
$ rpki-client -vvf rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft
File: JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft (raw, json)
Hash identifier: dO1e9ObKe9CfU6dEsIGVfkNhgIRaHFmCntf3BgohDN4=
Subject key identifier: D4:58:84:E1:35:64:75:38:83:A5:04:4A:49:5E:BA:6D:60:5F:E1:52
Authority key identifier: 25:59:CF:5C:80:CB:FD:45:47:20:3B:D0:51:68:CC:36:49:D5:64:C4
Certificate issuer: /CN=A916AA0F/serialNumber=2559CF5C80CBFD4547203BD05168CC3649D564C4
Certificate serial: 2586
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft
Manifest number: 256E
Signing time: Mon 02 Mar 2026 02:18:18 +0000
Manifest this update: Mon 02 Mar 2026 02:18:17 +0000
Manifest next update: Mon 09 Mar 2026 02:18:17 +0000
Files and hashes: 1: JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl (hash: +cnFEY1DGKUPnZVTE5kDVzZEUc1Ml9OMmFVCF2FhCl4=)
2: DFA7FACA54F711E7BFB4804BC4F9AE02.roa (hash: hS+s1nIXItEij56ye/fB0UYF3lqIxxiOI5UAFSDn8N8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl
rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:18:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9606 (0x2586)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916AA0F, serialNumber=2559CF5C80CBFD4547203BD05168CC3649D564C4
Validity
Not Before: Mar 2 02:18:17 2026 GMT
Not After : Mar 9 02:18:17 2026 GMT
Subject: CN=69a4f36a-617d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:eb:ce:7d:a7:26:40:9e:9d:10:10:5c:6d:57:
3a:69:d6:4e:57:46:d1:21:b3:96:d3:86:93:b3:b6:
2f:25:fa:dc:c3:00:33:8a:40:33:b8:cb:c2:ee:8a:
f5:5d:48:4e:4d:0d:af:91:73:20:8b:6e:fa:92:bb:
e2:60:fb:4c:3f:f7:97:8a:22:cc:9e:c8:40:55:88:
26:8f:b0:86:80:53:30:3e:7c:97:3e:7a:d4:a9:dc:
82:39:e4:3f:1d:e4:ec:fb:d4:eb:de:83:2b:46:34:
9d:35:ad:9f:82:e5:56:52:09:16:ae:91:36:0e:d1:
62:fa:30:a1:9c:5a:5d:dc:84:bd:d3:6f:59:e7:8c:
5f:0c:88:80:94:2a:d6:ee:f7:00:e0:63:ad:9f:7d:
1a:17:a9:9f:dc:f3:8d:bd:ef:c2:a8:ca:64:f3:ce:
a0:36:f6:7a:1a:72:6e:b6:15:41:38:2b:3c:d7:98:
90:57:40:18:9e:bf:68:27:8b:b4:38:32:66:a5:93:
8c:93:a1:c3:c7:39:b2:bf:b4:ae:f0:4e:17:f3:e8:
a6:fb:a2:cc:6f:b8:d3:ef:7f:3f:35:8d:ae:fc:0f:
03:52:a0:b1:90:4b:18:70:a2:14:b6:66:67:5e:d9:
38:3b:8f:5f:d2:b5:65:1d:f7:42:06:3a:9a:31:88:
53:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:58:84:E1:35:64:75:38:83:A5:04:4A:49:5E:BA:6D:60:5F:E1:52
X509v3 Authority Key Identifier:
keyid:25:59:CF:5C:80:CB:FD:45:47:20:3B:D0:51:68:CC:36:49:D5:64:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:20:df:2d:c8:19:c6:b0:b0:c6:72:5c:22:b0:06:f4:fd:85:
