
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft
File: JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft (raw, json)
Hash identifier: b4njhPE7WJMH3ck2VhcJ62PwepVxd4Op0Tye8jt42Hg=
Subject key identifier: 92:FB:66:C1:29:6C:7B:6B:56:EF:C4:59:34:AE:4D:06:53:A5:8B:D2
Authority key identifier: 25:09:90:46:EB:59:D6:45:D4:19:A4:28:FC:70:1A:57:35:3F:BF:2C
Certificate issuer: /CN=A919EAAD/serialNumber=25099046EB59D645D419A428FC701A57353FBF2C
Certificate serial: 0CDC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQmQRutZ1kXUGaQo_HAaVzU_vyw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft
Manifest number: 0CCB
Signing time: Mon 02 Mar 2026 00:23:32 +0000
Manifest this update: Mon 02 Mar 2026 00:23:30 +0000
Manifest next update: Mon 09 Mar 2026 00:23:30 +0000
Files and hashes: 1: JQmQRutZ1kXUGaQo_HAaVzU_vyw.crl (hash: a8Gn+0aQLQ8nRBo19OHg4dqS23+vFwcBSFxBRPUuBqE=)
2: 956DEFE80CDB11EAB14B9162C4F9AE02.roa (hash: pIa1m/QoJun56lXoitSimau4HAB/ZArTrlBayf+6xXg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.crl
rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQmQRutZ1kXUGaQo_HAaVzU_vyw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:23:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3292 (0xcdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EAAD, serialNumber=25099046EB59D645D419A428FC701A57353FBF2C
Validity
Not Before: Mar 2 00:23:30 2026 GMT
Not After : Mar 9 00:23:30 2026 GMT
Subject: CN=69a4d883-9523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:bd:de:90:4b:6f:94:75:f1:67:fa:ac:89:12:
51:e0:51:9e:c3:08:10:39:a4:5e:b9:df:6c:a7:25:
fb:78:42:c6:21:fd:de:9f:c4:cd:b2:68:58:07:cf:
d8:6f:28:dd:71:b8:ee:05:73:63:bb:46:71:16:76:
20:34:e4:00:fb:cc:45:62:b1:25:94:57:b0:f5:34:
21:b0:69:c9:69:2e:e3:c1:c9:cb:b2:7d:82:f0:83:
e3:c4:6f:26:4c:c8:fa:1e:7a:cf:16:1f:67:cc:8f:
58:62:8d:1f:bd:08:e6:89:c9:48:a6:d2:0b:23:91:
c0:4b:2a:11:97:66:f7:92:51:0b:86:9e:cf:d7:37:
64:57:c5:f7:7e:9c:dd:24:6b:4c:85:92:03:0c:7c:
24:3a:22:e0:ed:27:4f:61:2f:ed:a8:bd:7c:98:be:
64:60:41:a8:1e:02:09:f9:27:e7:5b:0e:d2:ac:f2:
79:0c:39:e6:1a:56:68:80:6d:d0:30:93:1f:95:77:
1c:d9:74:1a:85:81:e0:a6:cb:a4:ad:2c:b1:37:01:
78:d4:c0:3b:11:72:65:81:c1:2e:e1:07:ba:ff:96:
fb:4d:10:6a:5d:40:43:0e:2f:81:18:60:a9:3f:80:
09:53:c2:a5:72:ec:c0:ad:d8:a4:fc:52:ed:e4:68:
fa:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:FB:66:C1:29:6C:7B:6B:56:EF:C4:59:34:AE:4D:06:53:A5:8B:D2
X509v3 Authority Key Identifier:
keyid:25:09:90:46:EB:59:D6:45:D4:19:A4:28:FC:70:1A:57:35:3F:BF:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQmQRutZ1kXUGaQo_HAaVzU_vyw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d0:56:cf:ae:bc:f9:ec:bd:4e:cb:69:dc:b8:fc:b1:01:9d:f9:
29:99:84:ca:ae:53:70:39:fc:bb:cd:78:e9:56:96:fa:a4:6c:
d2:8e:04:25:18:e2:05:c3:ec:5f:33:13:df:89:a2:09:53:6f:
94:a4:4a:cc:2a:6a:ad:e4:e3:10:47:08:a8:0a:a0:f6:21:55:
83:ce:c0:ec:f2:63:e8:4d:22:f7:cd:32:21:ff:b5:cc:92:e1:
24:17:59:8b:97:80:28:38:95:02:d8:be:cf:06:21:a3:5e:dc:
0d:3e:ee:3e:f6:45:6d:af:bc:93:ee:e3:6f:e9:cb:d2:2f:14:
8a:25:6a:65:d9:22:eb:47:b3:e1:5e:db:94:97:44:98:56:0c:
7b:92:54:24:0c:26:f5:1c:d9:05:3c:14:80:52:cc:a6:1f:4f:
d3:c8:b9:83:15:d4:6d:64:f3:af:df:51:c3:b7:83:bc:f4:37:
2d:73:55:3f:a1:e6:72:d5:3a:9c:6a:f0:a5:76:25:64:5d:e3:
19:a6:02:c0:c0:92:82:73:80:6e:61:32:d8:b7:89:2d:03:1c:
f6:3d:2c:e9:1e:68:85:84:f9:c8:db:bd:90:65:e0:81:3a:54:
04:17:2a:c5:4e:94:d1:51:52:d5:d1:6d:06:e7:7e:0a:fa:f9:
f4:7d:ef:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:16:39 2026 by rpki-client