
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9181803/C9238C6602B211F1BEFAC7A13E3D8C67/jhrifbGU-weChRk7vcvnggBVNEw.mft
File: jhrifbGU-weChRk7vcvnggBVNEw.mft (raw, json)
Hash identifier: +jAn5M18frHXFjn5Fi//9aAAf09Nd8oX135NBgFnOu8=
Subject key identifier: 8A:5E:38:B1:0B:B1:16:B3:80:57:93:62:5B:70:CC:B4:1C:C4:71:ED
Authority key identifier: 8E:1A:E2:7D:B1:94:FB:07:82:85:19:3B:BD:CB:E7:82:00:55:34:4C
Certificate issuer: /CN=A9181803/serialNumber=8E1AE27DB194FB078285193BBDCBE7820055344C
Certificate serial: 8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhrifbGU-weChRk7vcvnggBVNEw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9181803/C9238C6602B211F1BEFAC7A13E3D8C67/jhrifbGU-weChRk7vcvnggBVNEw.mft
Manifest number: 88
Signing time: Sun 25 Oct 2026 08:01:35 +0000
Manifest this update: Sun 25 Oct 2026 08:01:34 +0000
Manifest next update: Sun 01 Nov 2026 08:01:34 +0000
Files and hashes: 1: jhrifbGU-weChRk7vcvnggBVNEw.crl (hash: od6t50V9jX5opOzu9fmj4TnRVJ0+N5eldfs0tICQ5S0=)
2: CE3F95CC02B311F18F28F1A63E3D8C67.roa (hash: DAka7fMLV65bGOuwmNjPvrI44LXaBykWyx4PYR3DdH0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9181803/C9238C6602B211F1BEFAC7A13E3D8C67/jhrifbGU-weChRk7vcvnggBVNEw.crl
rsync://rpki.apnic.net/member_repository/A9181803/C9238C6602B211F1BEFAC7A13E3D8C67/jhrifbGU-weChRk7vcvnggBVNEw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhrifbGU-weChRk7vcvnggBVNEw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 08:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138 (0x8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9181803, serialNumber=8E1AE27DB194FB078285193BBDCBE7820055344C
Validity
Not Before: Oct 25 08:01:34 2026 GMT
Not After : Nov 1 08:01:34 2026 GMT
Subject: CN=6addb75f-09dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1e:7a:af:d1:06:5f:15:b7:1a:13:ab:48:bb:
95:8c:28:08:f3:00:ac:97:89:93:2e:8f:e1:91:5c:
99:7b:26:38:21:8e:0c:a3:58:03:71:f1:96:7b:8d:
1d:e7:0c:b0:a9:f4:ae:d7:b8:6a:c4:75:f4:d9:f0:
98:5b:dd:f7:cf:6d:72:d0:4e:3a:07:e9:54:df:28:
bd:3e:39:71:72:7c:5a:1f:3c:f8:06:8e:2c:34:48:
02:ab:ae:17:d0:0f:6f:3f:ae:d2:a9:c3:67:61:5b:
e4:81:3d:3c:7e:2e:94:69:99:f1:69:dd:17:3d:48:
33:ae:88:b1:53:c4:a5:66:b1:c0:02:e7:0c:44:52:
36:84:c3:4d:29:5b:71:5c:fe:11:68:32:ca:56:0d:
05:21:04:e1:fe:bb:bf:8f:4d:95:96:8c:c1:1e:d1:
d0:68:92:f3:9a:3c:3c:88:95:2f:91:ea:1f:f8:20:
82:e9:a1:0a:7f:8b:19:9f:0f:4f:8d:3d:68:56:f7:
af:85:d5:f5:cb:b3:0b:1a:5f:38:08:0b:8b:7c:09:
f7:52:d1:91:4e:4a:30:09:56:ce:55:49:c8:41:fc:
f5:45:d1:4b:05:4e:29:67:d2:14:4d:7e:78:74:96:
cc:ae:dc:67:26:24:c9:04:1c:db:64:52:e4:81:95:
06:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:5E:38:B1:0B:B1:16:B3:80:57:93:62:5B:70:CC:B4:1C:C4:71:ED
X509v3 Authority Key Identifier:
