
$ rpki-client -vvf rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft
File: JBKHZDDirPShqD5aV1x_l6srOy4.mft (raw, json)
Hash identifier: eK6lw2E5HsWh1TYoit5nbBAADnU2TjJNSS9ZKX3vv/4=
Subject key identifier: 6E:3B:F4:7C:1F:55:7B:1A:13:53:67:16:82:49:BB:AC:BE:84:43:73
Authority key identifier: 24:12:87:64:30:E2:AC:F4:A1:A8:3E:5A:57:5C:7F:97:AB:2B:3B:2E
Certificate issuer: /CN=A918BBEF/serialNumber=2412876430E2ACF4A1A83E5A575C7F97AB2B3B2E
Certificate serial: 06DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JBKHZDDirPShqD5aV1x_l6srOy4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft
Manifest number: 06C7
Signing time: Thu 16 Apr 2026 22:15:21 +0000
Manifest this update: Thu 16 Apr 2026 22:15:21 +0000
Manifest next update: Thu 23 Apr 2026 22:15:21 +0000
Files and hashes: 1: JBKHZDDirPShqD5aV1x_l6srOy4.crl (hash: 8VwdqzrnZuFDmllPCNefyhBzLwAFCfBoGYqO5bfiWT8=)
2: 28D28DD0F1B511EE83596382C4F9AE02.roa (hash: Tsypd5PAGds9yTda5JDqiyaHkJ9ezgmOq8JDQWBskdY=)
3: 07BB530CF1B511EEACF12582C4F9AE02.roa (hash: nYcIeQB9IcGgvExSEHIx6oDpzX1PN/jNpepkPKnRr64=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.crl
rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JBKHZDDirPShqD5aV1x_l6srOy4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:15:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1758 (0x6de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918BBEF, serialNumber=2412876430E2ACF4A1A83E5A575C7F97AB2B3B2E
Validity
Not Before: Apr 16 22:15:21 2026 GMT
Not After : Apr 23 22:15:21 2026 GMT
Subject: CN=69e15f79-d93b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:24:75:bc:63:42:8c:eb:67:d3:c8:2b:d2:c8:
3d:ea:19:07:fb:81:13:35:99:6e:4c:dc:62:d9:79:
18:f0:33:a7:7b:43:25:1f:c7:eb:7e:ec:1f:0e:87:
e1:4d:ed:05:c7:d5:a3:a0:8e:34:cb:ae:a4:69:71:
9d:ee:82:d9:b8:54:53:54:ee:8b:c5:e7:f5:83:4f:
7c:6e:c3:6a:3d:44:49:c6:df:d0:3b:ce:1d:be:88:
f7:fe:cf:99:f0:cf:e4:3d:56:63:a3:1a:94:3b:37:
72:a9:d7:4d:93:4f:60:67:44:73:95:cb:1f:17:4e:
32:47:80:46:d5:36:1d:5f:37:da:50:ad:d6:65:f9:
45:bb:92:5a:bd:d4:04:42:76:3d:67:c1:4e:7d:8c:
d6:38:bd:f3:59:fc:9b:fd:92:9b:28:34:c8:08:2f:
14:6b:b0:c8:78:bb:b7:38:cc:3a:3d:e4:e0:af:6d:
69:cc:0b:0d:1f:a2:a0:c8:73:15:09:6c:6f:32:4d:
ee:c6:fd:f4:50:b4:06:5a:22:a7:3e:8d:b0:61:08:
2a:4a:ae:8a:b2:26:e1:b4:bb:04:72:1a:60:68:e6:
ff:c2:d5:50:fc:bc:ad:a5:b9:8f:d9:41:eb:07:0e:
20:3e:09:4a:a4:3f:3d:94:9d:d7:56:4c:15:de:2d:
ac:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:3B:F4:7C:1F:55:7B:1A:13:53:67:16:82:49:BB:AC:BE:84:43:73
X509v3 Authority Key Identifier:
keyid:24:12:87:64:30:E2:AC:F4:A1:A8:3E:5A:57:5C:7F:97:AB:2B:3B:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JBKHZDDirPShqD5aV1x_l6srOy4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:d4:61:a3:bf:cb:7a:69:bf:82:26:af:36:b8:08:33:85:72:
a0:3f:9d:31:09:cb:db:23:bd:01:56:2f:23:42:c4:a3:d4:fa:
fa:12:94:1b:35:e3:19:aa:16:8e:fe:87:76:22:b3:41:93:5a:
f0:c0:90:a8:95:55:cd:1c:55:3c:71:1e:0a:52:f1:89:38:07:
9c:b1:67:54:14:cf:47:7a:4d:f2:9e:1d:88:50:6a:25:c6:9d:
7a:d0:02:3e:45:ef:9d:03:62:53:4f:80:1e:b6:6e:b7:d4:a6:
a4:09:ac:92:fa:73:0d:71:54:64:c8:b0:80:3a:40:b2:8c:1b:
70:5c:2a:be:97:b7:37:60:06:7a:2e:21:40:9d:9d:34:7e:d5:
e1:0f:50:e0:91:4f:3b:bc:54:06:95:4a:78:96:f5:b7:f9:a4:
67:8f:7a:02:39:57:7e:e3:76:45:20:6f:83:d3:a3:b6:f7:6a:
1e:a9:80:81:99:6c:5d:ab:3f:7a:9c:9f:c1:03:89:4e:fe:d1:
66:5e:09:77:a6:4a:49:29:00:54:8a:eb:8f:ae:7f:ee:74:dc:
b1:01:e8:16:fc:3f:a5:c8:8d:cc:b3:41:99:8c:b4:c2:e0:0e:
64:54:1e:13:07:e8:c0:34:66:18:9a:85:58:6d:de:1b:49:d0:
70:2b:89:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:35:16 2026 by rpki-client