
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft
File: JbCzFZvpDPGiOyUhpSER_wOQXvc.mft (raw, json)
Hash identifier: qBfaz71QsJEo7+kff7wu9HvviOqYvyTF6DriXjdjSiI=
Subject key identifier: EA:6D:C9:E9:66:16:DF:DA:18:03:BB:61:AC:62:F2:B9:D6:C9:19:46
Authority key identifier: 25:B0:B3:15:9B:E9:0C:F1:A2:3B:25:21:A5:21:11:FF:03:90:5E:F7
Certificate issuer: /CN=A919A716/serialNumber=25B0B3159BE90CF1A23B2521A52111FF03905EF7
Certificate serial: C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbCzFZvpDPGiOyUhpSER_wOQXvc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft
Manifest number: C4
Signing time: Sun 19 Apr 2026 06:30:35 +0000
Manifest this update: Sun 19 Apr 2026 06:30:35 +0000
Manifest next update: Sun 26 Apr 2026 06:30:35 +0000
Files and hashes: 1: JbCzFZvpDPGiOyUhpSER_wOQXvc.crl (hash: sB5ifm/xeg7d3xxD573RjnQsYoCMtJ8ii8hpuiU31Gw=)
2: 3051CA240FBB11F0B9C1D274C4F9AE02.roa (hash: nvz8XbFcLxgkpfB237Lbtk4e08aqr9uFKNDJJLY0z/U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.crl
rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbCzFZvpDPGiOyUhpSER_wOQXvc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 198 (0xc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A716, serialNumber=25B0B3159BE90CF1A23B2521A52111FF03905EF7
Validity
Not Before: Apr 19 06:30:35 2026 GMT
Not After : Apr 26 06:30:35 2026 GMT
Subject: CN=69e4768b-532e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4c:2c:da:b2:e5:00:3f:13:d9:ed:52:a8:cb:
c1:8c:1e:93:a6:a9:ab:b0:dc:a5:2b:c3:38:63:d1:
60:e8:6a:c6:0e:6d:70:95:9c:1b:f9:62:7f:56:fa:
b6:98:ec:64:16:42:03:5c:b1:7b:30:a0:45:4e:2a:
74:3b:04:b3:fc:70:0c:de:52:98:5e:1f:1d:78:9b:
c3:07:3a:4d:71:92:05:a0:07:92:b9:f0:30:db:54:
7c:ab:80:6a:02:27:91:86:52:b6:f4:88:7c:ba:6e:
6c:3b:24:43:18:39:a8:d9:2d:54:e5:d3:70:47:a0:
af:ca:e5:08:f4:bc:e7:1e:4e:b4:ea:25:f3:8a:48:
44:98:62:0e:78:44:40:a8:43:49:eb:81:dd:97:6e:
75:91:18:d6:d6:3c:37:f7:90:df:0c:9b:8e:17:e4:
6f:a5:96:ea:49:61:41:4a:43:27:a7:ed:44:2d:13:
a9:d8:59:8b:7f:57:4d:dc:39:da:78:46:a6:bc:38:
36:05:c5:5d:4b:56:ba:b7:38:2d:d5:5b:f4:6a:f4:
43:7d:c3:cb:a9:f4:e3:c9:ef:49:af:0c:97:f7:21:
dc:7f:e9:5d:73:9e:b1:88:7d:b8:a1:ca:31:04:b8:
b0:9d:fe:07:d5:bc:ec:ea:b0:ef:aa:af:84:9e:d4:
a9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:6D:C9:E9:66:16:DF:DA:18:03:BB:61:AC:62:F2:B9:D6:C9:19:46
X509v3 Authority Key Identifier:
keyid:25:B0:B3:15:9B:E9:0C:F1:A2:3B:25:21:A5:21:11:FF:03:90:5E:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbCzFZvpDPGiOyUhpSER_wOQXvc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:f3:e6:da:85:90:34:e9:0b:90:ff:c3:0e:68:a3:97:be:61:
f3:79:af:92:e7:05:d8:4d:62:c5:18:8d:db:ad:9c:b3:2c:4f:
51:64:28:38:07:80:ce:e8:d5:46:3b:dc:98:b9:41:b6:2f:ef:
14:78:2a:07:5e:84:66:39:e8:07:36:68:23:a1:4b:ec:68:b5:
67:76:75:ab:6b:25:35:0b:29:1d:58:a1:3a:36:57:a1:a3:8c:
06:c3:b2:16:da:f3:93:1b:d1:7e:62:99:e7:3e:ff:62:4f:77:
6f:73:92:2c:8f:c1:54:30:ad:e5:02:6e:b3:bc:3d:59:db:9a:
0a:da:95:fa:52:2f:29:81:62:8a:26:ef:43:28:4a:7c:29:b2:
1f:17:90:bf:27:d6:08:d7:4f:49:de:09:00:21:81:61:68:26:
f4:86:fd:84:f7:1f:bb:5f:13:75:cf:e3:cf:3c:ff:86:4d:9d:
24:31:b5:fa:77:f5:4b:e9:18:96:64:3a:06:58:66:3b:87:72:
a5:1c:5b:b1:0a:73:b4:77:4e:ba:0d:7b:81:fb:29:6e:cf:93:
ab:6d:5e:f3:14:c5:db:a8:87:05:88:e2:0e:09:dc:5e:4f:14:
3c:fc:eb:10:44:f8:17:04:4a:35:7e:72:05:03:c8:73:97:d4:
8f:1c:89:8e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUE3MTYxMTAvBgNVBAUTKDI1QjBCMzE1OUJFOTBDRjFBMjNCMjUyMUE1MjExMUZG
MDM5MDVFRjcwHhcNMjYwNDE5MDYzMDM1WhcNMjYwNDI2MDYzMDM1WjAYMRYwFAYD
VQQDEw02OWU0NzY4Yi01MzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAk0ws2rLlAD8T2e1SqMvBjB6TpqmrsNylK8M4Y9Fg6GrGDm1wlZwb+WJ/Vvq2
mOxkFkIDXLF7MKBFTip0OwSz/HAM3lKYXh8deJvDBzpNcZIFoAeSufAw21R8q4Bq
AieRhlK29Ih8um5sOyRDGDmo2S1U5dNwR6CvyuUI9LznHk606iXzikhEmGIOeERA
qENJ64Hdl251kRjW1jw395DfDJuOF+RvpZbqSWFBSkMnp+1ELROp2FmLf1dN3Dna
eEamvDg2BcVdS1a6tzgt1Vv0avRDfcPLqfTjye9JrwyX9yHcf+ldc56xiH24ocox
BLiwnf4H1bzs6rDvqq+EntSpxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOptyelm
Ft/aGAO7Yaxi8rnWyRlGMB8GA1UdIwQYMBaAFCWwsxWb6QzxojslIaUhEf8DkF73
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTcxNi82MDE5RDNGQzBG
OUIxMUYwQUJDODQwNzRDNEY5QUUwMi9KYkN6Rlp2cERQR2lPeVVocFNFUl93T1FY
dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0piQ3pGWnZwRFBHaU95VWhwU0VSX3dPUVh2Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QTcxNi82MDE5RDNGQzBGOUIxMUYwQUJDODQwNzRDNEY5QUUwMi9KYkN6Rlp2cERQ
R2lPeVVocFNFUl93T1FYdmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJPPm2oWQNOkLkP/DDmijl75h83mvkucF2E1ixRiN262csyxPUWQoOAeAzujV
RjvcmLlBti/vFHgqB16EZjnoBzZoI6FL7Gi1Z3Z1q2slNQspHVihOjZXoaOMBsOy
FtrzkxvRfmKZ5z7/Yk93b3OSLI/BVDCt5QJus7w9WduaCtqV+lIvKYFiiibvQyhK
fCmyHxeQvyfWCNdPSd4JACGBYWgm9Ib9hPcfu18Tdc/jzzz/hk2dJDG1+nf1S+kY
lmQ6BlhmO4dypRxbsQpztHdOug17gfspbs+Tq21e8xTF26iHBYjiDgncXk8UPPzr
EET4FwRKNX5yBQPIc5fUjxyJjg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:35:41 2026 by rpki-client