cc:4d:0a:d5:88:42:43:5f:54:f4:6b:a4:a9:91:24:bd:93:da:
8c:62:db:cd:1e:33:3d:a3:0a:d5:5c:87:75:e7:1b:00:b9:1e:
e1:3c:f4:e1:fa:32:50:95:de:f8:7b:24:50:17:9b:47:5e:08:
02:94:7a:c3:4c:7e:04:01:29:f4:0d:c5:b0:53:e1:4c:77:b6:
58:02:30:f5:02:fb:ed:e0:61:83:98:94:26:46:5f:e5:1c:b5:
87:07:58:51:33:e7:27:f5:28:42:70:be:bf:56:13:25:76:66:
01:ac:93:97:a1:c7:58:9b:26:56:20:7e:9d:63:f4:6c:af:0f:
4f:65:e2:85:57:2b:bc:6f:97:7d:2a:da:41:7b:3c:8b:fc:20:
03:f5:03:fb:4f:72:24:d3:07:f3:2f:bc:b4:77:02:f2:b9:1d:
a8:d4:b8:bc:33:ab:c5:81:27:9a:aa:fd:ed:76:d1:76:51:4d:
8e:f6:4b:6f:8e:7c:4b:14:f3:4d:e7:74:62:99:c5:7e:1c:39:
bd:ba:06:77:16:0f:d3:25:e2:bb:2e:e0:e0:55:bc:8e:40:9c:
6f:2b:0e:c9:87:8c:03:9a:dd:05:27:cf:93:0c:e5:84:b7:a7:
8a:5c:bf:ce
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICJYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkFBMEYxMTAvBgNVBAUTKDI1NTlDRjVDODBDQkZENDU0NzIwM0JEMDUxNjhDQzM2
NDlENTY0QzQwHhcNMjYwMzAyMDIxODE3WhcNMjYwMzA5MDIxODE3WjAYMRYwFAYD
VQQDEw02OWE0ZjM2YS02MTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAk+vOfacmQJ6dEBBcbVc6adZOV0bRIbOW04aTs7YvJfrcwwAzikAzuMvC7or1
XUhOTQ2vkXMgi276krviYPtMP/eXiiLMnshAVYgmj7CGgFMwPnyXPnrUqdyCOeQ/
HeTs+9Tr3oMrRjSdNa2fguVWUgkWrpE2DtFi+jChnFpd3IS9029Z54xfDIiAlCrW
7vcA4GOtn30aF6mf3PONve/CqMpk886gNvZ6GnJuthVBOCs815iQV0AYnr9oJ4u0
ODJmpZOMk6HDxzmyv7Su8E4X8+im+6LMb7jT738/NY2u/A8DUqCxkEsYcKIUtmZn
Xtk4O49f0rVlHfdCBjqaMYhTRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNRYhOE1
ZHU4g6UESkleum1gX+FSMB8GA1UdIwQYMBaAFCVZz1yAy/1FRyA70FFozDZJ1WTE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QUEwRi8yMjc3NDI1MjM1
QTExMUU1QjA1M0Q5MjdDNEY5QUUwMi9KVm5QWElETF9VVkhJRHZRVVdqTU5rblZa
TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pWblBYSURMX1VWSElEdlFVV2pNTmtuVlpNUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QUEwRi8yMjc3NDI1MjM1QTExMUU1QjA1M0Q5MjdDNEY5QUUwMi9KVm5QWElETF9V
VkhJRHZRVVdqTU5rblZaTVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoyDfLcgZxrCwxnJcIrAG9P2FzE0K1YhCQ19U9GukqZEkvZPajGLbzR4zPaMK
1VyHdecbALke4Tz04foyUJXe+HskUBebR14IApR6w0x+BAEp9A3FsFPhTHe2WAIw
9QL77eBhg5iUJkZf5Ry1hwdYUTPnJ/UoQnC+v1YTJXZmAayTl6HHWJsmViB+nWP0
bK8PT2XihVcrvG+XfSraQXs8i/wgA/UD+09yJNMH8y+8tHcC8rkdqNS4vDOrxYEn
mqr97XbRdlFNjvZLb458SxTzTed0YpnFfhw5vboGdxYP0yXiuy7g4FW8jkCcbysO
yYeMA5rdBSfPkwzlhLenily/zg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:01:43 2026 by rpki-client