
$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft
File: JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft (raw, json)
Hash identifier: KHWZCeCkPUuyU0fGuSf6/a/TGkkdkTJ1eB+kCoRgSpk=
Subject key identifier: 8D:FB:6E:4F:54:D8:26:E4:DE:9E:D2:BC:61:5A:9D:31:33:DC:87:9B
Authority key identifier: 26:19:9C:5F:61:89:E0:2E:C5:16:85:39:19:E1:5B:A6:01:D7:C8:5F
Certificate issuer: /CN=A91275FB/serialNumber=26199C5F6189E02EC516853919E15BA601D7C85F
Certificate serial: 18B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft
Manifest number: 188E
Signing time: Tue 24 Mar 2026 16:24:51 +0000
Manifest this update: Tue 24 Mar 2026 16:24:50 +0000
Manifest next update: Tue 31 Mar 2026 16:24:50 +0000
Files and hashes: 1: JhmcX2GJ4C7FFoU5GeFbpgHXyF8.crl (hash: yQRUca0UJpSy/jmRNkKNMfreX+CeemCrvOGICek9H14=)
2: B5018AB0F2F111F08D4F09A1476F56BC.roa (hash: tpT68E0M3mFJ+XcHkcNvjHUefCfKea/pcyuU4Yj5Ha8=)
3: 71FD6FA8F2E311F098475965426F56BC.roa (hash: 5HXjK8kqpM3j7Dq/3YKkV0LQHLdyempUvfhW1aKXLTA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.crl
rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 16:24:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6321 (0x18b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91275FB, serialNumber=26199C5F6189E02EC516853919E15BA601D7C85F
Validity
Not Before: Mar 24 16:24:50 2026 GMT
Not After : Mar 31 16:24:50 2026 GMT
Subject: CN=69c2bad3-4764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4b:7d:de:88:57:86:a6:73:6d:52:6e:e4:8b:
2d:bb:ae:d8:17:c5:13:7e:83:eb:48:65:bc:a3:55:
9c:17:7d:c3:54:99:04:6c:8c:01:59:8c:37:d3:53:
db:e3:a4:e1:cc:72:2a:1a:66:2c:08:c3:fb:78:96:
42:58:ff:2d:f5:b6:14:8b:fc:29:19:04:a0:98:f8:
41:0d:c6:13:cd:5f:e6:cf:b8:ed:6a:62:c0:c5:01:
51:6b:e6:1e:e5:7d:70:6c:22:31:4c:fa:80:68:63:
96:2e:6f:88:30:b5:9d:7e:13:57:fc:cb:2a:02:4f:
1b:22:7b:8d:de:f4:4e:d4:ab:50:c9:96:8c:b0:03:
f7:4f:f2:0a:97:b3:a1:54:d3:da:6f:b2:f2:b3:03:
6c:5c:c6:34:5e:07:4f:11:4e:e5:44:5e:13:31:3a:
a1:43:f6:35:56:fa:97:d0:57:c2:5e:b0:3c:40:a9:
fe:85:12:c2:f1:d4:0c:5c:70:40:89:a9:06:39:60:
16:fb:95:3b:45:e3:a0:c8:42:99:98:a2:3c:d6:d3:
f0:0e:7f:4a:3d:43:1a:f9:0d:96:7c:bb:35:f0:83:
78:22:b9:f5:d3:e0:18:17:24:d5:e1:15:f1:03:ec:
69:3f:6c:e7:37:1b:af:f1:a2:ee:40:5b:f1:1e:9a:
d7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:FB:6E:4F:54:D8:26:E4:DE:9E:D2:BC:61:5A:9D:31:33:DC:87:9B
X509v3 Authority Key Identifier:
keyid:26:19:9C:5F:61:89:E0:2E:C5:16:85:39:19:E1:5B:A6:01:D7:C8:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:65:fb:cc:20:48:51:eb:8a:82:dc:bc:b0:42:a5:3f:83:83:
da:ac:bc:a6:f9:78:4f:57:8c:e4:8f:12:58:d2:21:0d:af:25:
71:a4:83:27:dd:05:f8:b1:bf:4a:f6:85:2d:9e:1e:58:86:bc:
6e:67:e5:9c:24:d3:e9:99:8e:80:33:18:8f:ff:78:9a:3d:ef:
e5:c6:24:ca:b3:bd:18:cb:de:aa:b0:ea:d0:d6:73:76:42:72:
7b:51:ee:9d:19:f6:af:13:4e:30:f7:0c:84:f0:cc:58:37:f3:
56:51:ab:c8:b9:3e:2e:e7:b2:78:64:74:79:5a:3d:37:88:d4:
88:52:a5:6b:ee:dc:9a:2c:1b:99:9f:8c:29:1b:af:3e:82:2c:
c9:46:98:82:23:23:62:96:06:37:43:1b:a7:cd:01:b8:70:33:
42:c6:e9:a9:08:37:39:b5:6e:d2:a3:70:20:f6:ba:b9:d6:22:
89:74:5a:99:bc:75:b8:d3:73:cf:8c:cf:16:69:01:91:ac:5b:
b5:f5:12:2e:94:e1:bf:2e:9e:07:6d:af:3d:a5:d3:b3:ce:c0:
13:31:0e:bf:43:25:69:9f:aa:70:4d:a1:87:13:33:45:90:9c:
41:05:d6:c7:ab:38:34:c6:36:17:8d:5d:41:c2:c6:d2:d4:5c:
c3:b9:8e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:26:34 2026 by rpki-client