
$ rpki-client -vvf rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft
File: jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft (raw, json)
Hash identifier: STzHOAPES3hb7XlElX2b9KF5LYTNd88+bsscYZXqztc=
Subject key identifier: C7:E0:D3:27:F3:D6:5C:A4:9C:24:57:5D:3A:D7:1D:85:4F:CD:EE:36
Authority key identifier: 8C:78:FE:C7:45:59:20:CB:FD:E0:30:FE:54:4E:57:F1:EC:9F:C8:64
Certificate issuer: /CN=A91870C2/serialNumber=8C78FEC7455920CBFDE030FE544E57F1EC9FC864
Certificate serial: 0D1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jHj-x0VZIMv94DD-VE5X8eyfyGQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft
Manifest number: 0D13
Signing time: Tue 12 May 2026 18:09:51 +0000
Manifest this update: Tue 12 May 2026 18:09:50 +0000
Manifest next update: Tue 19 May 2026 18:09:50 +0000
Files and hashes: 1: jHj-x0VZIMv94DD-VE5X8eyfyGQ.crl (hash: LA0ooZsA4AnMr8NOzYQNu6qKjsdM23pVyfWv8XotHBs=)
2: 6FF4CA0E006311EAB403274DC4F9AE02.roa (hash: a71ernoBhJIlyoCkOYC1Njwd07ZtjDlydhtppbwh5UM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.crl
rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jHj-x0VZIMv94DD-VE5X8eyfyGQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:09:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3357 (0xd1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91870C2, serialNumber=8C78FEC7455920CBFDE030FE544E57F1EC9FC864
Validity
Not Before: May 12 18:09:50 2026 GMT
Not After : May 19 18:09:50 2026 GMT
Subject: CN=6a036cee-3a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:db:00:f3:ac:65:56:b0:29:bc:ea:1a:6e:10:
b1:90:72:65:a2:db:f8:d6:9b:93:e2:1d:93:f3:ce:
de:8a:62:b0:a1:f2:3a:4f:08:4b:21:f6:7e:a4:0c:
cf:a3:9f:1b:52:53:e8:df:ee:35:61:ad:3f:ef:19:
52:ab:b2:eb:1e:cd:ea:ed:b3:7a:90:b1:5f:f2:00:
17:0f:a4:6e:a4:27:1a:0a:c0:7f:60:97:6d:a9:2c:
7b:3b:83:11:33:70:53:90:30:bc:51:09:a5:f7:26:
11:dc:3f:59:82:65:4e:54:75:52:f7:e4:1f:5c:2a:
54:5d:d2:33:68:a6:f9:39:bf:e9:0c:54:7e:ba:88:
ff:70:5f:ad:11:4e:59:7c:36:00:f6:fa:58:e8:17:
4a:e5:cd:a2:65:58:c1:c3:0f:d1:12:f6:97:7c:36:
d8:55:b8:56:90:3c:65:55:16:cf:63:74:52:1f:b3:
75:21:c6:d8:c0:a2:f3:1b:27:77:aa:1d:94:44:50:
9b:ab:09:ca:f2:7e:fd:ae:08:a3:b1:03:32:e7:36:
d9:47:14:7e:eb:69:50:3a:26:98:f7:f2:18:cd:8f:
34:a3:84:a1:d5:bf:c8:1b:47:c6:a8:a7:a5:1f:25:
ac:11:0e:f1:8f:8d:a5:ad:12:2c:51:b3:4a:8b:df:
05:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E0:D3:27:F3:D6:5C:A4:9C:24:57:5D:3A:D7:1D:85:4F:CD:EE:36
X509v3 Authority Key Identifier:
keyid:8C:78:FE:C7:45:59:20:CB:FD:E0:30:FE:54:4E:57:F1:EC:9F:C8:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jHj-x0VZIMv94DD-VE5X8eyfyGQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:7d:2a:df:17:24:09:24:55:32:06:5a:0d:73:dc:b8:dc:23:
29:ae:52:c5:24:2e:70:a6:73:03:bd:8a:0c:65:15:94:61:1c:
fd:66:1c:b7:7b:ef:25:43:c3:78:6b:12:dc:2d:f9:45:d4:9b:
c7:2c:15:00:0c:06:7a:54:ca:51:9f:8d:f6:9e:06:20:9a:18:
ed:6d:1e:7b:64:1f:39:04:93:14:f7:71:ca:67:e8:e8:36:88:
b0:c4:b0:f9:c9:54:25:ff:a8:c0:9d:31:19:f9:51:86:2d:db:
16:49:e2:c3:bd:31:28:b9:23:6b:74:77:c7:30:8d:7e:a1:60:
97:24:b9:0c:c0:92:10:3e:7f:a0:3f:cf:dd:50:3e:94:26:63:
bb:2e:e5:3a:56:0d:5d:00:b1:f9:0c:90:3d:cd:7c:e3:d1:03:
94:8d:df:8a:a9:e6:67:b8:f8:66:3a:48:5b:91:ab:b3:99:f1:
1a:9d:de:ba:44:67:f3:13:14:53:af:18:d5:0e:d3:85:72:bc:
4d:40:d2:45:f9:e6:26:93:32:67:66:bd:1e:9e:76:0a:b1:73:
3a:31:ec:23:cc:95:53:da:68:0e:10:c2:07:c2:1c:51:3e:ad:
1a:6c:47:89:c6:8e:23:91:4c:da:e2:94:a6:10:d3:ea:c8:29:
f1:33:ca:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:02:14 2026 by rpki-client