
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft
File: JBKHZDDirPShqD5aV1x_l6srOy4.mft (raw, json)
Hash identifier: vQy7MWtUQWobCtB9Kmf1TF13VcngrLDW4yfR7xmTeYM=
Subject key identifier: 8F:DB:F5:67:DF:6D:14:96:DF:4B:74:CE:CA:29:7C:72:27:CB:CA:1C
Authority key identifier: 24:12:87:64:30:E2:AC:F4:A1:A8:3E:5A:57:5C:7F:97:AB:2B:3B:2E
Certificate issuer: /CN=A918BBEF/serialNumber=2412876430E2ACF4A1A83E5A575C7F97AB2B3B2E
Certificate serial: 0732
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JBKHZDDirPShqD5aV1x_l6srOy4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft
Manifest number: 0719
Signing time: Sun 20 Sep 2026 21:59:46 +0000
Manifest this update: Sun 20 Sep 2026 21:59:45 +0000
Manifest next update: Sun 27 Sep 2026 21:59:45 +0000
Files and hashes: 1: JBKHZDDirPShqD5aV1x_l6srOy4.crl (hash: 3yBFRDeMcYCPGmMBql6lTtStblHcCXVm82IilvVInpU=)
2: 07BB530CF1B511EEACF12582C4F9AE02.roa (hash: oxRH/FtaAdPMYWN/lkzxOotTfl395O31d3r/LMbHvxs=)
3: 28D28DD0F1B511EE83596382C4F9AE02.roa (hash: qu6jbzeI2M4KZM805xmZbJ8ZA02mORrGdIlgFsX0p6Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.crl
rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JBKHZDDirPShqD5aV1x_l6srOy4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 21:59:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1842 (0x732)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918BBEF, serialNumber=2412876430E2ACF4A1A83E5A575C7F97AB2B3B2E
Validity
Not Before: Sep 20 21:59:45 2026 GMT
Not After : Sep 27 21:59:45 2026 GMT
Subject: CN=6ab05751-a94b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f1:b7:f6:31:3e:e5:b4:59:cf:22:7b:c2:45:
62:f6:69:ba:ec:ca:db:44:8c:54:16:1b:4a:93:ef:
fd:19:56:bb:45:f0:5c:65:4a:43:2f:cb:2e:7d:67:
08:87:ae:e8:30:7e:07:a3:85:34:39:ba:e2:f7:4d:
24:7a:2e:6d:05:9d:d6:6e:58:e9:82:f3:55:28:d5:
0b:0c:5f:1d:b5:b6:b2:b8:1d:99:c2:df:3b:cd:a5:
1f:f7:b7:38:0d:3a:4b:ee:ff:85:2a:cf:63:28:ef:
bc:07:08:0a:3f:07:c6:df:ac:d1:7d:d1:ea:87:e1:
9a:e6:4e:72:2a:9a:4f:3b:d2:38:0f:b9:41:51:48:
31:eb:51:89:ab:fa:66:3b:38:46:03:a3:80:e8:42:
60:ab:8b:e3:f6:be:06:6e:71:0d:e8:d2:27:dc:82:
d1:61:c0:74:b8:0d:b8:64:e3:e6:7c:80:dc:98:f9:
1e:d3:94:f3:51:3a:99:d7:88:5b:21:f2:b2:08:af:
02:44:79:06:a9:bc:3a:b2:f5:1c:79:c9:4c:02:be:
b5:28:13:fb:54:8c:f5:38:73:3b:67:1e:10:64:08:
df:13:9e:8a:ce:ea:05:14:ca:93:78:2c:b6:74:d8:
69:b1:8c:e8:25:22:b1:c9:c4:0f:37:51:c0:0a:c4:
fe:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:DB:F5:67:DF:6D:14:96:DF:4B:74:CE:CA:29:7C:72:27:CB:CA:1C
X509v3 Authority Key Identifier:
keyid:24:12:87:64:30:E2:AC:F4:A1:A8:3E:5A:57:5C:7F:97:AB:2B:3B:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JBKHZDDirPShqD5aV1x_l6srOy4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:01:4b:45:6f:9c:63:aa:3b:df:a3:60:36:a9:1d:aa:f9:75:
82:58:e9:45:08:42:d1:7c:21:87:db:87:e2:7a:b7:9b:cd:e3:
39:a2:79:21:37:35:ab:fe:1d:26:a4:2b:44:54:e6:b7:b4:2b:
08:ba:27:89:20:14:b9:da:ff:fb:b6:19:a1:76:dd:84:84:d7:
84:24:9e:e6:82:b5:0c:91:3e:c9:0d:46:df:c2:00:1c:ae:f1:
c9:1a:d7:c1:78:7d:bb:f9:7e:f4:81:07:74:64:55:ee:f3:fe:
d5:25:c3:c3:aa:72:64:a2:7b:db:90:cf:81:62:ae:a7:cf:af:
f8:e8:a8:56:8c:ec:0f:a7:8c:4c:10:ac:d2:62:3d:b3:af:f4:
ac:e3:24:50:1a:16:36:31:96:e2:1e:03:25:50:fe:f1:8d:b5:
67:5b:a1:af:97:a1:8e:9d:d8:da:f3:bb:94:de:08:bb:77:cf:
5b:f2:95:66:ba:91:f4:db:c5:32:8e:a3:a5:39:bc:1c:e7:41:
be:62:16:dd:4c:db:2e:db:31:2b:9c:a1:00:79:10:5e:31:19:
55:08:95:01:3c:b7:e5:a9:04:da:fd:8c:8f:d9:6c:d3:3f:53:
d6:dd:8e:ce:83:bd:b8:ce:18:92:32:d0:f6:94:cf:d7:0d:7a:
c9:fd:4f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:23:07 2026 by rpki-client