
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.mft
File: JAYggSHro_x0NhyJ5jVgtJht3wg.mft (raw, json)
Hash identifier: dDXotF7N949QHDsREmln1zXMKpOYGGHkPlpcwPA4quE=
Subject key identifier: 41:D8:F7:17:94:87:63:15:ED:E9:90:3C:2D:98:3A:1C:24:86:71:6A
Authority key identifier: 24:06:20:81:21:EB:A3:FC:74:36:1C:89:E6:35:60:B4:98:6D:DF:08
Certificate issuer: /CN=A915D35E/serialNumber=2406208121EBA3FC74361C89E63560B4986DDF08
Certificate serial: 0889
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.mft
Manifest number: 0862
Signing time: Thu 16 Apr 2026 20:41:49 +0000
Manifest this update: Thu 16 Apr 2026 20:41:49 +0000
Manifest next update: Thu 23 Apr 2026 20:41:49 +0000
Files and hashes: 1: JAYggSHro_x0NhyJ5jVgtJht3wg.crl (hash: z9Cc4fH1Aed3SdxLPkTzCqx4wRoY1KI+gDvx/8lotXs=)
2: F5CABDCAAFEC11F09FCD3B73C4F9AE02.roa (hash: EUsut2FLyF5LpYeC+ChqBUx/d1bJvIhQE3FoslwFs7U=)
3: 997C96220CC211ED8C32645BC4F9AE02.roa (hash: m0VczHunCUj3NnxAFWU5QA67YBiWaVQ6jnViwqflf+8=)
4: 7AE0B322AFEB11F08458536FC4F9AE02.roa (hash: lvBgsJNBEu3OJi7G0u8obCCadwKeypPMdN+vG2Lispo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.crl
rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:41:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2185 (0x889)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D35E, serialNumber=2406208121EBA3FC74361C89E63560B4986DDF08
Validity
Not Before: Apr 16 20:41:49 2026 GMT
Not After : Apr 23 20:41:49 2026 GMT
Subject: CN=69e1498d-8299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:13:55:d3:36:33:2d:12:5e:68:0f:61:15:c8:
6d:03:a4:cd:de:5d:8b:08:2a:6b:8a:2e:8d:56:ca:
af:11:a6:eb:8d:47:c5:5b:4a:f6:4a:58:14:1b:f4:
31:72:11:b9:2c:5f:8b:7e:aa:86:08:95:d1:be:e8:
7f:9d:ac:da:66:da:b5:a0:33:25:b9:8d:70:73:19:
ef:d8:be:d2:e1:81:ca:22:e2:31:01:50:17:33:05:
20:5c:05:5e:76:fa:67:30:94:3c:f5:38:bf:06:47:
f8:29:15:3d:27:15:80:96:5f:05:11:0e:dd:07:b7:
e9:b0:cd:09:4e:5b:b9:18:4f:09:56:e8:63:94:e1:
69:eb:74:9a:77:3f:b8:6a:d2:ab:28:ca:00:25:c6:
a7:55:ee:ba:80:08:e1:66:12:e9:f2:8a:23:30:bc:
9e:7b:1b:25:c1:a1:42:7e:95:d2:dc:04:d6:f2:1f:
d9:10:a4:a0:a2:d4:12:cb:39:0f:41:cc:35:f1:97:
34:9f:27:13:bc:c3:e4:db:3d:94:c6:cc:06:af:cd:
ec:dc:d1:c2:3b:a6:56:94:ce:f6:3a:95:f3:d4:26:
f5:a5:4e:5a:31:a3:bc:b0:aa:fc:4e:02:e4:ff:ed:
2f:e6:91:fd:64:e3:40:20:a9:a7:67:8d:16:e0:31:
69:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D8:F7:17:94:87:63:15:ED:E9:90:3C:2D:98:3A:1C:24:86:71:6A
X509v3 Authority Key Identifier:
