67:e3:ea:f3:9a:b4:84:a4:81:
32:e7:38:cb:70:59:1f:3b:52:00:de:2d:b9:60:8f:56:29:42:
fb:1a:18:3e:0b:84:e9:9b:27:ae:34:ff:ce:e2:fe:f5:b2:98:
73:b3:65:29:a1:f5:61:ab:53:eb:f1:0b:f3:ab:f8:7e:39:5d:
8e:67:bb:08:89:03:ee:41:3e:58:c0:f2:f8:a1:39:e7:04:81:
4f:88:0c:70:d9:ab:52:20:21:52:ce:8b:96:25:ce:38:5d:ac:
32:72:35:7e:85:c1:09:e4:c7:f6:57:4e:78:27:1d:d0:da:f3:
cd:7b:9a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:57:07 2026 by rpki-client