keyid:8E:1A:E2:7D:B1:94:FB:07:82:85:19:3B:BD:CB:E7:82:00:55:34:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9181803/C9238C6602B211F1BEFAC7A13E3D8C67/jhrifbGU-weChRk7vcvnggBVNEw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhrifbGU-weChRk7vcvnggBVNEw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181803/C9238C6602B211F1BEFAC7A13E3D8C67/jhrifbGU-weChRk7vcvnggBVNEw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:d5:48:b4:b7:49:d7:76:05:4b:1e:64:54:57:f5:8e:22:5b:
32:aa:7b:5e:69:19:67:c2:af:9a:a1:b9:46:2a:1e:49:01:a0:
dd:33:ff:06:e4:c3:5a:fd:b1:0c:c7:5f:e7:4c:55:bf:e0:1d:
8e:f9:2c:03:92:ca:6b:e4:08:5d:60:52:f8:cf:90:d0:3f:31:
f4:74:de:28:7d:30:cb:6f:fe:e0:f7:8a:b4:9e:3c:49:a3:62:
a3:7e:05:0e:b7:e1:64:87:e4:e6:a9:9a:ef:7c:00:f3:0b:e0:
c3:ab:02:0c:d3:d7:ee:b7:b0:64:78:13:51:ad:02:8e:84:02:
a5:c4:0d:74:c6:09:fa:91:da:fd:80:7e:4d:6f:03:5e:d1:91:
49:09:3e:21:b7:2f:d5:60:de:bc:fb:c6:96:82:63:cd:67:92:
ae:47:27:8d:3d:79:8c:cd:f2:69:e9:f0:93:7e:f0:b8:7c:0b:
59:61:96:e0:a8:c2:3c:20:c6:a8:68:a5:b4:53:aa:f7:22:e3:
3c:68:77:a5:d9:ff:39:01:2b:7f:a4:02:0a:4c:08:8c:12:a3:
86:c7:3b:da:4b:81:05:94:77:17:e5:9f:27:f2:ca:42:a3:40:
b3:b2:bc:16:38:5e:ff:85:77:1d:35:c1:af:2b:be:31:51:9a:
ea:ff:15:98
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODE4MDMxMTAvBgNVBAUTKDhFMUFFMjdEQjE5NEZCMDc4Mjg1MTkzQkJEQ0JFNzgy
MDA1NTM0NEMwHhcNMjYxMDI1MDgwMTM0WhcNMjYxMTAxMDgwMTM0WjAYMRYwFAYD
VQQDEw02YWRkYjc1Zi0wOWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAth56r9EGXxW3GhOrSLuVjCgI8wCsl4mTLo/hkVyZeyY4IY4Mo1gDcfGWe40d
5wywqfSu17hqxHX02fCYW933z21y0E46B+lU3yi9PjlxcnxaHzz4Bo4sNEgCq64X
0A9vP67SqcNnYVvkgT08fi6UaZnxad0XPUgzroixU8SlZrHAAucMRFI2hMNNKVtx
XP4RaDLKVg0FIQTh/ru/j02VlozBHtHQaJLzmjw8iJUvkeof+CCC6aEKf4sZnw9P
jT1oVvevhdX1y7MLGl84CAuLfAn3UtGRTkowCVbOVUnIQfz1RdFLBU4pZ9IUTX54
dJbMrtxnJiTJBBzbZFLkgZUGxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIpeOLEL
sRazgFeTYltwzLQcxHHtMB8GA1UdIwQYMBaAFI4a4n2xlPsHgoUZO73L54IAVTRM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTgwMy9DOTIzOEM2NjAy
QjIxMUYxQkVGQUM3QTEzRTNEOEM2Ny9qaHJpZmJHVS13ZUNoUms3dmN2bmdnQlZO
RXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pocmlmYkdVLXdlQ2hSazd2Y3ZuZ2dCVk5Fdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MTgwMy9DOTIzOEM2NjAyQjIxMUYxQkVGQUM3QTEzRTNEOEM2Ny9qaHJpZmJHVS13
ZUNoUms3dmN2bmdnQlZORXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIdVItLdJ13YFSx5kVFf1jiJbMqp7XmkZZ8KvmqG5RioeSQGg3TP/BuTDWv2x
DMdf50xVv+AdjvksA5LKa+QIXWBS+M+Q0D8x9HTeKH0wy2/+4PeKtJ48SaNio34F
DrfhZIfk5qma73wA8wvgw6sCDNPX7rewZHgTUa0CjoQCpcQNdMYJ+pHa/YB+TW8D
XtGRSQk+Ibcv1WDevPvGloJjzWeSrkcnjT15jM3yaenwk37wuHwLWWGW4KjCPCDG
qGiltFOq9yLjPGh3pdn/OQErf6QCCkwIjBKjhsc72kuBBZR3F+WfJ/LKQqNAs7K8
Fjhe/4V3HTXBryu+MVGa6v8VmA==
-----END CERTIFICATE-----
Generated at Mon Oct 26 23:27:20 2026 by rpki-client