
$ rpki-client -vvf rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft
File: JMzoDfDUim0MORo68N1kTdv7das.mft (raw, json)
Hash identifier: sGXfHy8fjkQp0SgoJNxlhQmQEglprHydZZ2UrrSN9lw=
Subject key identifier: FB:6E:CE:FA:0F:3B:C5:AF:99:EF:01:A7:BC:7E:FD:18:26:C9:A0:1B
Authority key identifier: 24:CC:E8:0D:F0:D4:8A:6D:0C:39:1A:3A:F0:DD:64:4D:DB:FB:75:AB
Certificate issuer: /CN=A918769B/serialNumber=24CCE80DF0D48A6D0C391A3AF0DD644DDBFB75AB
Certificate serial: 03B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JMzoDfDUim0MORo68N1kTdv7das.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft
Manifest number: 03AE
Signing time: Sun 01 Mar 2026 01:32:29 +0000
Manifest this update: Sun 01 Mar 2026 01:32:29 +0000
Manifest next update: Sun 08 Mar 2026 01:32:29 +0000
Files and hashes: 1: JMzoDfDUim0MORo68N1kTdv7das.crl (hash: czqO3dacSuYhidBudNGan/Dcfxdhmrn7BMgbNA38GUQ=)
2: D8D89576CF2F11EC8378951DC4F9AE02.roa (hash: hLXl6/Z8LuNjbKfmjM+o1Rss4EPhppx+VpRuw3V1cZQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.crl
rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JMzoDfDUim0MORo68N1kTdv7das.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 01:32:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 949 (0x3b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918769B, serialNumber=24CCE80DF0D48A6D0C391A3AF0DD644DDBFB75AB
Validity
Not Before: Mar 1 01:32:29 2026 GMT
Not After : Mar 8 01:32:29 2026 GMT
Subject: CN=69a3972d-dab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:05:6c:7d:b8:56:02:c8:fd:df:3a:1d:24:d6:
d5:94:13:b5:fe:0e:0d:b7:5d:58:f6:5d:c5:fc:17:
bc:ab:72:9b:05:c9:b5:63:25:30:23:cb:90:1a:c0:
3b:1c:d4:13:89:48:4c:98:40:51:e8:12:90:7d:eb:
6d:52:f1:fa:bb:04:8f:0e:8b:a9:a3:47:f7:e3:c7:
ab:d9:8d:90:9c:f4:8e:a8:dd:8b:04:17:45:30:69:
50:39:3f:e7:6d:e2:45:95:65:5e:c8:77:47:9e:f0:
fc:b6:7f:be:f9:57:1b:11:ff:43:cc:5d:43:c6:2d:
78:eb:b9:db:3d:61:0d:bd:25:8e:1d:cc:f5:4c:bb:
93:89:8f:a7:cf:ed:64:55:ca:69:f4:2c:a0:be:59:
ea:4f:c9:7d:01:36:ba:19:ed:a4:c5:ab:d9:a8:6d:
e4:ef:b8:78:32:40:3a:44:b7:50:d5:76:f4:a3:68:
31:6e:bb:c5:1f:99:4f:4c:4e:bc:25:9c:15:1c:91:
9a:d3:f6:70:9f:4a:88:b1:ad:1d:d8:73:e0:e0:14:
4c:3f:18:fb:b1:6a:2a:1a:37:42:a3:a3:df:ce:a2:
b7:b6:48:1a:bd:da:38:5a:93:ac:70:a3:a5:6d:9f:
51:e7:ec:c6:2c:e1:ce:68:45:2e:96:8e:9d:ad:3c:
d0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:6E:CE:FA:0F:3B:C5:AF:99:EF:01:A7:BC:7E:FD:18:26:C9:A0:1B
X509v3 Authority Key Identifier:
keyid:24:CC:E8:0D:F0:D4:8A:6D:0C:39:1A:3A:F0:DD:64:4D:DB:FB:75:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JMzoDfDUim0MORo68N1kTdv7das.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:b6:eb:8b:14:21:a5:2f:1c:f5:8a:a8:76:a3:68:f9:e0:16:
4f:0e:f1:2c:83:64:0d:23:3a:75:ac:2b:2a:7a:5a:38:35:39:
0a:58:d3:6f:18:c9:75:4c:c7:25:52:21:cb:df:2d:89:81:2c:
8a:66:06:ee:b1:ef:7a:58:7d:92:c5:89:6a:d3:52:b6:f9:06:
3c:b1:6a:1a:09:49:70:a1:d6:de:27:6f:aa:2c:4e:a2:ac:af:
c4:03:1b:19:c7:5f:42:fc:b9:d5:89:ae:25:b0:61:7b:68:30:
7c:a6:4c:14:e2:ad:65:21:23:6e:52:c2:13:5d:90:41:0c:3b:
7d:43:d7:ae:ac:51:52:33:61:17:34:8e:0b:6a:f2:eb:36:7f:
fa:1b:93:98:d1:c6:2e:da:31:b8:ce:5c:df:b8:bc:12:49:19:
9e:6b:9a:b3:e3:d2:8a:9c:c8:45:f1:60:fe:81:f7:91:8e:59:
b6:56:b2:3b:6d:23:7e:e1:16:9b:98:89:cf:57:b0:e3:af:78:
ae:5a:f0:a3:33:ad:7e:c5:e0:96:d4:77:d1:e8:4e:6d:5f:6b:
c4:cd:a8:c0:d7:b0:ff:42:03:f8:17:a0:93:da:ad:23:70:d4:
a4:6f:5c:9a:1c:f4:46:57:a1:88:b2:fa:9c:85:cc:f1:ce:1d:
db:05:f9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:27:45 2026 by rpki-client