
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft
File: jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft (raw, json)
Hash identifier: WIlSh2P2XuZlttqhULhwRY/ejxt+roGTVNQKPgbb4Uo=
Subject key identifier: F5:BE:0B:DE:C6:0E:E0:71:2A:D1:D3:6A:FA:00:25:5C:D2:69:20:41
Authority key identifier: 8E:11:FC:B4:E8:BD:63:D2:7B:84:EB:2D:52:67:0C:A1:74:F9:C4:3C
Certificate issuer: /CN=A91C3A74/serialNumber=8E11FCB4E8BD63D27B84EB2D52670CA174F9C43C
Certificate serial: 1B62
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jhH8tOi9Y9J7hOstUmcMoXT5xDw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft
Manifest number: 1B58
Signing time: Mon 20 Jul 2026 15:45:44 +0000
Manifest this update: Mon 20 Jul 2026 15:45:43 +0000
Manifest next update: Mon 27 Jul 2026 15:45:43 +0000
Files and hashes: 1: jhH8tOi9Y9J7hOstUmcMoXT5xDw.crl (hash: YSgIVaNceG/i0bXWeXKa3cjC8yvpA5cHV40ptCekFSo=)
2: AFA37450139811EA807F1A26C4F9AE02.roa (hash: Y1iY5bDdtF14xe5+ecYddY6nYDDRlZBhph8kiu8Him8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.crl
rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jhH8tOi9Y9J7hOstUmcMoXT5xDw.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:45:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7010 (0x1b62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C3A74, serialNumber=8E11FCB4E8BD63D27B84EB2D52670CA174F9C43C
Validity
Not Before: Jul 20 15:45:43 2026 GMT
Not After : Jul 27 15:45:43 2026 GMT
Subject: CN=6a5e42a8-651e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:87:ab:05:5b:9f:7d:0c:4d:f4:f4:ad:26:01:
70:a0:56:d3:4f:4f:cd:cb:5f:d0:66:51:c7:3d:db:
82:42:ec:f3:56:08:76:33:13:93:0a:61:05:09:cd:
31:81:d7:9c:86:14:5d:07:c6:b1:fd:c1:77:a5:25:
90:c8:c5:17:05:6a:68:1e:d3:3e:a3:01:5d:cc:93:
ea:09:8d:09:cf:96:0d:2b:f7:80:23:01:f4:c6:07:
92:93:7c:1a:45:48:e2:34:cc:d3:15:f1:b7:fb:a8:
44:b9:7b:f0:6e:97:66:6f:4d:23:c2:90:65:82:8c:
85:84:44:f3:9b:e0:c5:48:4b:0a:45:ee:26:36:f2:
c6:73:62:7d:e9:41:91:04:fa:e3:0a:37:b6:8d:6d:
6f:8f:21:aa:9d:e5:3d:99:29:24:9d:02:76:45:62:
7e:4e:14:06:9c:cb:fb:ad:a1:1c:09:24:bb:42:28:
01:0f:ea:ee:6d:1f:3e:bb:bb:19:5f:4a:0b:cb:71:
22:78:46:8b:88:d2:6d:b6:6c:f0:9e:53:03:f5:06:
3b:cd:1f:2c:3e:92:ff:28:d8:95:61:08:5d:83:0e:
7f:22:a6:35:e9:23:ba:ac:fa:8f:3a:dd:a9:6a:d2:
90:16:7d:f6:b5:a1:11:52:9d:b5:68:d7:c3:a6:cd:
07:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:BE:0B:DE:C6:0E:E0:71:2A:D1:D3:6A:FA:00:25:5C:D2:69:20:41
X509v3 Authority Key Identifier:
keyid:8E:11:FC:B4:E8:BD:63:D2:7B:84:EB:2D:52:67:0C:A1:74:F9:C4:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jhH8tOi9Y9J7hOstUmcMoXT5xDw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:4d:08:78:6c:7a:e2:90:78:62:01:5d:16:de:76:e5:cc:02:
cc:8c:c0:3f:16:4d:4b:a3:5b:17:70:a2:e5:94:52:47:cc:1e:
32:10:04:5a:53:43:96:4a:b7:11:3d:de:1c:f5:05:0f:26:73:
3a:6a:dc:b2:9e:a9:53:31:6c:9a:11:65:36:9c:bf:e0:f9:01:
d1:9a:17:69:2e:f0:41:43:23:5a:ea:e1:e4:5a:58:6c:47:e8:
32:60:17:6f:2d:db:5b:af:e3:f9:a5:4b:bb:0c:bb:03:0f:79:
92:c3:f7:21:aa:42:2e:fc:12:96:ce:ad:9f:51:e3:3e:9a:ac:
b2:65:43:57:6e:7f:98:0a:d7:d0:98:64:2e:a8:53:ac:c0:e4:
46:15:00:92:ad:87:56:24:6e:f6:a9:4f:62:e2:e7:02:a7:55:
d2:31:00:aa:cc:d2:fd:3b:a7:03:cb:de:71:09:66:ba:8f:94:
af:35:8c:d0:c4:3d:66:ee:4b:e5:6a:98:f3:cf:82:8a:50:47:
6b:25:7f:95:dc:d9:16:3e:09:24:26:88:7b:a5:18:16:0c:cb:
94:2e:76:53:99:f2:91:2f:86:64:51:c6:b9:01:00:57:a7:03:
b9:c1:28:e3:83:38:c2:bb:3e:ef:85:94:c3:d5:9a:36:01:9a:
2f:14:44:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:33:38 2026 by rpki-client