
$ rpki-client -vvf rpki.apnic.net/member_repository/A918DF0C/5B190E30184311EBB3AA713AC4F9AE02/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.mft
File: jhtxhoZBeEjZ0-YiY8bg0wS9N-w.mft (raw, json)
Hash identifier: lxw4Gi5OQezciUG4qx98yj1TWBSvfXW6/duNr+aV14g=
Subject key identifier: B2:40:37:A2:E1:B9:72:95:9D:0D:0D:1B:1F:71:0C:72:AA:68:E8:4C
Authority key identifier: 8E:1B:71:86:86:41:78:48:D9:D3:E6:22:63:C6:E0:D3:04:BD:37:EC
Certificate issuer: /CN=A918DF0C/serialNumber=8E1B718686417848D9D3E62263C6E0D304BD37EC
Certificate serial: 0816
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918DF0C/5B190E30184311EBB3AA713AC4F9AE02/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.mft
Manifest number: 080E
Signing time: Tue 24 Mar 2026 20:51:40 +0000
Manifest this update: Tue 24 Mar 2026 20:51:39 +0000
Manifest next update: Tue 31 Mar 2026 20:51:39 +0000
Files and hashes: 1: jhtxhoZBeEjZ0-YiY8bg0wS9N-w.crl (hash: iA8kL74pHiiO/BskZraVcgu9JyBHubXLpErUr5ljWHc=)
2: 181D7270184711EBAD14343FC4F9AE02.roa (hash: OrVBPVtRF7WGpthCgMiHldDDDE70rH33I+w5C0zy5Nw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918DF0C/5B190E30184311EBB3AA713AC4F9AE02/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.crl
rsync://rpki.apnic.net/member_repository/A918DF0C/5B190E30184311EBB3AA713AC4F9AE02/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:51:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2070 (0x816)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918DF0C, serialNumber=8E1B718686417848D9D3E62263C6E0D304BD37EC
Validity
Not Before: Mar 24 20:51:39 2026 GMT
Not After : Mar 31 20:51:39 2026 GMT
Subject: CN=69c2f95b-a454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:84:68:28:18:72:67:06:5c:4a:36:eb:bd:b4:
db:a2:01:0c:59:e2:2b:7f:85:a2:9b:ed:53:02:5f:
41:4f:2b:ca:ca:bf:cd:91:50:4b:25:77:66:0a:28:
ff:ab:e6:a2:99:d8:71:ce:f8:16:84:91:70:b0:ef:
f1:cb:91:67:04:1f:4a:39:71:b2:1a:eb:f1:40:90:
cd:36:7c:e1:16:73:d3:ba:49:72:65:6d:8c:6c:54:
aa:d4:4e:80:5e:ec:9f:7d:93:54:39:97:c6:f3:2f:
03:49:1d:c1:a9:5d:e7:7c:40:11:18:64:59:cf:a5:
15:1d:50:dc:59:50:88:1a:13:b7:bc:b8:6a:db:30:
72:77:4b:57:2c:c2:2a:bb:8e:81:8a:90:d5:e9:cb:
c9:d1:f3:54:55:af:fb:57:82:04:ad:8c:7f:2d:3d:
ae:68:de:13:d8:bb:a4:dd:f4:cc:ae:0f:e9:64:03:
0b:57:48:ef:55:5e:7b:7a:a5:5d:44:c2:e9:0a:e9:
fd:34:b0:3e:c3:2e:64:f2:99:4e:fc:65:78:7e:ad:
68:4b:4e:35:5f:c3:5c:e2:8f:df:6b:b3:9e:60:ca:
02:cb:0e:7a:b1:18:5d:4a:c1:93:c5:e8:7a:6e:af:
ca:95:69:7b:34:8f:a7:5c:36:35:36:c5:d8:7f:61:
37:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:40:37:A2:E1:B9:72:95:9D:0D:0D:1B:1F:71:0C:72:AA:68:E8:4C
X509v3 Authority Key Identifier:
keyid:8E:1B:71:86:86:41:78:48:D9:D3:E6:22:63:C6:E0:D3:04:BD:37:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918DF0C/5B190E30184311EBB3AA713AC4F9AE02/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DF0C/5B190E30184311EBB3AA713AC4F9AE02/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:aa:08:91:87:89:26:dd:b1:d6:09:33:4f:ce:c7:56:de:12:
25:da:b5:a4:46:1d:bb:9f:e3:08:2c:c2:53:ec:fb:d7:c8:b4:
70:e9:fe:46:8e:14:8e:f6:76:2c:2e:fc:bc:58:ea:f2:2c:a8:
69:35:95:59:bd:7e:1d:58:dd:00:25:ed:f2:73:aa:59:8e:9c:
4a:19:65:19:e2:e0:f5:79:54:6a:0d:5a:77:5b:fa:58:ad:1d:
41:e2:ef:3b:15:a9:89:8b:38:8d:8a:75:1a:b6:8a:bc:f2:23:
5a:0c:b7:ce:d5:ad:bd:3c:14:41:09:2f:2f:0b:a1:20:0f:9d:
37:7b:e3:cc:4f:18:6a:f1:af:30:32:0b:bb:42:62:a0:07:b5:
9d:1b:bc:17:29:15:a7:50:d8:78:0a:51:21:74:12:68:2b:88:
b7:24:e7:15:52:3b:cf:6e:9f:42:b6:c6:34:d3:c1:b6:6b:c5:
80:64:61:0e:af:e8:0f:c7:4b:10:85:06:bd:c4:84:9a:75:49:
ee:be:81:ab:b2:14:18:85:f1:26:96:70:af:48:84:06:5f:b3:
34:c1:2d:4a:e6:48:40:50:94:8f:9b:95:3f:33:0c:92:51:ae:
e1:f2:21:8d:1b:72:1d:39:7b:86:2a:9d:fb:2e:c4:e3:b3:eb:
f7:8f:f1:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:47:20 2026 by rpki-client