
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft
File: jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft (raw, json)
Hash identifier: YWyAjYS7BY0tglfM1U4xI0pUHdKqDsn+Na5J2cPXEXo=
Subject key identifier: 58:2A:64:61:59:85:04:7B:91:DD:7D:A1:8C:BB:4C:F8:FC:6C:9A:09
Authority key identifier: 8E:11:FC:B4:E8:BD:63:D2:7B:84:EB:2D:52:67:0C:A1:74:F9:C4:3C
Certificate issuer: /CN=A91C3A74/serialNumber=8E11FCB4E8BD63D27B84EB2D52670CA174F9C43C
Certificate serial: 1B32
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jhH8tOi9Y9J7hOstUmcMoXT5xDw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft
Manifest number: 1B28
Signing time: Thu 16 Apr 2026 15:39:35 +0000
Manifest this update: Thu 16 Apr 2026 15:39:35 +0000
Manifest next update: Thu 23 Apr 2026 15:39:35 +0000
Files and hashes: 1: jhH8tOi9Y9J7hOstUmcMoXT5xDw.crl (hash: +pWImPC0DSP1XF1ArvI0wbNPtJQ5NLiZm0+GNcfZMc4=)
2: AFA37450139811EA807F1A26C4F9AE02.roa (hash: Y1iY5bDdtF14xe5+ecYddY6nYDDRlZBhph8kiu8Him8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.crl
rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jhH8tOi9Y9J7hOstUmcMoXT5xDw.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:39:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6962 (0x1b32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C3A74, serialNumber=8E11FCB4E8BD63D27B84EB2D52670CA174F9C43C
Validity
Not Before: Apr 16 15:39:35 2026 GMT
Not After : Apr 23 15:39:35 2026 GMT
Subject: CN=69e102b7-7771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:de:94:fe:b1:65:52:70:fb:2e:60:af:99:7a:
a7:34:b2:a0:b8:78:e4:be:c3:35:81:dc:07:3d:79:
86:57:51:ea:53:a8:17:95:96:75:af:ac:15:97:63:
e9:5e:77:69:7d:50:37:5c:df:02:a0:a8:c3:dc:bd:
63:88:b1:b6:9a:ea:90:44:76:59:db:cc:f7:92:bd:
50:d8:07:f6:4b:8d:fb:38:3e:3c:a2:b5:88:ec:62:
3e:b0:0f:cb:65:07:2b:0b:e4:18:7c:d4:35:d5:e4:
37:93:b9:69:d2:a5:e4:e6:8a:4b:a0:5f:b9:42:bb:
43:8c:1d:4d:c6:33:52:6a:63:74:62:91:20:b5:6e:
b6:57:71:61:56:d1:d3:bf:de:b9:6b:29:29:d0:59:
64:2d:05:a8:dd:8c:c6:8a:a7:70:f3:8c:20:11:b3:
ec:30:88:99:03:c2:35:d4:91:89:4c:5c:09:8d:f0:
f8:7f:19:53:55:86:29:f7:8a:b8:60:d7:70:b0:ee:
6b:0d:5b:f9:53:dc:b3:87:e1:a2:ba:f4:d8:06:57:
83:de:35:d9:61:46:ba:7d:3b:89:8b:59:56:41:8a:
22:25:0d:b3:5a:df:62:70:b8:6a:14:ee:c0:40:01:
08:42:6d:79:e8:88:0a:1d:03:2f:9f:00:e9:e3:35:
35:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:2A:64:61:59:85:04:7B:91:DD:7D:A1:8C:BB:4C:F8:FC:6C:9A:09
X509v3 Authority Key Identifier:
