
$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft
File: JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft (raw, json)
Hash identifier: hlLA94A8to/AktXobDM9eLZ+HL5rop3FKMsbsdq5NvY=
Subject key identifier: F9:F3:8B:89:CC:46:F2:2B:D5:01:D4:93:45:29:EA:8F:F5:48:9C:4D
Authority key identifier: 26:19:9C:5F:61:89:E0:2E:C5:16:85:39:19:E1:5B:A6:01:D7:C8:5F
Certificate issuer: /CN=A91275FB/serialNumber=26199C5F6189E02EC516853919E15BA601D7C85F
Certificate serial: 18F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft
Manifest number: 18D0
Signing time: Tue 28 Jul 2026 16:34:23 +0000
Manifest this update: Tue 28 Jul 2026 16:34:23 +0000
Manifest next update: Tue 04 Aug 2026 16:34:23 +0000
Files and hashes: 1: JhmcX2GJ4C7FFoU5GeFbpgHXyF8.crl (hash: S7v52bEP9HxT5tGU5vUwVPpzVdDe2UqGONi31rkgM2k=)
2: B5018AB0F2F111F08D4F09A1476F56BC.roa (hash: tpT68E0M3mFJ+XcHkcNvjHUefCfKea/pcyuU4Yj5Ha8=)
3: DD08B4105E2C11F186CCCA35FE79AC22.roa (hash: iMSMPc8yN0Co1KN/XbiA4dsgvlldk+17mbS4HySKK+w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.crl
rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 16:34:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6388 (0x18f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91275FB, serialNumber=26199C5F6189E02EC516853919E15BA601D7C85F
Validity
Not Before: Jul 28 16:34:23 2026 GMT
Not After : Aug 4 16:34:23 2026 GMT
Subject: CN=6a68da0f-3d79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3a:4c:18:ec:24:9e:ca:11:ed:75:13:71:8b:
b0:ba:92:c3:e3:7b:a6:5c:cf:be:e1:96:5b:b7:ea:
52:b4:03:1a:a7:36:1d:a3:be:29:ee:bf:97:f6:02:
aa:a3:7e:d4:ee:62:22:f4:2f:20:6f:cb:31:39:c2:
b7:94:82:24:3a:5e:fa:f8:ca:c9:61:f9:9b:ee:f5:
a5:7e:96:36:4a:9d:59:21:26:a0:a1:28:88:0a:3c:
67:35:ec:83:7f:4d:2c:86:06:47:9b:dc:d6:2a:67:
89:dc:57:a1:fb:1f:47:d4:b9:eb:9f:c1:3b:18:78:
a1:55:61:76:b0:4e:e8:78:aa:35:38:55:fe:35:33:
6e:1c:da:41:11:22:98:ae:4d:b8:5c:42:c0:7c:73:
f6:af:e4:5e:e8:f4:9e:69:b5:ee:e0:a6:da:06:bd:
51:a6:03:7d:d0:dd:e3:2b:dd:8f:4b:aa:ec:d2:0e:
1b:16:ed:e7:66:9a:40:c3:1d:6a:f5:8d:f3:56:fe:
44:fb:c4:d1:8d:5b:9f:4f:8c:f1:75:da:3f:b0:aa:
73:54:c1:2c:42:14:03:14:70:aa:51:14:3e:13:85:
e2:e0:ff:4f:a4:36:2d:87:88:29:d4:a9:fa:5b:0a:
ca:10:d1:40:d1:a2:69:5f:af:26:de:a4:f7:e3:00:
b0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F3:8B:89:CC:46:F2:2B:D5:01:D4:93:45:29:EA:8F:F5:48:9C:4D
X509v3 Authority Key Identifier:
keyid:26:19:9C:5F:61:89:E0:2E:C5:16:85:39:19:E1:5B:A6:01:D7:C8:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:b7:05:8d:f3:61:7a:28:7e:e7:e2:e8:9d:33:6b:ba:73:04:
f5:56:59:d1:a5:f3:2b:1a:cd:b2:20:d5:ec:51:7e:4b:e4:bf:
4c:31:8c:b3:7f:08:f7:f8:45:6a:cb:38:ee:52:32:33:29:c3:
a9:9c:8f:e8:49:59:d8:30:80:60:33:84:46:63:e3:9d:5b:63:
d5:a4:df:4f:7b:7d:7e:84:2a:1e:dc:1f:38:57:9b:c9:c3:c4:
d5:a2:ad:04:a8:df:44:d9:a7:e8:f9:00:de:87:c2:87:67:ff:
94:63:eb:57:ec:76:cc:67:1e:43:6a:3d:20:ff:90:fe:b5:da:
6c:b8:b0:07:a0:90:6e:eb:4d:bb:7d:e0:b5:19:be:46:04:08:
da:9c:03:77:48:3c:59:30:59:47:a2:55:4b:c5:af:4f:d2:9a:
1f:b9:f8:87:fa:83:86:0a:5d:15:ad:64:66:d4:03:bc:6d:e6:
d8:27:eb:e2:dc:b4:71:58:42:e4:46:6b:0c:33:08:be:a4:62:
6b:4e:1f:a6:f1:2b:88:d0:98:ec:5f:b3:a9:0b:ae:1a:37:08:
d9:a0:83:91:ec:76:cd:75:d1:b3:5e:b8:d9:41:fa:35:a6:45:
67:09:6b:08:d2:35:9d:38:7e:b4:41:3b:36:8f:38:05:7e:2f:
e4:c5:4b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:16:14 2026 by rpki-client