
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft
File: JMi7-TDNLRI5mr35ycqxSxzXn2s.mft (raw, json)
Hash identifier: wlR1ujyMRFszrPvYEZh0v9Srn7vt7JR3SKpPu/z/KZ8=
Subject key identifier: 17:02:85:26:72:C9:38:A9:EC:62:39:BC:42:5D:98:49:3F:2F:87:85
Authority key identifier: 24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B
Certificate issuer: /CN=A919A713/serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B
Certificate serial: 03DE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft
Manifest number: 03A9
Signing time: Fri 17 Apr 2026 00:40:59 +0000
Manifest this update: Fri 17 Apr 2026 00:40:58 +0000
Manifest next update: Fri 24 Apr 2026 00:40:58 +0000
Files and hashes: 1: JMi7-TDNLRI5mr35ycqxSxzXn2s.crl (hash: SHIr1kCgXwpq/FKvdOasIXw1WiJ2OsAZTSK7R4H7k2w=)
2: CF96FC32E0E111ECBFF27B44C4F9AE02.roa (hash: /6u2hpGyEghKewxxLTUeu3WPPeW2saAns4fvfdrjrvM=)
3: D0BE1D2AE0E111ECBFF27B44C4F9AE02.roa (hash: Zqbu2gM/p3JYhF6RtHC7pKoD7WRxqkmXieIo4G2MPsk=)
4: 907FFB3C5C8511EDA172EE5CC4F9AE02.roa (hash: dm8mDFnd4sCdbaaWXZW8U1YjOybI/gS2GoTG/04b7RU=)
5: D1424FC8E0E111ECBFF27B44C4F9AE02.roa (hash: VpW/GGNQZtOaPEiTSAjONhHFcZtykmd+bhy/dKuCDgU=)
6: 28A46886845B11EFA46A8F64C4F9AE02.roa (hash: to9oWLtUCPR2IV81QwsKxDWKhq1Sm4j3pB/lwtY1Upg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.crl
rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 990 (0x3de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A713, serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B
Validity
Not Before: Apr 17 00:40:58 2026 GMT
Not After : Apr 24 00:40:58 2026 GMT
Subject: CN=69e1819b-0d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e8:67:14:9f:e4:90:e1:9e:44:24:e6:19:9c:
45:50:70:cb:92:04:30:ff:70:46:15:12:f8:d5:3b:
15:c9:98:26:4d:8a:28:37:86:4a:dd:cd:a3:e4:d2:
3d:b1:68:02:21:02:c4:6d:b0:d1:be:90:80:15:e4:
2f:aa:16:c9:e6:82:af:a2:f4:50:d6:fc:29:2c:98:
18:f5:05:17:3c:0d:3b:79:ff:88:e0:98:cd:3e:90:
f8:99:50:1f:65:c5:0f:61:87:e2:07:fd:d9:27:ea:
dc:c8:11:dd:a5:36:25:54:cf:a6:2b:a3:40:de:fc:
85:5d:7d:47:71:5e:34:4b:58:a6:cd:7b:52:3c:77:
c9:3f:e3:08:ce:86:41:34:2b:4d:57:13:7c:e5:14:
6b:1e:25:dc:fd:f8:bd:f6:ea:01:b7:0b:ed:80:e1:
07:d0:ab:97:4d:aa:e2:35:7b:87:e8:bd:ff:f2:4e:
12:93:67:62:a7:19:eb:9f:a7:3e:0a:9c:c1:7e:07:
ec:78:7f:14:5a:6e:ba:f5:3a:8f:f7:2b:51:da:ad:
b9:30:6c:7a:5b:12:c3:aa:d7:34:04:cb:70:d6:c6:
0f:df:5e:cd:2f:a5:92:72:c3:36:b9:19:fa:ed:e1:
36:ce:ea:ea:7e:bd:f7:bd:f0:46:88:50:cc:8a:a4:
42:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:02:85:26:72:C9:38:A9:EC:62:39:BC:42:5D:98:49:3F:2F:87:85
X509v3 Authority Key Identifier:
keyid:24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:b0:2e:06:13:88:6c:b8:da:1b:ac:d2:27:19:e9:0f:30:97:
1e:bd:f6:f0:86:1f:0e:65:6d:98:ff:3e:c5:0d:b8:67:e8:b1:
05:25:bc:1f:05:d6:66:a6:6b:87:b3:71:69:29:e7:80:83:f4:
0c:e4:71:59:8f:a0:47:f4:e3:d6:70:0f:03:01:64:37:8e:f8:
03:22:e2:8e:88:ea:90:6f:d4:aa:0b:5b:b2:a7:f8:3e:c3:97:
d0:6e:ee:09:fb:6b:04:f8:6e:8e:e3:5a:0e:bd:91:ac:9e:98:
d5:8c:5f:15:ce:26:af:3e:a5:81:93:ca:2f:af:aa:37:72:d3:
cf:e6:aa:35:f7:04:78:59:7d:f9:5e:f1:7b:4b:f1:86:e3:7d:
51:f1:77:4f:76:5e:fd:47:2f:fb:90:1c:3e:9e:47:60:a0:7f:
b7:18:b0:62:28:34:07:79:8e:f6:5d:7a:de:d9:f1:7a:47:f7:
3b:b8:6c:71:eb:d3:d1:df:04:a7:1f:36:c8:aa:72:b5:1f:f9:
37:30:0a:8c:70:52:ae:0e:ca:79:65:66:d6:09:82:90:ae:0d:
07:c8:5d:9e:3d:5e:2a:ff:a4:ae:22:35:86:8e:d0:dd:5b:44:
34:3f:41:e3:cb:a1:a6:6d:74:91:ee:b6:0d:df:10:5b:7f:be:
be:a3:df:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:50:10 2026 by rpki-client