
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft
File: jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft (raw, json)
Hash identifier: 8R0qjm4yqT5416uVZon0QRoyJUpRTFLWEZGQ8zLmDWw=
Subject key identifier: 8F:30:E8:29:09:09:68:F6:7E:C1:0F:EB:2C:83:E0:DF:4D:13:32:D6
Authority key identifier: 8E:11:FC:B4:E8:BD:63:D2:7B:84:EB:2D:52:67:0C:A1:74:F9:C4:3C
Certificate issuer: /CN=A91C3A74/serialNumber=8E11FCB4E8BD63D27B84EB2D52670CA174F9C43C
Certificate serial: 1B4F
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jhH8tOi9Y9J7hOstUmcMoXT5xDw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft
Manifest number: 1B45
Signing time: Fri 12 Jun 2026 15:39:56 +0000
Manifest this update: Fri 12 Jun 2026 15:39:56 +0000
Manifest next update: Fri 19 Jun 2026 15:39:56 +0000
Files and hashes: 1: jhH8tOi9Y9J7hOstUmcMoXT5xDw.crl (hash: PoOW77wWiWZ2+py0ZTsERuMwUzsQdUKDKmZdFVwxb6g=)
2: AFA37450139811EA807F1A26C4F9AE02.roa (hash: Y1iY5bDdtF14xe5+ecYddY6nYDDRlZBhph8kiu8Him8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.crl
rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jhH8tOi9Y9J7hOstUmcMoXT5xDw.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 15:39:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6991 (0x1b4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C3A74, serialNumber=8E11FCB4E8BD63D27B84EB2D52670CA174F9C43C
Validity
Not Before: Jun 12 15:39:56 2026 GMT
Not After : Jun 19 15:39:56 2026 GMT
Subject: CN=6a2c284c-d29f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:72:6d:cb:52:80:7f:00:92:2c:f0:cc:33:26:
43:d4:ad:ba:06:cc:99:4e:04:7e:fd:93:dd:52:52:
e8:88:60:93:6a:63:07:c8:75:bc:e9:ca:b9:b7:b0:
33:30:ef:68:1a:08:2f:19:47:ae:b6:9c:01:95:dd:
01:7b:6b:66:12:42:b3:a7:0a:a9:23:d2:91:95:c1:
ac:82:35:56:97:06:d2:e0:8f:58:f5:e7:65:2a:76:
9a:67:9d:11:f2:a5:64:06:1a:e0:5e:49:71:d5:26:
0a:8f:cf:ec:0f:7d:78:24:0f:c5:16:37:46:40:fd:
75:84:a4:f3:3e:a6:9a:22:73:de:50:73:03:1a:3f:
c1:a6:c6:7c:ea:4d:db:2d:bf:38:87:24:6f:02:6c:
72:db:ca:16:41:20:e0:d9:9d:86:a5:22:a1:50:a9:
1e:e4:d1:94:1f:08:86:cc:2d:67:70:08:ea:5f:21:
69:5f:55:56:68:a3:24:1d:f0:9f:3b:50:ae:4a:33:
d4:1c:20:ab:8a:46:fe:ce:e3:42:71:cc:d6:fa:cb:
2d:3e:d5:a1:3c:6c:1b:a5:0f:22:73:09:15:e9:84:
e6:84:04:69:86:17:bc:c0:62:96:65:21:cb:d7:7c:
66:e9:7b:7c:b3:72:16:93:95:cb:11:32:a7:8f:63:
b3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:30:E8:29:09:09:68:F6:7E:C1:0F:EB:2C:83:E0:DF:4D:13:32:D6
X509v3 Authority Key Identifier:
keyid:8E:11:FC:B4:E8:BD:63:D2:7B:84:EB:2D:52:67:0C:A1:74:F9:C4:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jhH8tOi9Y9J7hOstUmcMoXT5xDw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:56:83:33:9d:0b:32:a5:93:b6:66:5f:05:74:5b:e4:02:3f:
40:29:e2:ef:2a:56:19:91:76:ad:c9:1e:d3:8f:24:ea:3e:46:
22:d7:74:c2:d0:b4:f5:91:91:de:dc:ef:5d:af:83:a4:23:0b:
eb:9c:d4:bf:16:e8:e4:5c:dd:0b:6e:00:1c:da:ac:c1:d3:93:
cf:4a:38:3c:67:c3:ba:54:0d:4c:4c:da:63:14:a5:7c:f4:8f:
3d:d8:90:3f:30:f8:b5:b7:29:e0:65:a8:19:3d:e5:4c:f3:0b:
17:d8:4e:31:9a:59:37:fc:b3:81:88:db:54:b1:80:45:78:ae:
c1:1e:ab:de:55:9c:95:12:ba:14:2b:8d:49:c6:9c:d4:ab:79:
2b:e5:56:a8:c2:a2:9c:f9:43:7d:93:23:9d:61:60:ca:06:cc:
87:1b:f1:31:5a:2d:e5:20:b5:c3:84:50:10:a3:88:6b:75:c6:
35:06:ea:b5:c0:92:80:39:64:f3:e9:be:02:68:bd:1b:ea:d8:
e4:b1:4c:c9:3f:83:51:f9:21:4a:60:ca:d2:55:f2:d2:a1:ef:
f9:2a:64:49:5b:d5:57:b2:81:81:2d:9b:46:0b:02:b4:a0:5c:
88:24:1a:3e:44:bd:0e:2a:aa:a4:10:a0:db:c3:84:bd:3e:bc:
94:05:f1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:32:58 2026 by rpki-client