
$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft
File: JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft (raw, json)
Hash identifier: CdMGdbENHh8Oe3HVC5xXq4U4/A7vgO68WfTO1UvWvYE=
Subject key identifier: 68:4D:F2:BD:82:B2:46:62:B6:6A:28:45:92:80:2F:79:19:8B:69:C8
Authority key identifier: 26:19:9C:5F:61:89:E0:2E:C5:16:85:39:19:E1:5B:A6:01:D7:C8:5F
Certificate issuer: /CN=A91275FB/serialNumber=26199C5F6189E02EC516853919E15BA601D7C85F
Certificate serial: 18A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft
Manifest number: 1882
Signing time: Mon 02 Mar 2026 01:32:54 +0000
Manifest this update: Mon 02 Mar 2026 01:32:53 +0000
Manifest next update: Mon 09 Mar 2026 01:32:53 +0000
Files and hashes: 1: JhmcX2GJ4C7FFoU5GeFbpgHXyF8.crl (hash: Co+DDVHZITzVAD0LIz9mWQbOCPuVVA5bJnQS9SGxezs=)
2: B5018AB0F2F111F08D4F09A1476F56BC.roa (hash: tpT68E0M3mFJ+XcHkcNvjHUefCfKea/pcyuU4Yj5Ha8=)
3: 71FD6FA8F2E311F098475965426F56BC.roa (hash: 5HXjK8kqpM3j7Dq/3YKkV0LQHLdyempUvfhW1aKXLTA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.crl
rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:32:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6309 (0x18a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91275FB, serialNumber=26199C5F6189E02EC516853919E15BA601D7C85F
Validity
Not Before: Mar 2 01:32:53 2026 GMT
Not After : Mar 9 01:32:53 2026 GMT
Subject: CN=69a4e8c6-d77e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5d:07:cb:05:0d:e0:cc:b7:37:4f:d7:25:55:
36:1b:3e:d6:4c:9a:cb:ad:0c:be:e1:53:f3:2c:17:
05:fd:38:bd:9c:61:74:62:8d:27:87:8a:e9:c1:f4:
b6:25:19:f0:c2:a3:ce:a8:90:5f:7c:4b:bd:4f:78:
f1:ae:a6:ca:82:d5:d9:09:68:a2:f7:14:ec:15:76:
b6:e8:a4:2d:eb:c9:f9:32:7d:67:bc:22:1e:2e:f7:
5b:b0:6d:ac:db:0b:9e:5e:d4:cc:a8:e7:45:9f:9a:
fe:d4:69:0a:ab:e4:79:7c:b6:f0:80:51:45:61:71:
fa:5f:79:be:52:f2:fd:f5:95:fd:77:e4:60:9c:e3:
52:39:e5:25:c6:e5:53:1b:8a:03:d9:b7:81:b6:bc:
a9:a0:b4:e6:75:34:a6:27:82:bf:46:0c:76:1a:0d:
db:cc:d4:c8:47:8c:a6:71:a4:59:74:0a:6c:25:53:
f8:f8:a8:72:c8:85:62:dd:e4:8c:ea:3c:f9:44:b4:
a0:a5:18:51:27:dc:ec:05:bd:23:0c:fd:73:62:a0:
e6:2c:d4:0c:cb:a3:4b:7a:4d:5b:85:dd:e1:57:21:
ab:63:ca:93:47:95:43:0f:50:5c:3f:07:e6:3e:cb:
ab:5e:2c:e8:7a:5b:d0:f1:3c:95:00:66:b1:65:8b:
16:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:4D:F2:BD:82:B2:46:62:B6:6A:28:45:92:80:2F:79:19:8B:69:C8
X509v3 Authority Key Identifier:
keyid:26:19:9C:5F:61:89:E0:2E:C5:16:85:39:19:E1:5B:A6:01:D7:C8:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:36:3f:c5:75:3f:3e:f0:33:3c:62:22:ca:a1:51:60:59:04:
3c:6b:d4:9b:4c:e5:44:c0:b9:52:9f:26:d4:c6:03:6b:d8:3d:
80:54:95:92:c0:77:9e:70:ff:83:d7:22:37:d2:0b:c4:41:a4:
37:c8:07:07:3d:02:f0:8d:40:17:04:58:ea:3a:a4:bb:24:e1:
c4:c8:ab:5a:33:df:b4:50:8a:f1:d2:e4:8b:39:de:39:ec:95:
54:e6:9d:1a:d8:f9:56:71:6e:94:9f:c7:54:56:80:5e:29:c4:
03:d4:bf:e1:cf:f0:c7:c5:0b:52:fb:d6:63:ad:f7:81:ef:65:
24:33:dc:2a:5f:71:af:24:c1:a2:c5:f0:15:d0:9f:62:56:89:
a5:4c:6b:f7:75:7a:f3:1d:8c:b8:46:d8:12:16:a4:4a:fb:fc:
a1:54:10:cc:88:df:28:fa:42:50:72:e4:c9:e3:14:d4:78:a3:
5e:e4:50:3c:ce:1c:96:8e:7d:dc:2e:fa:64:1d:8b:f0:2d:3a:
2d:00:d1:0d:6e:bb:80:60:9b:ba:5a:d3:98:39:a2:65:24:94:
d3:20:bd:a7:00:3a:8c:85:a0:ec:59:99:2b:0b:ea:e7:df:1d:
03:69:14:3e:89:04:00:ce:1b:ac:d7:18:79:ce:41:bd:24:aa:
0e:17:99:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:37:32 2026 by rpki-client