
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.mft
File: jhITFCkXlrLlK4nYfE7W2dz6Uks.mft (raw, json)
Hash identifier: J4X+u3tFpIpAWrDztrsjVJ5ruqB7OB5ocGNst6u34Kc=
Subject key identifier: EC:97:85:AD:DA:98:E4:3B:D6:71:7C:C5:C6:29:4F:AF:17:26:78:03
Authority key identifier: 8E:12:13:14:29:17:96:B2:E5:2B:89:D8:7C:4E:D6:D9:DC:FA:52:4B
Certificate issuer: /CN=A91B6DD0/serialNumber=8E121314291796B2E52B89D87C4ED6D9DCFA524B
Certificate serial: 79
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jhITFCkXlrLlK4nYfE7W2dz6Uks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.mft
Manifest number: 6C
Signing time: Mon 11 May 2026 08:13:25 +0000
Manifest this update: Mon 11 May 2026 08:13:24 +0000
Manifest next update: Mon 18 May 2026 08:13:24 +0000
Files and hashes: 1: jhITFCkXlrLlK4nYfE7W2dz6Uks.crl (hash: dje/IIP7o5FFXJswBM7hhKnsB6x4LmU49Q/w8PNOgfk=)
2: B753A48EC6C711F09BF6A518C4F9AE02.roa (hash: nCUAwcVtKiknK/x07jx8AEGgjWAlFPwBHEfe76OnWT4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.crl
rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jhITFCkXlrLlK4nYfE7W2dz6Uks.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121 (0x79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6DD0, serialNumber=8E121314291796B2E52B89D87C4ED6D9DCFA524B
Validity
Not Before: May 11 08:13:24 2026 GMT
Not After : May 18 08:13:24 2026 GMT
Subject: CN=6a018fa4-9f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:41:78:f0:da:a2:a2:10:ac:c3:f4:49:25:8e:
85:25:3c:4d:a1:85:e3:aa:f5:1e:ff:be:32:3f:e3:
83:6b:8b:52:eb:1c:63:ca:36:3e:88:27:74:4b:f9:
a7:c1:a0:be:8d:3c:0e:b7:94:6f:67:90:57:6e:70:
8b:3c:d9:b7:fa:3e:d7:a2:e7:32:5d:ea:03:a0:c3:
b1:73:88:ea:ce:e1:ad:1e:27:1e:2a:33:41:66:ad:
98:63:41:52:10:50:59:e4:c7:56:d6:7e:ab:2a:7e:
df:bf:eb:52:26:4b:09:e7:d3:19:6f:d0:dc:24:9b:
2a:31:ac:93:fc:4d:9c:2c:30:5f:b6:e2:c6:f2:d1:
ce:9e:78:6b:0d:98:d3:d6:15:e4:75:2e:c4:65:16:
77:ee:62:67:24:a1:8a:94:84:8c:db:9f:20:b5:99:
11:b2:48:4a:38:57:4e:0b:72:c8:82:39:4d:35:7e:
14:01:0b:90:05:56:f9:46:61:4f:ab:67:17:c9:a5:
6f:cb:c8:47:1f:44:54:f8:d9:8e:5b:99:0d:26:e9:
8a:e4:5b:51:cb:74:83:03:6f:92:6e:e8:3b:91:57:
5c:f3:cf:08:be:c3:76:32:8a:85:af:fa:7d:85:d1:
90:07:2f:38:f1:b9:69:6a:c5:22:6e:fa:98:24:71:
76:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:97:85:AD:DA:98:E4:3B:D6:71:7C:C5:C6:29:4F:AF:17:26:78:03
X509v3 Authority Key Identifier:
keyid:8E:12:13:14:29:17:96:B2:E5:2B:89:D8:7C:4E:D6:D9:DC:FA:52:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jhITFCkXlrLlK4nYfE7W2dz6Uks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:76:a5:e1:78:e2:54:a7:80:43:c8:03:09:97:fb:4b:1d:6c:
3d:b0:30:d7:95:b1:17:a3:c3:04:7e:04:24:62:3b:ec:2b:7c:
4a:d2:d0:80:8e:0d:86:ec:16:c4:f0:78:7d:72:43:71:e1:61:
1e:1c:01:a5:13:1b:08:c9:9b:64:20:c0:7d:82:f9:ca:e6:66:
98:1e:45:50:67:7f:22:38:cc:a0:23:97:97:6e:3a:0e:60:66:
e2:cc:0a:bc:ac:9a:21:5c:47:27:ac:b5:6c:6c:93:32:49:22:
9a:86:69:28:ba:c9:8c:5f:d1:96:a9:36:ba:94:3f:9a:11:39:
0d:7c:35:9c:d8:9a:08:10:f6:77:b7:48:cc:fe:99:b5:fb:44:
46:30:0f:06:6b:38:3a:7a:ff:cb:49:2e:90:61:c2:20:32:29:
85:8d:99:67:9e:22:a0:7b:67:8c:92:55:9c:13:a1:61:49:14:
37:bc:75:b3:c6:3b:52:4f:a2:ca:e1:55:73:11:e8:27:25:d3:
28:d6:94:12:17:46:a3:18:89:0d:34:d6:53:13:dc:92:6e:e3:
d0:e0:8f:fc:6b:fe:dc:87:c2:be:9a:0e:54:6a:4d:00:2b:28:
14:40:c7:36:2e:00:71:cd:69:6d:eb:f8:f1:17:77:48:78:ca:
ce:16:8f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:10:28 2026 by rpki-client