
$ rpki-client -vvf rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.mft
File: JHItMcJRPk5_h-23Df6dyU-EaLo.mft (raw, json)
Hash identifier: UduFgv7pnq8im6A+kYIPVDIXbJYWC+4FczHvuTAjNDk=
Subject key identifier: 33:9D:65:2A:CA:30:90:A0:23:83:10:5E:5B:8D:12:F5:5A:AE:91:A8
Authority key identifier: 24:72:2D:31:C2:51:3E:4E:7F:87:ED:B7:0D:FE:9D:C9:4F:84:68:BA
Certificate issuer: /CN=A91186C2/serialNumber=24722D31C2513E4E7F87EDB70DFE9DC94F8468BA
Certificate serial: 011D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHItMcJRPk5_h-23Df6dyU-EaLo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.mft
Manifest number: 011D
Signing time: Thu 23 Jul 2026 07:29:36 +0000
Manifest this update: Thu 23 Jul 2026 07:29:36 +0000
Manifest next update: Thu 30 Jul 2026 07:29:36 +0000
Files and hashes: 1: JHItMcJRPk5_h-23Df6dyU-EaLo.crl (hash: N4XYNeWIraRr7dE7ydEE5gaFlROZ/qwX7ymfNtXxmEI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.crl
rsync://rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHItMcJRPk5_h-23Df6dyU-EaLo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 285 (0x11d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91186C2, serialNumber=24722D31C2513E4E7F87EDB70DFE9DC94F8468BA
Validity
Not Before: Jul 23 07:29:36 2026 GMT
Not After : Jul 30 07:29:36 2026 GMT
Subject: CN=6a61c2e0-91ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:37:79:5c:f8:3c:42:a7:23:8c:ad:e4:be:e2:
ed:0e:13:9f:08:a6:ff:9a:b4:24:7e:11:cf:9a:3e:
46:47:8b:8e:15:f6:34:e9:5d:16:94:96:f6:18:33:
f5:e8:d2:62:ba:6a:48:b4:8e:2b:97:6f:68:d8:a9:
b0:ab:28:0b:4b:25:6d:ec:b0:fb:ab:eb:71:12:ce:
19:15:88:30:bd:04:91:61:65:af:db:ee:4a:4e:71:
c7:a1:14:16:ed:64:eb:a7:a9:5a:85:0d:52:66:df:
e8:bb:01:3b:01:dd:b3:a8:cd:26:1d:7f:13:7b:df:
e4:7f:0b:ca:49:d4:b0:7e:34:ad:72:cc:56:bf:c2:
0f:65:9b:6c:83:e8:9b:58:2b:b0:f9:3e:96:aa:ce:
e3:a0:4b:5f:9c:61:f9:ef:a3:ac:3e:51:d8:da:17:
20:0f:88:31:c4:8a:48:76:a2:1f:40:94:3a:8e:d3:
ca:42:a0:c8:ac:87:c1:9e:7a:1e:76:d4:fa:24:99:
4a:ee:e6:8a:9b:37:bf:bd:54:3f:3a:c4:c6:57:98:
2f:c6:23:ad:43:2b:51:33:ea:e3:6a:f2:56:c3:67:
42:35:79:8e:f2:2b:f6:a4:01:8b:c5:ca:c9:3f:01:
8e:2f:a9:4c:75:23:d5:a5:d6:16:64:3c:bf:66:a9:
f7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:9D:65:2A:CA:30:90:A0:23:83:10:5E:5B:8D:12:F5:5A:AE:91:A8
X509v3 Authority Key Identifier:
keyid:24:72:2D:31:C2:51:3E:4E:7F:87:ED:B7:0D:FE:9D:C9:4F:84:68:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHItMcJRPk5_h-23Df6dyU-EaLo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:cf:29:f7:d1:fc:d5:8b:43:f0:ad:42:f2:0f:a3:09:4e:19:
0b:01:1e:aa:d8:15:b6:d7:ec:59:88:27:35:9e:76:6b:6d:d9:
81:0f:d8:5e:43:b4:96:13:5e:c0:e7:c0:87:64:e4:d6:66:0d:
06:cc:5c:bb:0f:87:d1:e6:f3:8b:4a:2e:7e:99:34:0e:2b:c2:
5b:cd:00:c1:10:d9:0c:9a:cf:7b:3e:08:ec:d6:4d:c1:d9:11:
0b:71:5d:f8:5b:29:8e:03:0f:bf:49:f7:93:6b:27:c7:07:57:
f9:2a:ca:2a:0a:64:08:93:97:96:ed:be:05:10:d2:9b:d3:e8:
b0:3f:4e:58:ed:99:0a:8f:f1:dc:f1:f6:91:e9:5f:ce:98:b8:
42:ca:96:b9:89:4a:8a:79:04:9d:e7:51:d5:8d:b9:7c:74:35:
15:5e:5e:53:3e:65:f4:b3:d5:82:e0:b0:a7:d4:a6:85:ed:b2:
28:c7:37:ce:ce:0c:6b:2f:9a:54:a1:5f:b8:90:22:f4:a1:f2:
ea:2f:46:51:47:b8:2a:98:ea:db:35:c9:6c:cd:34:87:41:44:
2d:f2:b5:7a:0a:cb:73:24:26:b9:46:1e:d4:90:06:91:44:9d:
f1:ac:6c:17:7b:fc:b8:00:b0:d3:b5:c2:19:60:de:9a:e9:52:
4e:54:59:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:44:44 2026 by rpki-client