
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.mft
File: jhITFCkXlrLlK4nYfE7W2dz6Uks.mft (raw, json)
Hash identifier: 5Q4lkZYW9B8OJE6Hul/YBdEfIJLLz4Mnu6gv+5eMWTE=
Subject key identifier: 12:14:8B:C0:12:F7:CE:8E:FA:1D:20:C9:D0:BA:7C:F4:06:D7:B1:3E
Authority key identifier: 8E:12:13:14:29:17:96:B2:E5:2B:89:D8:7C:4E:D6:D9:DC:FA:52:4B
Certificate issuer: /CN=A91B6DD0/serialNumber=8E121314291796B2E52B89D87C4ED6D9DCFA524B
Certificate serial: 84
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jhITFCkXlrLlK4nYfE7W2dz6Uks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.mft
Manifest number: 77
Signing time: Mon 01 Jun 2026 08:43:17 +0000
Manifest this update: Mon 01 Jun 2026 08:43:17 +0000
Manifest next update: Mon 08 Jun 2026 08:43:17 +0000
Files and hashes: 1: jhITFCkXlrLlK4nYfE7W2dz6Uks.crl (hash: zmrH9K22awWbaiiZ7QXfJdkejkZ79OCeJR0GxssIpbg=)
2: B753A48EC6C711F09BF6A518C4F9AE02.roa (hash: nCUAwcVtKiknK/x07jx8AEGgjWAlFPwBHEfe76OnWT4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.crl
rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jhITFCkXlrLlK4nYfE7W2dz6Uks.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 08:43:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132 (0x84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6DD0, serialNumber=8E121314291796B2E52B89D87C4ED6D9DCFA524B
Validity
Not Before: Jun 1 08:43:17 2026 GMT
Not After : Jun 8 08:43:17 2026 GMT
Subject: CN=6a1d4625-76cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c6:ff:15:da:0f:52:4b:24:fe:af:f9:51:34:
e8:f9:d3:5d:a0:ff:3d:da:b3:71:b2:46:eb:16:b1:
c2:4a:65:10:8a:21:dc:e8:be:0e:90:ef:c4:ec:39:
aa:65:0c:dc:50:59:5f:60:c6:c3:8a:df:d2:f9:22:
f5:2f:a8:01:e3:08:fd:d7:06:e4:eb:c7:e1:e1:e3:
5d:7d:7d:68:15:45:96:80:2c:58:a7:5d:6b:7a:24:
48:ae:84:14:16:38:66:e7:fd:52:10:31:4d:79:0f:
0f:79:09:58:cc:07:04:4b:98:96:c3:8f:c0:3b:67:
12:00:39:ab:0b:d6:65:48:6f:9a:a4:d5:8e:cd:88:
52:d5:da:fe:84:23:bd:b5:0a:f2:dd:4d:1a:f3:42:
76:07:f5:62:02:27:bf:be:05:0b:3a:6d:b0:88:9a:
31:e9:25:0d:8d:14:f4:e0:96:f0:96:e1:ba:c5:66:
2f:7d:f0:52:b7:57:3c:f5:ad:71:3a:73:ee:ab:ff:
40:c7:e0:9e:c5:69:c5:91:4a:7e:84:15:58:d6:19:
21:bb:3f:7f:3e:85:fb:fe:a9:f4:05:23:65:05:85:
f6:5c:28:35:49:cc:99:e9:1b:2b:95:fa:2d:6f:4e:
03:1a:c4:e0:e5:78:a5:f6:3e:0c:9b:e8:cd:72:84:
32:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:14:8B:C0:12:F7:CE:8E:FA:1D:20:C9:D0:BA:7C:F4:06:D7:B1:3E
X509v3 Authority Key Identifier:
keyid:8E:12:13:14:29:17:96:B2:E5:2B:89:D8:7C:4E:D6:D9:DC:FA:52:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jhITFCkXlrLlK4nYfE7W2dz6Uks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:0c:d5:37:8f:70:9e:2b:09:8f:39:40:9b:ac:2d:79:3c:9e:
16:67:36:5a:8f:97:fe:68:f1:e6:50:68:5a:82:ef:3f:46:b0:
ea:e1:52:67:8d:ec:3b:69:73:2a:f5:e0:21:5a:fe:7f:59:33:
38:5d:81:55:5f:37:62:1c:a1:3d:cf:14:29:5e:23:2b:fe:4b:
e4:58:cb:b4:0a:5f:c6:7f:21:9f:52:f1:5a:b8:b3:e6:bb:c0:
85:33:59:5e:bc:51:cf:8e:39:72:5a:42:1a:a9:88:24:b8:99:
b9:c6:ec:6b:fa:89:5e:24:cf:f0:02:a3:9b:68:0f:e9:2a:ce:
f8:60:3b:e7:ea:e8:de:23:cd:88:41:0a:24:bc:d6:8f:2f:57:
d4:7d:91:d3:d4:59:34:3d:d5:ca:a6:ed:a8:d6:8d:59:83:1d:
6d:82:14:b5:e9:b8:58:45:9f:61:14:ee:96:05:c0:4c:30:12:
94:2d:ab:1a:9a:9a:24:c3:6b:9b:b0:1a:0b:6f:39:99:54:86:
56:9a:73:e1:bc:27:07:91:0e:1d:03:7f:e0:c6:cf:d3:6d:75:
b1:e7:d4:90:a7:e7:6d:61:10:ea:c9:dc:14:dc:0e:bd:7e:8f:
1a:45:5b:d9:b0:eb:a6:a3:87:c7:0e:e5:11:e1:21:8e:89:26:
f8:d0:8c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:41 2026 by rpki-client