
$ rpki-client -vvf rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.mft
File: jhRqR_5i0JoyZs4IOlecrROlgGY.mft (raw, json)
Hash identifier: HBlTNJeSJq+nufOHqE9qdZtlzHgIQ+aTMnTgjWr6Ntg=
Subject key identifier: 7F:8F:DB:F5:C0:D7:9B:82:4A:AD:B6:2F:E7:84:48:47:F8:D5:CD:24
Authority key identifier: 8E:14:6A:47:FE:62:D0:9A:32:66:CE:08:3A:57:9C:AD:13:A5:80:66
Certificate issuer: /CN=A91570C9/serialNumber=8E146A47FE62D09A3266CE083A579CAD13A58066
Certificate serial: 0219
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhRqR_5i0JoyZs4IOlecrROlgGY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.mft
Manifest number: 0215
Signing time: Fri 27 Mar 2026 02:23:23 +0000
Manifest this update: Fri 27 Mar 2026 02:23:22 +0000
Manifest next update: Fri 03 Apr 2026 02:23:22 +0000
Files and hashes: 1: jhRqR_5i0JoyZs4IOlecrROlgGY.crl (hash: zDi7tmmqRvILGBkPt3L98VlddjcsoWdUyh4UGY5oshc=)
2: DFFEC4ECFA2B11ED89B90A2FC4F9AE02.roa (hash: FFWol5YnwfZP+TKiyDIT69Kx3yIeCa0SCkT1OePuq3I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.crl
rsync://rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhRqR_5i0JoyZs4IOlecrROlgGY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 02:23:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 537 (0x219)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91570C9, serialNumber=8E146A47FE62D09A3266CE083A579CAD13A58066
Validity
Not Before: Mar 27 02:23:22 2026 GMT
Not After : Apr 3 02:23:22 2026 GMT
Subject: CN=69c5ea1b-d1da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:76:52:bd:dd:d5:54:3d:c8:00:dd:e8:2d:4f:
fa:af:55:65:2e:d3:7e:66:31:48:7f:af:2d:a4:c5:
0c:e8:c2:ee:be:bd:ac:40:1c:a5:54:60:c8:92:47:
4f:5c:31:6d:51:7e:d8:36:c9:b0:78:b2:40:7d:b7:
3e:39:22:13:13:33:d5:30:03:ca:d1:df:91:f9:b0:
a1:7b:ca:f1:5e:0f:82:e4:e6:ba:4e:0a:21:78:3c:
6a:cf:71:c3:9c:d4:49:21:50:e5:74:56:a2:78:2a:
02:f6:cd:de:2f:60:e3:36:1f:c7:49:b5:70:09:d0:
c9:0f:9e:7a:5c:56:58:0f:fa:89:04:20:d0:a7:a0:
db:b6:7c:bf:4c:61:9b:7f:a7:70:36:eb:94:1f:4a:
74:25:5d:cd:d6:2c:25:d8:c9:ed:7f:e2:cc:dd:7a:
6c:78:84:7b:ee:b4:68:6b:5c:8d:80:6d:f1:41:db:
05:e2:db:7d:b4:ee:dc:e0:ae:30:56:4a:24:cd:32:
dd:01:4c:0f:0e:9a:15:46:04:15:83:7d:5f:40:64:
7e:46:57:0e:bf:d6:69:d2:10:15:aa:db:7c:7e:d1:
c6:2f:e5:16:c7:64:cc:37:0c:96:9a:c6:bb:8e:5f:
d2:a6:b5:1f:02:0e:23:e2:a8:c2:10:13:3a:2e:df:
1e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:8F:DB:F5:C0:D7:9B:82:4A:AD:B6:2F:E7:84:48:47:F8:D5:CD:24
X509v3 Authority Key Identifier:
keyid:8E:14:6A:47:FE:62:D0:9A:32:66:CE:08:3A:57:9C:AD:13:A5:80:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhRqR_5i0JoyZs4IOlecrROlgGY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:89:87:cb:c5:24:4c:95:b6:b7:2b:64:93:04:2b:ca:1f:08:
9c:7c:dc:3b:a6:96:9d:8f:19:ff:57:72:45:a9:6d:d7:3b:8b:
eb:cb:56:db:12:27:32:a6:42:23:24:fb:56:c7:8e:6d:6d:02:
fb:48:2c:a5:8f:d7:0e:32:0b:1f:d5:20:27:77:12:62:0b:15:
cc:48:02:b8:53:5e:44:77:5e:63:f2:1f:c0:81:4b:18:fe:bf:
52:8b:86:ee:db:f8:83:a7:e5:46:e5:cb:d6:70:bd:69:c9:d1:
9f:25:33:ca:6b:5f:00:47:5e:ea:74:b6:c8:84:aa:98:ff:40:
a0:34:08:e3:ec:dc:ba:e7:b1:e2:9f:2f:31:a9:5b:87:94:6f:
34:84:9c:7e:78:df:d3:69:d0:05:80:92:ed:ff:23:de:c3:bb:
ae:8a:ca:47:be:3d:e4:07:19:00:a5:1d:c4:78:5b:60:44:bb:
0c:79:14:29:6f:c2:83:e4:e6:e2:13:4b:c3:72:61:77:82:09:
35:9b:8a:23:14:60:6e:92:61:c9:c4:df:c4:f4:d5:9b:82:9a:
3c:f6:77:ef:0b:3d:a9:f0:5f:7e:8b:69:3a:4c:9c:e6:0e:8c:
7b:8b:e4:d5:39:75:66:fb:98:9c:4c:f0:ec:c6:a2:d8:41:d1:
d7:39:ba:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:17:59 2026 by rpki-client