
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft
File: JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft (raw, json)
Hash identifier: 6IeeXPzBjrGJDrv7kTnpe141H/R9tN0xkQuPOKp6RiA=
Subject key identifier: 2B:83:0D:69:2D:79:4C:B0:58:7A:40:E9:6C:85:4C:3B:E0:8D:1A:1B
Authority key identifier: 25:21:ED:A4:6C:D7:0B:83:97:26:06:D3:0D:88:0D:70:34:95:B8:B3
Certificate issuer: /CN=A9185B41/serialNumber=2521EDA46CD70B83972606D30D880D703495B8B3
Certificate serial: 08C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft
Manifest number: 13B3
Signing time: Wed 20 May 2026 19:22:07 +0000
Manifest this update: Wed 20 May 2026 19:22:06 +0000
Manifest next update: Wed 27 May 2026 19:22:06 +0000
Files and hashes: 1: JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl (hash: i2GWFeAm2h1PEyg9N1S3hdjXUNhPqZHDaWz0jqg8p3g=)
2: 5042B970E25B11EA9E988045C4F9AE02.roa (hash: yGyRKh06TFma60wn7/oVG0CZ1hXIDiNrfwQrrBtGYeE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl
rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 19:22:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2242 (0x8c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185B41, serialNumber=2521EDA46CD70B83972606D30D880D703495B8B3
Validity
Not Before: May 20 19:22:06 2026 GMT
Not After : May 27 19:22:06 2026 GMT
Subject: CN=6a0e09df-b79a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:df:fb:10:fd:d7:cd:45:2f:b6:02:78:b2:49:
47:27:d3:6b:9c:94:f3:be:84:3a:3e:f9:b5:a4:50:
93:b1:67:da:ca:18:76:4e:77:44:7f:a7:03:a5:54:
a1:d4:53:76:a8:2c:64:3f:e4:b2:2d:f9:f9:61:1a:
82:8d:46:73:cc:a4:fc:ae:a3:6d:f6:1f:65:52:6f:
a7:a7:5a:da:c1:48:00:bb:6a:1d:6a:ee:77:a6:2d:
b7:56:63:b2:e3:11:e0:10:65:27:19:54:2f:2c:aa:
c4:74:b5:84:2b:82:35:55:ed:0e:9d:17:4f:4e:97:
29:bd:b4:16:01:0e:f1:63:18:de:71:1d:8c:80:aa:
69:66:94:55:87:42:84:07:96:7b:7c:6f:e9:cb:97:
28:0b:ac:ab:27:b9:2a:11:e0:67:a3:57:03:6f:8b:
15:88:48:12:46:91:45:b1:62:9e:88:1c:27:5f:a4:
b1:56:13:51:4a:cf:55:86:65:78:5a:a1:fa:19:83:
7d:0a:b8:b1:43:f9:b8:20:db:fa:0a:46:71:74:b0:
13:d9:c5:a5:97:b4:d9:31:5e:eb:d2:1e:26:7e:8f:
c1:69:a0:c5:55:35:69:0b:70:b8:4e:8f:09:76:43:
d1:12:46:ea:5d:16:c9:fe:44:73:ac:3f:5e:49:8f:
1c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:83:0D:69:2D:79:4C:B0:58:7A:40:E9:6C:85:4C:3B:E0:8D:1A:1B
X509v3 Authority Key Identifier:
keyid:25:21:ED:A4:6C:D7:0B:83:97:26:06:D3:0D:88:0D:70:34:95:B8:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:da:43:8d:e2:f4:fa:12:b3:53:ca:9c:7f:a0:3c:e7:d3:19:
57:93:33:f0:1d:cb:20:65:41:36:01:6a:9e:84:a5:92:3b:cc:
6b:73:09:4a:e4:1e:ab:a5:e0:2e:72:98:db:5a:82:14:94:45:
ff:1b:26:58:15:49:92:e6:a0:7a:0e:49:4b:a8:c3:d7:e7:e2:
c0:4a:01:64:d4:a6:45:65:ff:1e:8c:f3:e0:f6:fe:45:8b:f2:
ad:de:c7:99:78:a7:cc:0a:4d:2b:85:cd:66:17:66:f1:e5:ac:
b6:6d:f0:85:8c:4d:08:ab:14:f6:13:74:b6:d7:fe:a3:67:67:
65:e2:9b:cc:65:6c:dc:64:ba:46:d3:25:af:ad:d4:d9:96:48:
54:02:5c:e2:66:78:21:b6:f2:8b:e3:08:f2:87:3a:29:36:5c:
05:4b:73:01:58:09:8d:15:3d:9d:1d:aa:d2:ba:cc:1a:ad:c0:
9e:b9:f5:24:4c:6c:0b:ae:a1:a7:6c:fa:19:ea:c7:31:d9:4a:
5f:b1:a7:a6:23:33:b3:57:81:ce:62:e7:30:07:d5:3a:55:f8:
41:80:9a:85:d0:75:a4:b7:85:8a:5f:02:da:d1:f2:09:6a:08:
79:73:1f:2f:2f:83:2f:a2:13:8f:1e:46:1e:9d:4b:bf:33:60:
4f:28:72:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 15:05:11 2026 by rpki-client