
$ rpki-client -vvf rpki.apnic.net/member_repository/A918DF0C/5B190E30184311EBB3AA713AC4F9AE02/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.mft
File: jhtxhoZBeEjZ0-YiY8bg0wS9N-w.mft (raw, json)
Hash identifier: dOLFdeIPz23gST5Z/8e6d0cBwr1KoV4+nwi99Pen6Xk=
Subject key identifier: 0F:3F:2A:53:A5:A8:E5:B8:36:54:D5:29:70:78:39:A7:77:D2:99:B4
Authority key identifier: 8E:1B:71:86:86:41:78:48:D9:D3:E6:22:63:C6:E0:D3:04:BD:37:EC
Certificate issuer: /CN=A918DF0C/serialNumber=8E1B718686417848D9D3E62263C6E0D304BD37EC
Certificate serial: 080A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918DF0C/5B190E30184311EBB3AA713AC4F9AE02/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.mft
Manifest number: 0802
Signing time: Mon 02 Mar 2026 02:04:17 +0000
Manifest this update: Mon 02 Mar 2026 02:04:16 +0000
Manifest next update: Mon 09 Mar 2026 02:04:16 +0000
Files and hashes: 1: jhtxhoZBeEjZ0-YiY8bg0wS9N-w.crl (hash: apETsw8HZeoUoqMM7wXlY6n8E6s8AXc8Ee65MjvEbB0=)
2: 181D7270184711EBAD14343FC4F9AE02.roa (hash: OrVBPVtRF7WGpthCgMiHldDDDE70rH33I+w5C0zy5Nw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918DF0C/5B190E30184311EBB3AA713AC4F9AE02/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.crl
rsync://rpki.apnic.net/member_repository/A918DF0C/5B190E30184311EBB3AA713AC4F9AE02/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:04:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2058 (0x80a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918DF0C, serialNumber=8E1B718686417848D9D3E62263C6E0D304BD37EC
Validity
Not Before: Mar 2 02:04:16 2026 GMT
Not After : Mar 9 02:04:16 2026 GMT
Subject: CN=69a4f021-740d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:01:6f:61:72:5c:85:09:0f:ae:13:4c:43:9e:
4b:9a:bd:95:1f:4e:04:24:b1:28:02:49:71:63:8b:
08:83:79:bc:3d:ca:6f:a1:e1:d7:bc:a8:10:32:c9:
0d:7f:d5:9a:70:96:75:ec:7e:6b:f2:bc:af:b9:1a:
be:4b:fa:15:5f:11:e1:ad:22:f0:9c:cc:45:dd:d2:
8d:a4:3f:1e:ac:d6:65:48:d6:64:1c:43:84:d2:a8:
14:ed:c4:03:18:98:36:e6:56:ed:26:e7:a4:a1:0f:
89:d2:64:3e:85:98:a6:64:b7:6d:2d:f0:70:ab:61:
a8:08:30:75:2d:33:cd:b8:b6:1d:06:3b:84:a5:e2:
7a:34:20:29:82:06:e5:68:53:ba:8f:a3:8e:be:eb:
fb:11:56:e8:eb:cb:e1:73:fa:2f:1a:2a:f5:a3:41:
73:c3:49:a2:36:09:a5:70:07:9b:62:61:4d:d8:37:
17:0c:b9:0e:7c:56:a4:b1:85:ed:15:1a:30:ef:47:
41:42:2c:30:05:a5:61:72:08:c4:1a:d3:9f:c2:5c:
87:8a:09:63:b8:fa:03:12:52:19:09:7c:6d:19:eb:
6a:aa:b9:a5:11:16:94:ef:8b:d1:6b:7f:b5:61:d1:
d9:91:0a:cf:23:ba:14:64:96:df:cb:10:22:2c:62:
1e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:3F:2A:53:A5:A8:E5:B8:36:54:D5:29:70:78:39:A7:77:D2:99:B4
X509v3 Authority Key Identifier:
keyid:8E:1B:71:86:86:41:78:48:D9:D3:E6:22:63:C6:E0:D3:04:BD:37:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918DF0C/5B190E30184311EBB3AA713AC4F9AE02/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DF0C/5B190E30184311EBB3AA713AC4F9AE02/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:f3:e6:37:a5:33:e6:2f:b2:2a:49:53:7a:85:c8:29:4f:65:
23:72:8a:d1:2a:1e:19:ca:9f:bf:78:7b:ef:39:c6:e3:c7:9c:
9e:0a:60:62:2e:11:ee:5f:74:c6:4e:14:60:34:62:7c:fb:c1:
cc:bd:f3:08:85:02:cd:b8:be:5f:61:9c:14:fa:b7:48:05:3d:
fc:57:92:88:da:c6:e4:0b:1d:2d:fc:28:ef:06:66:6c:3a:99:
cb:b3:95:ea:ed:35:4e:18:59:83:e3:16:0f:82:f1:4b:54:5b:
53:9a:a8:eb:e4:e5:6e:6f:84:1f:13:57:b2:d7:5f:f8:a2:84:
1f:31:fb:46:8b:80:4b:77:2c:11:33:97:cd:12:e8:68:4e:67:
03:f6:2c:fa:95:4c:d5:f4:ec:3b:56:51:9c:f9:71:af:de:6b:
fc:d3:0a:e5:c3:63:26:e8:19:8d:50:68:43:f6:d8:1f:c4:71:
37:da:a9:e4:ed:96:a6:48:36:1b:89:43:83:f1:ff:1c:fa:4d:
0d:77:86:c0:47:3e:b6:2b:75:c9:f5:38:2e:79:34:d1:3c:36:
9a:b6:79:85:60:55:a4:6e:1f:c1:7e:55:37:b0:a4:35:e6:13:
03:da:a9:15:ac:6a:39:64:40:55:da:28:f8:42:8b:44:13:78:
e4:05:47:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:43:26 2026 by rpki-client