
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft
File: jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft (raw, json)
Hash identifier: lqJgJmgqFOUnn+yuPdtRpm27vUQWKNq7rkQeCbTqd64=
Subject key identifier: FD:83:3E:7C:E5:70:87:CF:BC:55:25:66:55:DF:DA:23:E8:64:F4:7E
Authority key identifier: 8E:11:FC:B4:E8:BD:63:D2:7B:84:EB:2D:52:67:0C:A1:74:F9:C4:3C
Certificate issuer: /CN=A91C3A74/serialNumber=8E11FCB4E8BD63D27B84EB2D52670CA174F9C43C
Certificate serial: 1B7A
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jhH8tOi9Y9J7hOstUmcMoXT5xDw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft
Manifest number: 1B70
Signing time: Fri 04 Sep 2026 15:38:56 +0000
Manifest this update: Fri 04 Sep 2026 15:38:56 +0000
Manifest next update: Fri 11 Sep 2026 15:38:56 +0000
Files and hashes: 1: jhH8tOi9Y9J7hOstUmcMoXT5xDw.crl (hash: 1JfHYVbQLfWTXtAbxsrSWpnYdhbl3k76F2YQHgjeMTA=)
2: AFA37450139811EA807F1A26C4F9AE02.roa (hash: Y1iY5bDdtF14xe5+ecYddY6nYDDRlZBhph8kiu8Him8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.crl
rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jhH8tOi9Y9J7hOstUmcMoXT5xDw.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 14:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7034 (0x1b7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C3A74, serialNumber=8E11FCB4E8BD63D27B84EB2D52670CA174F9C43C
Validity
Not Before: Sep 4 15:38:56 2026 GMT
Not After : Sep 11 15:38:56 2026 GMT
Subject: CN=6a9ae610-2c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:87:c3:49:c4:40:8a:d4:00:c9:05:19:d6:65:
45:f8:2c:9b:d1:16:1c:b8:f8:21:39:c1:48:b6:ef:
a5:58:0a:c6:f3:c2:e8:4c:9e:57:da:4f:e8:5b:e1:
c5:09:3e:a5:7e:d0:83:46:94:11:fe:6a:94:5a:64:
36:2e:16:af:f5:7e:56:4c:7f:2d:96:93:a8:8b:9d:
45:81:50:ee:b4:23:3d:95:0e:a7:ff:d7:f5:5f:6c:
d0:ec:d1:03:e2:67:7a:32:eb:08:ca:4b:f8:64:22:
3a:78:ef:69:3a:3d:4d:34:6d:3e:97:b3:a5:2a:1f:
d6:1e:f0:4c:80:fe:0c:97:66:8b:b7:b9:c1:0f:d5:
6f:66:09:ca:43:c3:5c:d6:e4:cf:1e:bc:ea:8d:c1:
6d:7e:76:27:34:4d:30:72:b4:ff:65:b1:2a:f4:c7:
53:7f:f9:76:ff:7c:16:f4:aa:4d:66:bd:c1:00:20:
17:97:4d:09:f9:c9:29:f2:a8:40:14:33:95:09:04:
96:b0:c7:0d:82:27:5b:2b:ff:c6:b5:d2:1a:3f:21:
d4:4c:6f:22:60:f1:bd:9b:0c:fb:f4:5a:2c:79:15:
2a:fd:63:61:9e:7d:df:52:ff:1b:f9:b1:5d:b3:9a:
26:3b:f4:6a:69:47:93:d7:ca:42:19:68:c2:57:b1:
6b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:83:3E:7C:E5:70:87:CF:BC:55:25:66:55:DF:DA:23:E8:64:F4:7E
X509v3 Authority Key Identifier:
