
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft
File: JMi7-TDNLRI5mr35ycqxSxzXn2s.mft (raw, json)
Hash identifier: /uBtoJdi+36OEOW0aPXFItgJx0ZR7gvH04CHGSTNEnc=
Subject key identifier: C8:B9:89:FE:00:AF:CD:C9:F8:EE:0E:4F:8C:92:9E:41:EF:24:AD:B9
Authority key identifier: 24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B
Certificate issuer: /CN=A919A713/serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B
Certificate serial: 03C6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft
Manifest number: 0391
Signing time: Mon 02 Mar 2026 00:49:26 +0000
Manifest this update: Mon 02 Mar 2026 00:49:25 +0000
Manifest next update: Mon 09 Mar 2026 00:49:25 +0000
Files and hashes: 1: JMi7-TDNLRI5mr35ycqxSxzXn2s.crl (hash: J6LurO0i10SCJlwG3lkh1jC3HNe2bLgtuOZpjKqZj6Y=)
2: 28A46886845B11EFA46A8F64C4F9AE02.roa (hash: to9oWLtUCPR2IV81QwsKxDWKhq1Sm4j3pB/lwtY1Upg=)
3: D1424FC8E0E111ECBFF27B44C4F9AE02.roa (hash: VpW/GGNQZtOaPEiTSAjONhHFcZtykmd+bhy/dKuCDgU=)
4: 907FFB3C5C8511EDA172EE5CC4F9AE02.roa (hash: dm8mDFnd4sCdbaaWXZW8U1YjOybI/gS2GoTG/04b7RU=)
5: CF96FC32E0E111ECBFF27B44C4F9AE02.roa (hash: /6u2hpGyEghKewxxLTUeu3WPPeW2saAns4fvfdrjrvM=)
6: D0BE1D2AE0E111ECBFF27B44C4F9AE02.roa (hash: Zqbu2gM/p3JYhF6RtHC7pKoD7WRxqkmXieIo4G2MPsk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.crl
rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:49:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 966 (0x3c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A713, serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B
Validity
Not Before: Mar 2 00:49:25 2026 GMT
Not After : Mar 9 00:49:25 2026 GMT
Subject: CN=69a4de96-5bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3c:f5:73:d0:b7:24:0d:f8:70:04:e2:5b:63:
c7:55:b1:cb:73:e8:16:78:f3:55:c5:e7:87:98:69:
e1:df:2a:81:96:93:f5:ce:c4:65:2e:17:2a:76:7b:
90:fd:32:96:7b:b3:a3:9f:96:d9:da:fa:f6:8e:e7:
ae:c2:cc:dc:c9:0f:b5:34:d3:b7:69:12:ee:d2:e1:
38:03:3d:fb:37:63:d8:3f:77:85:08:f4:76:6b:2e:
07:27:e1:6e:07:97:21:52:58:9a:41:8c:f6:e5:e3:
49:dc:cb:43:57:be:db:90:25:ed:75:5f:49:b7:5d:
33:69:b0:f9:f7:e1:8f:16:76:f9:1d:71:74:1a:d1:
68:03:83:a2:72:46:45:c0:79:d8:55:ee:7e:15:ca:
fa:f1:f0:26:3a:a5:b0:24:21:d7:b9:82:a7:a7:4a:
ae:8b:5d:5d:d0:88:18:5a:f8:1a:c0:67:b1:6e:25:
43:16:02:fb:2a:c5:80:d1:5d:2b:e6:e2:9c:45:16:
24:fb:f1:fc:bd:53:a8:44:63:0b:fb:82:f4:5a:d9:
09:84:ea:90:75:96:0f:1f:46:b1:48:61:d2:ef:85:
94:5a:de:71:ff:da:02:b4:03:19:37:e0:d0:3d:2f:
77:27:ff:0a:d0:a8:00:b0:b0:99:8e:75:58:6d:a8:
95:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B9:89:FE:00:AF:CD:C9:F8:EE:0E:4F:8C:92:9E:41:EF:24:AD:B9
X509v3 Authority Key Identifier:
keyid:24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ba:d7:2f:65:f2:9d:65:73:7d:09:17:1b:d7:d3:78:39:25:
2b:d3:8f:3a:f5:f4:34:61:a7:35:d4:d9:7e:b9:0b:fc:e0:47:
06:55:2b:0c:a9:d4:36:d9:db:37:18:28:cd:c0:18:cf:9a:8c:
43:82:df:e6:62:58:38:0b:66:e9:cf:4e:db:84:04:23:10:2e:
7b:32:46:67:52:a7:d0:0c:43:b3:aa:f7:b3:09:33:fa:44:78:
2f:24:3d:d5:46:a6:8c:54:88:d5:32:ab:99:96:5b:e5:0a:45:
e0:ed:10:c8:38:b1:12:a5:46:d2:ab:00:07:56:8d:f9:7c:dd:
bd:ee:51:97:58:9b:42:80:1d:19:32:4a:78:b0:23:88:71:0c:
05:63:d7:2f:9b:44:4d:22:90:a0:7c:42:15:41:1c:a6:40:e2:
5b:da:fd:07:24:b5:9a:d6:1c:64:a7:92:3a:7b:9b:aa:d3:0a:
d8:db:7b:d4:60:79:2b:9a:17:0d:f7:6b:bd:1f:bb:a8:07:6b:
3c:a1:fa:ce:46:19:99:b6:00:4a:bd:db:44:73:34:48:76:57:
37:91:9e:9b:0f:c8:8b:53:a0:2f:54:ac:59:40:38:ec:71:92:
5a:0e:87:ea:dd:0d:35:9f:90:64:79:d8:70:8d:ee:b1:69:5f:
2f:85:b5:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:29:50 2026 by rpki-client