
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.mft
File: jhITFCkXlrLlK4nYfE7W2dz6Uks.mft (raw, json)
Hash identifier: JOyoJKLt73VNs2iROcMq7O/49nsKbetvztpwa4dxuGA=
Subject key identifier: 98:C1:65:AD:C6:1A:37:77:1F:DF:9F:7E:D2:74:86:EC:E2:35:CA:6E
Authority key identifier: 8E:12:13:14:29:17:96:B2:E5:2B:89:D8:7C:4E:D6:D9:DC:FA:52:4B
Certificate issuer: /CN=A91B6DD0/serialNumber=8E121314291796B2E52B89D87C4ED6D9DCFA524B
Certificate serial: 9A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jhITFCkXlrLlK4nYfE7W2dz6Uks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.mft
Manifest number: 8D
Signing time: Fri 17 Jul 2026 08:54:52 +0000
Manifest this update: Fri 17 Jul 2026 08:54:51 +0000
Manifest next update: Fri 24 Jul 2026 08:54:51 +0000
Files and hashes: 1: jhITFCkXlrLlK4nYfE7W2dz6Uks.crl (hash: BYbpvTsDfvIpbdrEzkJSBfXrDzATYwKPv4s9Vc9FZmk=)
2: B753A48EC6C711F09BF6A518C4F9AE02.roa (hash: nCUAwcVtKiknK/x07jx8AEGgjWAlFPwBHEfe76OnWT4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.crl
rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jhITFCkXlrLlK4nYfE7W2dz6Uks.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 08:54:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154 (0x9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6DD0, serialNumber=8E121314291796B2E52B89D87C4ED6D9DCFA524B
Validity
Not Before: Jul 17 08:54:51 2026 GMT
Not After : Jul 24 08:54:51 2026 GMT
Subject: CN=6a59eddc-fe77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f7:9f:58:73:70:09:4d:a4:d2:da:68:86:dc:
b0:c1:3a:4a:f0:c7:f6:19:94:d4:94:29:6d:12:e9:
b5:a2:d7:00:3e:54:e3:0c:60:ba:3a:bb:d6:31:af:
b0:98:1d:e5:7b:52:87:95:c5:22:5a:61:61:e0:b6:
aa:b4:c2:bb:a2:fd:59:ff:18:72:90:79:2e:e8:38:
90:ae:ef:fe:c3:64:55:ff:af:c5:ee:b2:e0:bc:db:
57:95:a5:6f:ca:aa:88:bc:46:fd:23:a7:a4:9e:20:
fc:3b:31:16:bd:88:e8:68:b2:a6:da:e4:ba:70:71:
c7:99:4d:cb:80:af:37:be:d1:c7:d9:44:d1:e4:2f:
22:a5:5a:82:1a:50:80:6e:05:fe:46:c9:c6:a2:8a:
60:2b:67:40:6d:7a:f6:b7:ce:80:ed:b8:c9:f5:bb:
e1:f2:16:cf:1e:0e:11:47:1b:81:b6:b0:09:0c:22:
b3:28:37:35:75:cc:9c:c3:3d:90:03:93:b9:02:03:
0b:ff:65:40:ba:ce:40:83:f8:ab:43:35:ef:7b:8f:
1a:06:d5:33:be:90:01:e5:cf:64:d3:b8:c6:11:0e:
46:18:ea:f6:c6:4c:8d:e3:18:26:10:6f:2f:39:81:
1c:cc:e8:83:db:2c:5c:80:db:c1:61:0c:06:fe:41:
a9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C1:65:AD:C6:1A:37:77:1F:DF:9F:7E:D2:74:86:EC:E2:35:CA:6E
X509v3 Authority Key Identifier:
keyid:8E:12:13:14:29:17:96:B2:E5:2B:89:D8:7C:4E:D6:D9:DC:FA:52:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jhITFCkXlrLlK4nYfE7W2dz6Uks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:2d:6c:01:26:09:48:f6:f3:b3:39:e5:7b:b4:44:e0:e1:17:
d7:d5:ee:32:8a:33:4e:ff:fb:c0:14:f7:03:ac:87:c1:f4:7e:
98:55:da:25:db:47:ce:8a:af:70:31:7c:57:75:5c:06:5b:4f:
8d:d2:15:10:af:fa:80:75:1a:08:16:dd:fa:6e:e3:a8:c1:89:
f3:0a:d6:41:54:6e:62:fa:21:a5:6d:cc:24:19:e8:b3:ae:7a:
50:38:5a:4a:99:b2:2f:5b:be:45:a9:2c:fd:7f:10:60:7a:f9:
38:88:d1:33:2c:6f:e7:83:20:fe:31:c6:4d:21:3d:9e:36:b6:
77:bd:3e:58:ef:0b:9e:44:a7:2f:7d:d1:84:47:dd:c4:aa:35:
86:8a:71:3a:09:5a:a8:75:12:6e:86:af:8e:57:e0:b7:cf:03:
91:76:78:d2:a3:9c:99:a4:5b:75:ec:b3:03:57:53:e3:12:5e:
f1:0c:b4:82:16:ea:3e:9b:26:3e:a0:c8:0e:da:48:6a:a3:a0:
c7:00:25:62:7a:97:80:a4:7c:a7:93:e0:88:3d:ff:85:11:fd:
3e:41:e3:45:ef:81:37:78:6c:f9:3c:bf:77:4a:76:4d:ff:1c:
68:8c:00:c5:4c:a7:83:00:8f:1a:50:19:c1:9b:6b:de:99:85:
3d:fb:20:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:24:24 2026 by rpki-client