
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft
File: JYXaC5gKR_66DiNSBd7uQC8gs8s.mft (raw, json)
Hash identifier: BgawsOMFcbAWUj3dJkcA7IHqi1R2SfuE15jzatm5eJg=
Subject key identifier: C9:17:15:31:14:F8:A3:45:34:5D:0A:1B:EC:4D:85:A7:69:9F:27:AA
Authority key identifier: 25:85:DA:0B:98:0A:47:FE:BA:0E:23:52:05:DE:EE:40:2F:20:B3:CB
Certificate issuer: /CN=A919B63C/serialNumber=2585DA0B980A47FEBA0E235205DEEE402F20B3CB
Certificate serial: 35D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft
Manifest number: 35A0
Signing time: Fri 02 Oct 2026 14:55:13 +0000
Manifest this update: Fri 02 Oct 2026 14:55:12 +0000
Manifest next update: Fri 09 Oct 2026 14:55:12 +0000
Files and hashes: 1: JYXaC5gKR_66DiNSBd7uQC8gs8s.crl (hash: henXdponSxZJGOGRb5uqBCpR66pmFGAr9rPt+c9Ziv0=)
2: AE0AC88EBBF511ECAA816D52C4F9AE02.roa (hash: WAv6Nn/GIxUpCLzSFAH6SqbyTP0FD0xQyg/7mXGCqGU=)
3: AF00AECABBF511ECAA816D52C4F9AE02.roa (hash: qG2ZmMQs8OIefJ/BaN9tLL8wi6DKj/5LcmJxiyNB09A=)
4: B054EA98BBF511ECAA816D52C4F9AE02.roa (hash: 6si+xZ9ho8pu3knq2N9OMLHtSHx+WsCpgykH6axg9jA=)
5: 9343CE6EE07211E7995BD42EC4F9AE02.roa (hash: WWsnDwU0xQ2vlm4IMeT2SoYmxtKS066yOj3K2RIAPYk=)
6: 547D2C14BBDF11ECA1F12A0DC4F9AE02.roa (hash: rKu59lJ2Ad0vE4AINuK5lrUohwoMykH6xrWZtccAakU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.crl
rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 14:55:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13784 (0x35d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B63C, serialNumber=2585DA0B980A47FEBA0E235205DEEE402F20B3CB
Validity
Not Before: Oct 2 14:55:12 2026 GMT
Not After : Oct 9 14:55:12 2026 GMT
Subject: CN=6abfc5d0-c16f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1c:d9:8b:4d:40:b4:38:32:04:e5:88:4f:3c:
ca:5d:77:0f:d7:fd:e3:2b:36:eb:18:d6:2e:e8:0a:
c1:be:46:96:c3:29:01:db:c4:53:0e:5a:98:ad:32:
5d:61:79:6f:34:1d:c0:f6:0b:55:02:4f:13:d1:89:
2a:dd:03:db:5b:9a:3a:2f:ea:72:be:33:ee:2b:ce:
ce:de:1e:dc:08:c1:09:ab:5d:3f:f5:70:73:ff:59:
c3:45:40:29:4b:f6:11:3a:31:36:51:bf:61:01:ce:
f2:5f:e8:32:b8:42:e1:77:22:0f:0c:f1:26:28:f6:
5c:fe:73:b1:37:00:e4:9f:5c:e3:c7:e5:f7:21:57:
25:2f:89:1e:e2:b0:e5:22:38:46:9e:dd:69:a8:54:
93:ad:55:a0:68:99:60:c0:4e:22:b2:bf:62:f9:10:
03:ce:76:6a:a8:5a:b1:d9:c7:32:98:71:38:4b:02:
95:04:71:96:72:7f:8b:84:69:95:a5:45:24:08:29:
db:28:bd:59:af:3b:83:2d:f2:b8:e3:29:c5:2b:ac:
63:37:73:78:3b:78:6a:80:e5:52:66:37:bd:a9:8d:
0c:17:fc:c5:5e:25:97:46:cc:dc:67:03:25:96:e9:
10:24:e0:69:69:1e:cf:4f:00:3c:29:4e:d4:f2:23:
eb:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:17:15:31:14:F8:A3:45:34:5D:0A:1B:EC:4D:85:A7:69:9F:27:AA
X509v3 Authority Key Identifier:
keyid:25:85:DA:0B:98:0A:47:FE:BA:0E:23:52:05:DE:EE:40:2F:20:B3:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:48:6b:a1:70:ee:be:d6:70:d4:82:25:52:f5:83:99:6a:75:
08:55:70:7c:1a:a3:f2:2f:17:52:29:7e:b3:75:24:0d:e6:38:
88:d3:47:c9:b2:51:86:e8:89:a0:c9:77:b1:4e:8d:35:29:cb:
ba:4d:47:ed:7a:19:fd:3a:ea:d1:24:5c:ba:96:db:d9:73:81:
4e:fa:da:ed:d6:54:60:0f:e4:5c:21:c3:af:f8:c7:e6:f1:4f:
b6:b0:db:79:22:6b:14:a8:3b:31:54:3c:f2:db:0d:6b:2b:7e:
0a:dd:31:81:ec:72:f8:07:e8:2d:c3:2f:04:ba:ea:8a:14:6a:
25:bc:61:03:8d:62:61:06:b6:77:95:f3:b4:fd:22:e7:45:2a:
d0:93:e5:5b:05:4f:92:60:5a:c9:fc:f1:97:26:33:06:27:2a:
1b:b1:a0:e0:0d:77:74:1e:0f:6a:6b:8b:4d:86:f1:2d:83:81:
4c:f2:1b:04:d0:a1:bf:60:7e:df:a2:26:e8:57:2a:af:e1:66:
10:9d:a8:05:ed:55:e9:06:4e:fa:aa:57:03:42:3d:f0:4e:3c:
19:39:64:e7:db:34:20:4e:7a:d7:6f:31:00:0f:56:13:66:ef:
a4:41:87:d3:eb:8d:68:e2:8e:40:79:64:19:b0:29:bb:ec:1d:
4e:91:13:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 14:04:19 2026 by rpki-client