keyid:8E:11:FC:B4:E8:BD:63:D2:7B:84:EB:2D:52:67:0C:A1:74:F9:C4:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jhH8tOi9Y9J7hOstUmcMoXT5xDw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:84:48:4a:88:0b:05:eb:ef:b6:ee:85:da:33:dd:9a:54:1e:
e5:0f:9f:53:ad:69:46:61:68:ce:3c:9f:5b:fa:48:a1:3c:76:
3b:02:38:55:c7:2a:e3:31:32:a0:5d:d6:ab:3a:f1:83:9e:e8:
cf:b7:9b:0d:81:ad:89:bf:ad:c8:33:d7:28:e9:35:d8:4c:c0:
e8:97:19:3e:1a:3e:a1:ea:4e:1e:89:a9:8c:4a:25:09:01:7a:
b7:2d:2c:b9:85:16:c9:df:d7:5d:56:69:06:f3:8a:46:92:88:
16:46:0f:e8:3b:0d:82:04:5a:1c:c1:2e:16:f4:7e:e0:60:77:
c3:67:e9:e5:64:27:f8:be:d1:b6:d3:11:3c:14:63:79:38:d6:
e2:55:19:ea:19:b4:45:e9:c6:b3:1f:26:16:a8:ad:ec:63:07:
bd:9a:09:39:40:01:b0:76:ff:d1:04:a3:d8:cf:c0:66:c4:cc:
86:3a:49:c2:11:05:8f:51:96:2e:42:8a:9c:bc:aa:ca:4f:0b:
23:68:ef:9d:63:e9:48:1b:79:f2:9e:78:4e:a6:0c:79:c7:fb:
ed:7f:99:69:3b:a9:91:f3:8d:42:05:8d:35:24:a7:7c:7f:3a:
75:54:9e:e7:75:e6:a0:a1:45:4e:09:41:63:f2:b3:cb:ec:98:
ac:b3:be:44
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICG3owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzNBNzQxMTAvBgNVBAUTKDhFMTFGQ0I0RThCRDYzRDI3Qjg0RUIyRDUyNjcwQ0Ex
NzRGOUM0M0MwHhcNMjYwOTA0MTUzODU2WhcNMjYwOTExMTUzODU2WjAYMRYwFAYD
VQQDEw02YTlhZTYxMC0yYzhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApofDScRAitQAyQUZ1mVF+Cyb0RYcuPghOcFItu+lWArG88LoTJ5X2k/oW+HF
CT6lftCDRpQR/mqUWmQ2Lhav9X5WTH8tlpOoi51FgVDutCM9lQ6n/9f1X2zQ7NED
4md6MusIykv4ZCI6eO9pOj1NNG0+l7OlKh/WHvBMgP4Ml2aLt7nBD9VvZgnKQ8Nc
1uTPHrzqjcFtfnYnNE0wcrT/ZbEq9MdTf/l2/3wW9KpNZr3BACAXl00J+ckp8qhA
FDOVCQSWsMcNgidbK//GtdIaPyHUTG8iYPG9mwz79FoseRUq/WNhnn3fUv8b+bFd
s5omO/RqaUeT18pCGWjCV7FrvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP2DPnzl
cIfPvFUlZlXf2iPoZPR+MB8GA1UdIwQYMBaAFI4R/LTovWPSe4TrLVJnDKF0+cQ8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0E3NC83NTNENzFFRTNB
QjUxMUU3Qjg2MDlGMUNDNEY5QUUwMi9qaEg4dE9pOVk5SjdoT3N0VW1jTW9YVDV4
RHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL2poSDh0T2k5WTlKN2hPc3RVbWNNb1hUNXhEdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
M0E3NC83NTNENzFFRTNBQjUxMUU3Qjg2MDlGMUNDNEY5QUUwMi9qaEg4dE9pOVk5
SjdoT3N0VW1jTW9YVDV4RHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZYRISogLBevvtu6F2jPdmlQe5Q+fU61pRmFozjyfW/pIoTx2OwI4Vccq4zEy
oF3Wqzrxg57oz7ebDYGtib+tyDPXKOk12EzA6JcZPho+oepOHompjEolCQF6ty0s
uYUWyd/XXVZpBvOKRpKIFkYP6DsNggRaHMEuFvR+4GB3w2fp5WQn+L7RttMRPBRj
eTjW4lUZ6hm0RenGsx8mFqit7GMHvZoJOUABsHb/0QSj2M/AZsTMhjpJwhEFj1GW
LkKKnLyqyk8LI2jvnWPpSBt58p54TqYMecf77X+ZaTupkfONQgWNNSSnfH86dVSe
53XmoKFFTglBY/Kzy+yYrLO+RA==
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:41:52 2026 by rpki-client