keyid:8E:11:FC:B4:E8:BD:63:D2:7B:84:EB:2D:52:67:0C:A1:74:F9:C4:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jhH8tOi9Y9J7hOstUmcMoXT5xDw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:1d:86:f7:1b:0e:01:c4:fc:a3:e9:07:c4:0d:aa:65:61:a4:
0f:64:c0:5e:42:27:2f:03:2c:96:4d:26:06:73:7e:4a:d8:16:
e4:1b:9b:73:ca:c3:6c:89:49:5f:c0:e8:e7:3b:79:1b:cd:3f:
88:48:f4:7a:b0:43:c6:b9:1f:69:5b:3f:50:91:18:5c:45:ab:
13:2a:d1:ce:6f:4f:dd:38:2f:0e:ef:7b:d8:38:80:87:71:15:
3a:91:27:27:81:4a:0c:04:8c:d5:2d:84:d9:35:c2:07:16:aa:
36:b0:90:02:86:fe:5d:de:e9:75:76:78:91:f0:45:c8:91:dc:
c8:8a:98:05:b6:4c:49:b0:13:5c:00:c1:0c:2f:d2:9d:4b:7f:
cb:e7:0e:e8:05:21:15:50:dd:78:83:9d:57:f3:40:04:63:8a:
68:86:8d:56:a8:35:85:89:1f:6c:2c:c8:63:88:23:8c:f0:6f:
b9:59:61:64:47:69:c6:03:9e:5c:dd:55:1c:e6:6a:56:cc:56:
44:80:c4:3b:35:44:35:8d:45:10:13:ba:93:c6:8f:cd:c8:43:
44:c2:da:a8:90:ce:a6:0d:dc:0c:b4:dd:11:e7:1e:a7:17:21:
0e:52:b5:ba:93:e4:a8:c7:fa:d6:2a:2a:34:a4:fa:35:52:73:
ab:25:78:56
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGzIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzNBNzQxMTAvBgNVBAUTKDhFMTFGQ0I0RThCRDYzRDI3Qjg0RUIyRDUyNjcwQ0Ex
NzRGOUM0M0MwHhcNMjYwNDE2MTUzOTM1WhcNMjYwNDIzMTUzOTM1WjAYMRYwFAYD
VQQDEw02OWUxMDJiNy03NzcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4d6U/rFlUnD7LmCvmXqnNLKguHjkvsM1gdwHPXmGV1HqU6gXlZZ1r6wVl2Pp
XndpfVA3XN8CoKjD3L1jiLG2muqQRHZZ28z3kr1Q2Af2S437OD48orWI7GI+sA/L
ZQcrC+QYfNQ11eQ3k7lp0qXk5opLoF+5QrtDjB1NxjNSamN0YpEgtW62V3FhVtHT
v965aykp0FlkLQWo3YzGiqdw84wgEbPsMIiZA8I11JGJTFwJjfD4fxlTVYYp94q4
YNdwsO5rDVv5U9yzh+GiuvTYBleD3jXZYUa6fTuJi1lWQYoiJQ2zWt9icLhqFO7A
QAEIQm156IgKHQMvnwDp4zU1nQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFgqZGFZ
hQR7kd19oYy7TPj8bJoJMB8GA1UdIwQYMBaAFI4R/LTovWPSe4TrLVJnDKF0+cQ8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0E3NC83NTNENzFFRTNB
QjUxMUU3Qjg2MDlGMUNDNEY5QUUwMi9qaEg4dE9pOVk5SjdoT3N0VW1jTW9YVDV4
RHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL2poSDh0T2k5WTlKN2hPc3RVbWNNb1hUNXhEdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
M0E3NC83NTNENzFFRTNBQjUxMUU3Qjg2MDlGMUNDNEY5QUUwMi9qaEg4dE9pOVk5
SjdoT3N0VW1jTW9YVDV4RHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXB2G9xsOAcT8o+kHxA2qZWGkD2TAXkInLwMslk0mBnN+StgW5Bubc8rDbIlJ
X8Do5zt5G80/iEj0erBDxrkfaVs/UJEYXEWrEyrRzm9P3TgvDu972DiAh3EVOpEn
J4FKDASM1S2E2TXCBxaqNrCQAob+Xd7pdXZ4kfBFyJHcyIqYBbZMSbATXADBDC/S
nUt/y+cO6AUhFVDdeIOdV/NABGOKaIaNVqg1hYkfbCzIY4gjjPBvuVlhZEdpxgOe
XN1VHOZqVsxWRIDEOzVENY1FEBO6k8aPzchDRMLaqJDOpg3cDLTdEecepxchDlK1
upPkqMf61ioqNKT6NVJzqyV4Vg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:21:29 2026 by rpki-client