
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.mft
File: jhITFCkXlrLlK4nYfE7W2dz6Uks.mft (raw, json)
Hash identifier: +l5RCLu2h1IpnnCml+4evSi0IVAH4AciO+1bwNM9xP4=
Subject key identifier: F7:15:D9:AD:C2:73:78:F6:47:85:A5:6B:13:13:63:4E:B3:6B:B7:1E
Authority key identifier: 8E:12:13:14:29:17:96:B2:E5:2B:89:D8:7C:4E:D6:D9:DC:FA:52:4B
Certificate issuer: /CN=A91B6DD0/serialNumber=8E121314291796B2E52B89D87C4ED6D9DCFA524B
Certificate serial: 9D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jhITFCkXlrLlK4nYfE7W2dz6Uks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.mft
Manifest number: 90
Signing time: Thu 23 Jul 2026 09:32:44 +0000
Manifest this update: Thu 23 Jul 2026 09:32:44 +0000
Manifest next update: Thu 30 Jul 2026 09:32:44 +0000
Files and hashes: 1: jhITFCkXlrLlK4nYfE7W2dz6Uks.crl (hash: Mm6vlCBt46p9lYVcAsc3Jh21UI31xSlyUF3j/L8ip68=)
2: B753A48EC6C711F09BF6A518C4F9AE02.roa (hash: nCUAwcVtKiknK/x07jx8AEGgjWAlFPwBHEfe76OnWT4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.crl
rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jhITFCkXlrLlK4nYfE7W2dz6Uks.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:32:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157 (0x9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6DD0, serialNumber=8E121314291796B2E52B89D87C4ED6D9DCFA524B
Validity
Not Before: Jul 23 09:32:44 2026 GMT
Not After : Jul 30 09:32:44 2026 GMT
Subject: CN=6a61dfbc-65ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:97:81:fd:36:9e:1c:5f:78:26:4b:f4:5f:09:
c0:8c:32:d0:1b:ed:9b:64:a0:0b:8e:0e:5a:b6:b7:
42:f1:9e:e4:67:06:90:f7:89:95:fb:b3:d8:87:f1:
2b:b2:f8:16:d0:44:22:61:67:e8:8a:5d:00:bf:f7:
97:4a:87:4a:f3:a3:65:1a:41:a0:76:0f:08:e4:af:
7b:67:0e:5c:b1:f1:01:2f:71:a7:02:70:18:85:dd:
01:96:3a:d1:9b:b2:cf:26:59:c2:1b:51:cb:aa:cf:
fa:ab:21:9c:3b:6b:f4:d3:2c:5b:48:e5:36:2e:0c:
cb:3c:60:36:be:07:0d:46:71:63:03:4a:cd:b3:e1:
dd:86:99:c9:6d:73:d4:56:ad:39:35:aa:fa:8b:f3:
8a:00:0d:db:ce:7e:06:5f:b0:3c:9a:f2:08:0e:70:
0a:01:0e:cd:ec:8f:04:cf:53:cb:8d:23:31:b2:fa:
68:33:68:fa:31:8f:5c:c5:7f:75:35:53:9e:01:d2:
73:2a:3a:6e:da:48:77:02:62:16:7d:92:79:f6:a4:
e2:35:83:9a:f8:a7:04:fa:15:1f:18:1e:46:6f:91:
74:97:bd:65:17:2c:1f:47:58:99:07:16:2d:89:34:
d1:f6:d5:b5:1f:0c:02:32:4a:aa:a1:95:3e:96:5d:
d9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:15:D9:AD:C2:73:78:F6:47:85:A5:6B:13:13:63:4E:B3:6B:B7:1E
X509v3 Authority Key Identifier:
keyid:8E:12:13:14:29:17:96:B2:E5:2B:89:D8:7C:4E:D6:D9:DC:FA:52:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jhITFCkXlrLlK4nYfE7W2dz6Uks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:c5:75:2b:32:12:94:64:8a:19:ad:be:41:9a:69:91:06:0e:
cd:60:a3:b1:90:ae:87:ac:62:17:39:ac:a2:fe:4c:25:1f:4e:
01:c4:1e:62:63:40:d6:e1:c3:66:67:0d:a5:29:ce:cc:5b:df:
52:5a:a2:25:9e:46:86:ef:81:33:77:61:fd:7e:c9:f6:4d:9c:
f7:df:c9:6b:4b:7f:93:99:5c:69:4e:3c:4a:fd:6a:78:a3:06:
ea:7a:5e:60:5d:f1:94:1f:b8:2b:61:08:68:bb:23:52:99:9e:
e8:2d:41:31:c3:26:fc:f3:a8:6a:17:fb:bf:58:52:b7:24:d5:
ea:eb:56:8b:63:bf:3a:0e:99:9e:e8:d9:dd:c8:96:cb:87:c2:
39:c3:33:e0:07:d8:99:1b:00:29:3d:51:7e:72:8d:cc:5f:61:
9a:ee:fb:5f:e2:c5:30:34:ff:ca:7a:d9:c2:92:6a:cc:3a:79:
52:a3:41:0c:d9:5e:95:58:23:5b:8f:b3:fd:82:6b:0e:13:5d:
64:a6:52:f6:7b:88:cf:c4:f7:2b:11:28:cc:6f:44:54:5a:7c:
d9:ea:cf:ea:8f:af:8f:cf:ba:5f:76:2d:87:d9:c8:8e:7c:53:
49:8d:b6:52:e6:2b:f8:9d:35:dc:a3:f0:cf:e9:ba:9c:4e:b5:
15:df:bc:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:26:44 2026 by rpki-client