
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft
File: JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft (raw, json)
Hash identifier: DNU9mhKEQlPA8aUX+vCIrAOp1gr9afJkqHIo4UtQ6lc=
Subject key identifier: 06:9E:D4:95:3D:36:B4:8D:F6:E4:B0:60:FF:14:6D:8C:63:57:D3:A0
Authority key identifier: 25:21:ED:A4:6C:D7:0B:83:97:26:06:D3:0D:88:0D:70:34:95:B8:B3
Certificate issuer: /CN=A9185B41/serialNumber=2521EDA46CD70B83972606D30D880D703495B8B3
Certificate serial: 08B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft
Manifest number: 1391
Signing time: Thu 16 Apr 2026 19:17:56 +0000
Manifest this update: Thu 16 Apr 2026 19:17:55 +0000
Manifest next update: Thu 23 Apr 2026 19:17:55 +0000
Files and hashes: 1: JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl (hash: JrP6iTET2tw0Co4p79aUEC7zR/Wxm94BO6Gzn+vjQqo=)
2: 5042B970E25B11EA9E988045C4F9AE02.roa (hash: yGyRKh06TFma60wn7/oVG0CZ1hXIDiNrfwQrrBtGYeE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl
rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:17:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2225 (0x8b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185B41, serialNumber=2521EDA46CD70B83972606D30D880D703495B8B3
Validity
Not Before: Apr 16 19:17:55 2026 GMT
Not After : Apr 23 19:17:55 2026 GMT
Subject: CN=69e135e4-2630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:96:01:a0:a5:00:6a:3e:aa:11:a8:65:62:cc:
60:1b:e5:a9:3c:a2:8d:e3:b4:9b:21:43:a9:1d:ec:
c5:b8:0c:a8:ac:65:6f:ec:1f:54:7b:79:d5:58:dc:
b1:43:3b:36:0f:0f:32:84:df:36:70:32:c3:18:dc:
96:0a:75:27:3a:84:65:17:e8:7a:e2:78:40:e1:de:
93:e5:6e:95:78:8e:96:b8:2b:ac:69:68:62:cd:64:
b0:e0:88:50:71:7f:a3:d0:e5:14:f3:4e:c2:19:59:
7d:af:03:1f:8f:30:5d:65:2b:5f:e2:cd:d5:13:01:
9f:07:ea:3d:61:1f:14:e1:53:f7:1c:cc:f4:ff:76:
ba:51:38:a5:74:48:66:7b:c6:64:1c:25:8c:bc:e6:
75:57:d1:be:34:ff:7d:77:44:6c:45:de:5e:1a:db:
9f:18:4d:8f:20:0c:d9:21:d4:49:a5:04:9b:65:f1:
d5:27:a0:c0:0d:11:d1:1c:ee:38:b5:45:2b:0b:e5:
86:85:87:28:8a:ee:14:b2:00:ee:60:04:ac:54:dd:
2b:21:d6:48:b5:9a:f2:f3:29:11:fe:03:36:38:1c:
c0:f2:4c:b8:89:df:05:7f:5d:66:d6:24:41:bc:26:
25:41:9f:c7:75:a8:0d:89:16:4c:7b:a8:c3:34:91:
f4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:9E:D4:95:3D:36:B4:8D:F6:E4:B0:60:FF:14:6D:8C:63:57:D3:A0
X509v3 Authority Key Identifier:
keyid:25:21:ED:A4:6C:D7:0B:83:97:26:06:D3:0D:88:0D:70:34:95:B8:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:33:00:93:59:e5:4b:02:b9:53:6b:c3:26:23:8a:53:a1:3c:
c8:1c:79:ba:a3:59:d5:8f:52:00:9d:33:d4:0b:d0:9a:6f:38:
4b:61:8c:cb:23:64:a0:82:54:17:7c:04:88:ca:29:83:f0:f1:
0e:48:97:21:75:96:4b:10:17:81:97:51:8c:71:cd:38:5e:21:
6e:f6:ad:25:4f:53:1f:93:fd:ca:67:47:e6:ae:20:51:c1:f0:
1e:01:71:80:1b:c5:18:cb:a1:b0:22:71:1f:e3:f4:22:fd:b4:
97:c0:6e:3c:b0:77:02:49:c2:2c:c0:ab:58:54:b8:ec:65:80:
52:a0:af:6f:fb:3b:ca:11:79:ac:00:8a:09:ef:02:8f:a4:38:
6e:c8:99:76:c9:70:b5:a5:6a:99:9c:57:e7:8b:a0:b7:a0:42:
79:e2:5e:71:0e:08:9a:79:0e:5a:ff:0c:e4:a7:92:e0:e1:20:
58:58:72:11:b8:aa:dc:2e:36:87:8c:7f:ce:cf:24:fc:66:fb:
2e:12:e0:30:37:02:21:a7:c7:b4:ac:bc:f1:05:58:35:55:ce:
cf:89:1c:18:32:07:43:3d:b6:e9:37:3e:7e:22:6f:5b:ac:95:
25:27:24:ec:fb:6b:7b:d9:25:23:c6:25:cd:eb:be:d6:30:e3:
60:c0:04:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:52:29 2026 by rpki-client