
$ rpki-client -vvf rpki.apnic.net/member_repository/A918DF0C/5B190E30184311EBB3AA713AC4F9AE02/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.mft
File: jhtxhoZBeEjZ0-YiY8bg0wS9N-w.mft (raw, json)
Hash identifier: bflq8xYBd21yDMiEbGlw5R8rquwSAkAeJBqWIv5z9cA=
Subject key identifier: F4:53:55:60:CD:03:A0:72:CA:85:44:8D:B2:E9:FE:7B:88:F1:F6:ED
Authority key identifier: 8E:1B:71:86:86:41:78:48:D9:D3:E6:22:63:C6:E0:D3:04:BD:37:EC
Certificate issuer: /CN=A918DF0C/serialNumber=8E1B718686417848D9D3E62263C6E0D304BD37EC
Certificate serial: 081C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918DF0C/5B190E30184311EBB3AA713AC4F9AE02/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.mft
Manifest number: 0814
Signing time: Sat 04 Apr 2026 20:53:43 +0000
Manifest this update: Sat 04 Apr 2026 20:53:42 +0000
Manifest next update: Sat 11 Apr 2026 20:53:42 +0000
Files and hashes: 1: jhtxhoZBeEjZ0-YiY8bg0wS9N-w.crl (hash: EQ2KCUky0NfBZy1hoPaUMe052vugLbc/CQMKMoFdulw=)
2: 181D7270184711EBAD14343FC4F9AE02.roa (hash: OrVBPVtRF7WGpthCgMiHldDDDE70rH33I+w5C0zy5Nw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918DF0C/5B190E30184311EBB3AA713AC4F9AE02/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.crl
rsync://rpki.apnic.net/member_repository/A918DF0C/5B190E30184311EBB3AA713AC4F9AE02/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 20:53:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2076 (0x81c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918DF0C, serialNumber=8E1B718686417848D9D3E62263C6E0D304BD37EC
Validity
Not Before: Apr 4 20:53:42 2026 GMT
Not After : Apr 11 20:53:42 2026 GMT
Subject: CN=69d17a57-5a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0c:b5:a6:ad:b9:42:9b:e1:50:8b:c2:6e:b3:
b5:ec:17:50:fa:f2:57:89:ec:ec:d3:c0:c3:ba:64:
17:5f:0f:87:e2:8b:7b:6f:c4:b9:c9:2f:c6:29:97:
ba:20:95:11:8a:00:fd:5c:01:53:80:7c:67:89:9d:
25:48:16:9a:0c:e9:49:7d:70:29:c6:d8:a0:93:d5:
bb:75:8c:14:aa:be:08:b0:bf:71:80:93:4f:8d:ff:
91:55:1c:54:16:ad:10:16:e1:f0:7b:9c:5d:26:1d:
2f:89:6a:75:6c:8c:c0:5b:67:f3:4e:f7:76:18:e0:
7d:19:44:99:64:d0:cf:c0:7a:62:0f:a6:eb:32:f1:
0a:1b:18:1d:d3:a3:b0:a5:ff:60:4c:46:7a:92:13:
8c:7e:59:35:e8:ef:af:17:c4:08:a8:8c:71:d0:62:
f1:20:2d:73:e5:77:ec:92:b6:88:c9:e1:77:83:6b:
f3:55:c3:59:64:71:8c:da:81:16:39:e0:53:aa:d8:
37:66:32:73:a2:9e:50:24:99:99:d5:bc:7f:d2:e8:
56:42:f0:de:60:7d:b7:e7:f9:03:bd:a2:ab:2b:69:
11:39:53:06:29:e5:3a:06:8c:a9:55:3e:48:55:6a:
a2:2f:ce:b5:35:1c:fc:a5:b0:86:d5:dc:22:4f:ea:
f0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:53:55:60:CD:03:A0:72:CA:85:44:8D:B2:E9:FE:7B:88:F1:F6:ED
X509v3 Authority Key Identifier:
keyid:8E:1B:71:86:86:41:78:48:D9:D3:E6:22:63:C6:E0:D3:04:BD:37:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918DF0C/5B190E30184311EBB3AA713AC4F9AE02/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DF0C/5B190E30184311EBB3AA713AC4F9AE02/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:2d:7f:84:4a:e1:14:3c:e2:f1:3f:7c:cf:1b:77:95:d4:ca:
5a:f9:9a:6a:b7:ff:82:ad:fa:33:12:30:64:9b:45:fd:64:b5:
24:fb:bb:41:34:dc:07:f9:48:5e:05:c7:41:df:ec:6d:37:0f:
fd:0f:0f:ff:5d:f2:98:96:bb:be:96:58:ad:d9:49:14:8d:20:
9b:70:76:eb:60:f4:9e:07:f2:cd:d3:1e:9f:e4:1e:29:c9:14:
8a:e3:8a:f0:02:f0:9c:ca:85:93:5d:6f:a7:dc:bd:e4:3b:0a:
69:e9:fe:8b:cc:50:d8:1a:0d:ee:7c:99:c2:51:75:d4:f8:34:
bc:5d:e2:42:35:cf:8c:7f:c2:43:4e:61:da:76:11:d9:cb:9a:
66:9d:b7:bb:ae:2a:82:cd:25:c9:f3:6f:43:ac:23:c0:be:97:
2d:21:57:3b:d9:70:cb:f7:f7:11:78:92:5d:89:46:7f:b7:2c:
28:9f:13:ba:98:bb:ef:0a:13:d9:62:24:f0:db:e6:bb:d0:17:
11:6b:5d:86:22:62:f2:11:1f:55:7e:d7:61:fd:4e:62:fa:51:
2f:c8:fc:92:48:27:9c:77:4a:35:1d:8d:79:07:6a:a0:a0:44:
89:8b:3b:74:2e:03:06:93:5e:73:7e:58:a2:8f:fd:ae:49:08:
f1:60:e0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:33:13 2026 by rpki-client