
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft
File: JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft (raw, json)
Hash identifier: /dJeIHvlXKwovSvvqN3JK9vfzTIeZq0HZQJ7STT+2a0=
Subject key identifier: 20:46:26:6F:10:96:77:D3:DD:CC:EA:EF:16:CB:A8:8F:93:EA:12:E1
Authority key identifier: 25:21:ED:A4:6C:D7:0B:83:97:26:06:D3:0D:88:0D:70:34:95:B8:B3
Certificate issuer: /CN=A9185B41/serialNumber=2521EDA46CD70B83972606D30D880D703495B8B3
Certificate serial: 08F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft
Manifest number: 1415
Signing time: Tue 18 Aug 2026 19:33:39 +0000
Manifest this update: Tue 18 Aug 2026 19:33:38 +0000
Manifest next update: Tue 25 Aug 2026 19:33:38 +0000
Files and hashes: 1: JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl (hash: Lr7QOKjdk8pTkAIXxqs8mV5kBvzLZkJVlO5MMJ7Vn5E=)
2: 5042B970E25B11EA9E988045C4F9AE02.roa (hash: vM0V/shhUOo/yI8LQ9Ql73pjesyven5lDiLBb4Vn1tU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl
rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 19:33:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2296 (0x8f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185B41, serialNumber=2521EDA46CD70B83972606D30D880D703495B8B3
Validity
Not Before: Aug 18 19:33:38 2026 GMT
Not After : Aug 25 19:33:38 2026 GMT
Subject: CN=6a84b393-270c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bd:5a:62:2b:95:07:e6:f0:bb:7c:25:bf:c9:
5d:6f:56:cd:b0:93:ff:40:2a:2f:98:8e:9a:28:34:
c0:f0:90:72:a2:60:93:11:99:ed:db:0b:f7:66:96:
0a:af:bf:4e:37:3d:89:5e:5f:b2:bc:12:99:a3:81:
af:8f:0f:f2:ca:60:fa:82:6e:ff:7c:fa:41:10:70:
6e:41:dd:34:97:f7:5e:85:c2:f9:5c:4d:20:da:d8:
00:6f:0e:f9:1d:9f:b1:63:2f:27:97:b9:8d:63:d3:
1a:58:c1:12:49:c4:3d:57:d2:10:5f:48:c7:8b:7a:
bb:ac:46:8b:ad:9d:66:2a:6d:5a:10:a1:8f:63:1d:
1f:3f:e0:69:28:bf:e2:d9:3f:fb:d4:1a:8f:11:3e:
8a:a8:c6:aa:a2:b0:4d:b8:98:04:66:b6:73:69:44:
33:66:2d:25:b1:74:35:d2:3e:dc:15:30:a7:66:22:
30:b3:fa:9f:b0:2f:19:41:36:94:08:16:de:2c:c9:
a7:8f:f6:68:fe:8d:74:48:99:5f:b6:5e:90:8b:ef:
20:f3:26:97:cf:89:eb:e2:09:c0:d0:b4:45:62:1e:
56:4e:33:6e:28:74:b6:49:2b:ff:a5:51:2d:b7:7b:
30:72:04:46:89:a2:ff:0e:b7:ca:00:4a:be:7a:f5:
78:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:46:26:6F:10:96:77:D3:DD:CC:EA:EF:16:CB:A8:8F:93:EA:12:E1
X509v3 Authority Key Identifier:
keyid:25:21:ED:A4:6C:D7:0B:83:97:26:06:D3:0D:88:0D:70:34:95:B8:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:d3:65:71:36:b5:7b:ec:7e:b2:4f:e7:8a:28:55:e2:8b:52:
23:13:30:6b:e5:6e:bd:cc:bf:fe:25:84:48:ad:d2:62:da:08:
d7:d7:7c:0d:91:81:3c:aa:a5:e9:d8:69:b4:d4:f8:c6:19:a6:
58:ab:f0:f0:5e:52:a4:68:5d:75:62:2e:12:91:4f:15:fe:78:
5f:ed:3c:71:5b:be:fa:69:77:70:50:93:38:69:82:e4:77:82:
6e:e9:6b:53:af:fb:f0:5f:06:9d:a8:d3:fc:2b:c7:92:ea:81:
c5:b5:7c:71:aa:a1:e3:51:e4:54:a3:32:a5:04:ad:31:98:1f:
0f:6d:b0:4e:eb:32:09:18:4f:a1:f8:47:8a:e1:e2:c2:f6:d5:
ea:ce:09:09:07:3e:dd:a0:14:d6:58:07:62:4d:35:06:ed:62:
3d:38:5e:58:6e:72:3d:33:5d:c5:36:06:41:cf:5a:f1:a8:33:
7e:db:34:d6:f5:45:ac:f7:e7:57:b3:6e:de:be:42:d8:78:14:
97:63:e4:42:a2:82:50:70:07:cd:ed:65:7b:8c:bb:30:33:fa:
1f:45:31:32:d8:99:25:e9:f1:ca:e5:85:6f:8a:7d:c8:6a:0f:
e4:78:8e:97:81:50:68:ff:1b:06:33:e2:f3:b1:a6:a2:36:e2:
56:d4:54:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:46:18 2026 by rpki-client