
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.mft
File: jhzB2_q9QLZBTCPj39iRRVJ98yE.mft (raw, json)
Hash identifier: b9Z+57IeI/K6RZ3xfbcCVuZTweAXtL+cG9REd0tq2iY=
Subject key identifier: 96:80:27:06:BA:FA:AE:FB:8D:D1:C0:67:A3:44:94:AE:87:3B:25:CA
Authority key identifier: 8E:1C:C1:DB:FA:BD:40:B6:41:4C:23:E3:DF:D8:91:45:52:7D:F3:21
Certificate issuer: /CN=A9186363/serialNumber=8E1CC1DBFABD40B6414C23E3DFD89145527DF321
Certificate serial: EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhzB2_q9QLZBTCPj39iRRVJ98yE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.mft
Manifest number: EA
Signing time: Sun 01 Mar 2026 07:31:35 +0000
Manifest this update: Sun 01 Mar 2026 07:31:34 +0000
Manifest next update: Sun 08 Mar 2026 07:31:34 +0000
Files and hashes: 1: jhzB2_q9QLZBTCPj39iRRVJ98yE.crl (hash: qSQU+pj71IvXWpC/+F6tMm3S5ttFkQGe8EJxNDg9ELo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.crl
rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhzB2_q9QLZBTCPj39iRRVJ98yE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:31:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 234 (0xea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186363, serialNumber=8E1CC1DBFABD40B6414C23E3DFD89145527DF321
Validity
Not Before: Mar 1 07:31:34 2026 GMT
Not After : Mar 8 07:31:34 2026 GMT
Subject: CN=69a3eb57-c543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:a0:c1:dc:c2:bb:53:b2:40:d5:a8:1c:96:57:
42:fb:87:03:20:69:82:a5:b6:ca:d3:94:d9:ed:75:
12:45:6e:b1:21:0e:b5:6c:b5:08:b1:c7:44:9f:2d:
d6:17:5a:81:08:2e:d9:0d:ec:e3:38:29:cd:b5:c5:
4b:a2:f3:7b:82:7a:03:6a:3c:f2:29:2f:99:8e:62:
ce:ad:03:c4:85:3e:94:c2:fc:77:f3:ba:a0:ee:ed:
7f:c7:d8:e1:f1:97:6f:f0:74:2c:86:5e:7f:e3:d6:
e3:19:aa:6c:54:20:ed:d7:a9:a9:c5:00:48:f1:2a:
42:c8:dc:83:b9:5d:38:45:f1:b6:90:33:ba:17:71:
7c:1d:17:44:5d:63:c1:ee:5e:f9:df:e1:1d:e9:52:
db:19:69:f6:70:3b:3d:4b:ce:e0:14:2a:38:43:fc:
81:d1:06:d1:e5:fa:f3:13:ef:86:22:c7:26:bf:2b:
f8:18:1a:65:88:b8:19:90:a8:62:de:47:d9:53:3d:
69:b7:7f:a5:40:0d:b8:2a:b1:b7:dd:bb:a3:50:83:
79:19:6b:b2:b2:53:a2:8b:44:75:20:1e:15:73:e7:
82:18:7a:5d:f8:c1:40:29:8d:81:a1:e6:bf:27:a4:
59:fd:5d:7a:77:8d:75:c9:ee:ca:a4:d3:17:62:44:
6a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:80:27:06:BA:FA:AE:FB:8D:D1:C0:67:A3:44:94:AE:87:3B:25:CA
X509v3 Authority Key Identifier:
keyid:8E:1C:C1:DB:FA:BD:40:B6:41:4C:23:E3:DF:D8:91:45:52:7D:F3:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhzB2_q9QLZBTCPj39iRRVJ98yE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:44:33:8d:50:b8:30:ff:df:21:08:3c:c2:29:1e:89:73:e3:
16:08:08:e9:d8:dc:97:5f:57:b3:1c:52:4a:eb:6e:30:10:d5:
60:4a:c1:4c:a1:12:f1:50:a0:4c:58:40:17:4d:6f:d2:8f:40:
e2:5d:4e:86:60:6a:f1:41:ef:f4:ef:6a:90:db:77:b0:09:c7:
bb:1c:a2:5b:1e:2b:93:ac:e2:3d:6f:15:a7:f6:f2:74:77:5d:
b6:29:4a:8c:4f:ad:0c:21:92:ab:3f:1c:2b:da:13:81:fe:22:
10:c5:f0:2f:02:29:04:2c:22:1f:ba:2e:5a:b0:c9:86:b4:aa:
a3:84:81:0a:00:61:9f:ee:07:01:c8:34:c6:90:5d:8f:da:5e:
df:c9:47:8a:d5:a1:41:da:9b:61:4c:3b:6a:3d:bc:04:ba:1d:
b9:3e:84:63:e1:49:d0:7d:04:f4:8e:2d:0d:f9:0a:05:fc:59:
94:c8:dc:74:b4:97:26:c7:b0:fb:ae:06:92:7f:f1:ee:11:4a:
d5:48:93:a7:18:67:1b:bb:4f:ca:ee:37:58:b3:1d:09:d9:45:
26:62:c4:24:da:72:b7:3c:2a:59:ae:63:ad:56:96:54:8d:20:
99:a2:91:0d:a9:af:ce:23:8f:aa:e9:50:d3:4c:00:a0:f1:e5:
81:ce:32:ec
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODYzNjMxMTAvBgNVBAUTKDhFMUNDMURCRkFCRDQwQjY0MTRDMjNFM0RGRDg5MTQ1
NTI3REYzMjEwHhcNMjYwMzAxMDczMTM0WhcNMjYwMzA4MDczMTM0WjAYMRYwFAYD
VQQDEw02OWEzZWI1Ny1jNTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+6DB3MK7U7JA1agclldC+4cDIGmCpbbK05TZ7XUSRW6xIQ61bLUIscdEny3W
F1qBCC7ZDezjOCnNtcVLovN7gnoDajzyKS+ZjmLOrQPEhT6Uwvx387qg7u1/x9jh
8Zdv8HQshl5/49bjGapsVCDt16mpxQBI8SpCyNyDuV04RfG2kDO6F3F8HRdEXWPB
7l753+Ed6VLbGWn2cDs9S87gFCo4Q/yB0QbR5frzE++GIscmvyv4GBpliLgZkKhi
3kfZUz1pt3+lQA24KrG33bujUIN5GWuyslOii0R1IB4Vc+eCGHpd+MFAKY2Boea/
J6RZ/V16d411ye7KpNMXYkRq6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJaAJwa6
+q77jdHAZ6NElK6HOyXKMB8GA1UdIwQYMBaAFI4cwdv6vUC2QUwj49/YkUVSffMh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjM2My9CRDg2M0Q3MkFG
QUMxMUVGQjg4NkQ2NTFDNEY5QUUwMi9qaHpCMl9xOVFMWkJUQ1BqMzlpUlJWSjk4
eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2poekIyX3E5UUxaQlRDUGozOWlSUlZKOTh5RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NjM2My9CRDg2M0Q3MkFGQUMxMUVGQjg4NkQ2NTFDNEY5QUUwMi9qaHpCMl9xOVFM
WkJUQ1BqMzlpUlJWSjk4eUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYEQzjVC4MP/fIQg8wikeiXPjFggI6djcl19XsxxSSutuMBDVYErBTKES8VCg
TFhAF01v0o9A4l1OhmBq8UHv9O9qkNt3sAnHuxyiWx4rk6ziPW8Vp/bydHddtilK
jE+tDCGSqz8cK9oTgf4iEMXwLwIpBCwiH7ouWrDJhrSqo4SBCgBhn+4HAcg0xpBd
j9pe38lHitWhQdqbYUw7aj28BLoduT6EY+FJ0H0E9I4tDfkKBfxZlMjcdLSXJsew
+64Gkn/x7hFK1UiTpxhnG7tPyu43WLMdCdlFJmLEJNpytzwqWa5jrVaWVI0gmaKR
DamvziOPqulQ00wAoPHlgc4y7A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:37:58 2026 by rpki-client