keyid:24:06:20:81:21:EB:A3:FC:74:36:1C:89:E6:35:60:B4:98:6D:DF:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:d5:bb:47:e7:0a:e3:ab:1f:57:3f:49:8d:26:77:10:82:92:
0f:27:db:ab:15:72:de:72:ac:52:fe:62:25:1d:4b:6c:49:c1:
48:81:d9:52:ed:17:75:cb:94:dd:e9:ba:49:b7:7c:64:d1:a4:
8d:4f:2c:69:62:00:dd:d6:5e:b7:62:a9:0e:2b:5b:8a:80:60:
93:52:be:8b:51:88:0c:01:bd:ec:6a:ad:51:61:a4:ef:10:51:
d2:f9:3e:82:71:c6:cd:44:d9:b8:8a:aa:f8:13:b5:40:42:29:
fc:f0:33:c7:18:fd:5c:59:88:0f:24:5d:af:5a:2a:ce:05:f5:
19:60:90:c8:3c:fb:ea:f2:59:b1:52:5c:45:f4:67:da:9c:24:
fe:c4:61:06:73:f7:6c:f6:a5:65:f3:96:31:54:7b:41:61:0d:
77:0d:8b:c9:a0:95:8b:7a:2c:7d:4a:2b:d5:5a:18:ed:88:68:
a3:6e:71:21:0e:16:ba:d7:83:65:2d:f4:da:3b:58:f7:d7:b0:
39:e5:0f:d3:8b:bb:c6:a2:4a:06:9a:bb:ab:38:b8:93:7f:0f:
1b:52:03:7a:74:1c:5f:74:ea:d7:bd:11:ca:59:da:f8:32:1d:
f5:77:32:c8:b9:c8:9f:31:07:e3:ac:a5:07:85:21:01:52:ee:
3f:1d:0e:07
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUQzNUUxMTAvBgNVBAUTKDI0MDYyMDgxMjFFQkEzRkM3NDM2MUM4OUU2MzU2MEI0
OTg2RERGMDgwHhcNMjYwNDE2MjA0MTQ5WhcNMjYwNDIzMjA0MTQ5WjAYMRYwFAYD
VQQDEw02OWUxNDk4ZC04Mjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnhNV0zYzLRJeaA9hFchtA6TN3l2LCCprii6NVsqvEabrjUfFW0r2SlgUG/Qx
chG5LF+LfqqGCJXRvuh/nazaZtq1oDMluY1wcxnv2L7S4YHKIuIxAVAXMwUgXAVe
dvpnMJQ89Ti/Bkf4KRU9JxWAll8FEQ7dB7fpsM0JTlu5GE8JVuhjlOFp63Sadz+4
atKrKMoAJcanVe66gAjhZhLp8oojMLyeexslwaFCfpXS3ATW8h/ZEKSgotQSyzkP
Qcw18Zc0nycTvMPk2z2UxswGr83s3NHCO6ZWlM72OpXz1Cb1pU5aMaO8sKr8TgLk
/+0v5pH9ZONAIKmnZ40W4DFpKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEHY9xeU
h2MV7emQPC2YOhwkhnFqMB8GA1UdIwQYMBaAFCQGIIEh66P8dDYcieY1YLSYbd8I
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDM1RS83RDM5NEM2QTAx
NkQxMUVCOEREMkMyNTlDNEY5QUUwMi9KQVlnZ1NIcm9feDBOaHlKNWpWZ3RKaHQz
d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pBWWdnU0hyb194ME5oeUo1alZndEpodDN3Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RDM1RS83RDM5NEM2QTAxNkQxMUVCOEREMkMyNTlDNEY5QUUwMi9KQVlnZ1NIcm9f
eDBOaHlKNWpWZ3RKaHQzd2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAk9W7R+cK46sfVz9JjSZ3EIKSDyfbqxVy3nKsUv5iJR1LbEnBSIHZUu0XdcuU
3em6Sbd8ZNGkjU8saWIA3dZet2KpDitbioBgk1K+i1GIDAG97GqtUWGk7xBR0vk+
gnHGzUTZuIqq+BO1QEIp/PAzxxj9XFmIDyRdr1oqzgX1GWCQyDz76vJZsVJcRfRn
2pwk/sRhBnP3bPalZfOWMVR7QWENdw2LyaCVi3osfUor1VoY7Yhoo25xIQ4WuteD
ZS302jtY99ewOeUP04u7xqJKBpq7qzi4k38PG1IDenQcX3Tq170Rylna+DId9Xcy
yLnInzEH46ylB4UhAVLuPx0OBw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:27:59 2026 by rpki-client