
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.mft
File: jhITFCkXlrLlK4nYfE7W2dz6Uks.mft (raw, json)
Hash identifier: 3swmC9xiY2UbEY8UKCam+A+xWL71dylqB5pj8fB1A+w=
Subject key identifier: 22:D6:EF:F4:CB:AC:4C:7F:D3:59:37:6E:12:24:04:2C:20:91:AE:FD
Authority key identifier: 8E:12:13:14:29:17:96:B2:E5:2B:89:D8:7C:4E:D6:D9:DC:FA:52:4B
Certificate issuer: /CN=A91B6DD0/serialNumber=8E121314291796B2E52B89D87C4ED6D9DCFA524B
Certificate serial: 55
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jhITFCkXlrLlK4nYfE7W2dz6Uks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.mft
Manifest number: 48
Signing time: Tue 03 Mar 2026 08:09:54 +0000
Manifest this update: Tue 03 Mar 2026 08:09:54 +0000
Manifest next update: Tue 10 Mar 2026 08:09:54 +0000
Files and hashes: 1: jhITFCkXlrLlK4nYfE7W2dz6Uks.crl (hash: +dNhYETvd46GYF4MIJoYaSzEVH3v/vYu9ti3HyPP/fQ=)
2: B753A48EC6C711F09BF6A518C4F9AE02.roa (hash: nCUAwcVtKiknK/x07jx8AEGgjWAlFPwBHEfe76OnWT4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.crl
rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jhITFCkXlrLlK4nYfE7W2dz6Uks.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 08:09:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85 (0x55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6DD0, serialNumber=8E121314291796B2E52B89D87C4ED6D9DCFA524B
Validity
Not Before: Mar 3 08:09:54 2026 GMT
Not After : Mar 10 08:09:54 2026 GMT
Subject: CN=69a69752-e839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9e:67:ba:45:65:6a:44:4b:1a:eb:1e:59:a9:
93:db:7a:10:96:ff:f9:f8:8f:2b:db:e6:c5:c9:29:
dd:ad:89:fd:09:4f:f5:2a:f8:2d:5d:66:b1:07:37:
18:8f:d5:ad:79:01:7a:34:61:c6:db:a4:4b:6e:50:
af:a1:75:1d:16:4f:29:e2:6d:15:1c:1f:99:3c:aa:
13:51:b7:40:37:3c:06:27:57:18:28:66:35:a4:7c:
6f:05:f0:c0:8c:29:12:5b:a7:6e:7a:08:60:d8:95:
8f:5e:7f:fc:8e:b5:43:de:6c:a9:96:be:13:ad:49:
c4:53:87:2c:a9:85:76:22:7d:a6:5c:f1:f0:bd:99:
ab:f8:b5:f1:e0:4f:1e:ec:d0:f5:54:ac:e9:a0:5f:
d6:bb:f3:83:d2:41:d1:9e:ff:9f:b2:e1:87:90:1a:
42:f1:e5:e5:d6:6e:b1:27:5b:a4:73:d3:3d:bd:1a:
cd:03:60:0e:16:42:15:79:f7:49:bb:87:22:5a:87:
ea:af:ed:1e:e9:0f:6d:00:a7:89:f3:b8:af:ad:54:
b7:a2:a3:e8:91:9d:0b:bc:a7:da:47:34:2d:82:8a:
24:b4:81:a4:10:cb:74:61:6c:c6:de:9c:6c:f9:8c:
34:4c:f2:91:ec:99:3c:36:da:e4:42:73:ca:57:4d:
93:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D6:EF:F4:CB:AC:4C:7F:D3:59:37:6E:12:24:04:2C:20:91:AE:FD
X509v3 Authority Key Identifier:
keyid:8E:12:13:14:29:17:96:B2:E5:2B:89:D8:7C:4E:D6:D9:DC:FA:52:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jhITFCkXlrLlK4nYfE7W2dz6Uks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:82:be:5c:d4:43:17:dd:b7:4c:0b:af:13:ff:40:44:77:df:
4e:79:22:b9:4a:d7:d2:f7:60:a4:13:64:c1:12:1b:73:58:3c:
9e:8c:8a:43:be:1c:61:31:4d:fe:f2:c8:07:bc:62:a2:0d:a4:
bc:36:27:1a:44:06:aa:37:cb:a1:6d:a8:4c:a4:27:50:9e:9f:
7d:11:0b:1e:38:3c:e8:bf:39:6a:d0:47:fd:21:d2:e6:fe:db:
37:af:38:1e:38:bd:cc:d5:e6:f8:26:28:cf:37:97:a4:13:af:
09:b6:6e:d1:96:a0:9f:42:37:b4:26:b5:ad:b1:da:4a:35:0a:
d4:e9:ca:d7:13:07:1b:0e:cc:0f:c8:23:6e:70:a3:bc:91:d3:
33:d6:b1:03:79:6b:e8:02:cd:ed:26:0e:0b:21:3f:82:37:a4:
49:e6:84:15:52:1b:4d:98:e4:96:8a:e0:92:bc:54:1a:d4:89:
0b:51:43:96:b6:16:9b:48:2c:17:7d:fe:b3:73:41:e6:42:0b:
3d:e1:33:1b:00:df:f6:b9:d0:f9:2c:af:66:4f:06:94:b8:59:
be:a4:56:a6:ce:80:ec:13:a0:3e:d2:f2:5b:d0:6c:90:22:80:
9d:65:4a:95:44:79:e2:b7:ba:62:ce:ee:81:82:4f:18:6a:89:
e9:c5:20:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:38:42 2026 by rpki-client