
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft
File: jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft (raw, json)
Hash identifier: jqw6oVtKxrdKU+jScWrOhdTK1AEaC1iXS9W8mX2iau0=
Subject key identifier: 06:66:65:0A:2F:AC:97:46:F8:99:04:36:83:F4:AC:0B:7E:A6:D5:81
Authority key identifier: 8E:11:FC:B4:E8:BD:63:D2:7B:84:EB:2D:52:67:0C:A1:74:F9:C4:3C
Certificate issuer: /CN=A91C3A74/serialNumber=8E11FCB4E8BD63D27B84EB2D52670CA174F9C43C
Certificate serial: 1B3F
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jhH8tOi9Y9J7hOstUmcMoXT5xDw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft
Manifest number: 1B35
Signing time: Tue 12 May 2026 15:41:44 +0000
Manifest this update: Tue 12 May 2026 15:41:44 +0000
Manifest next update: Tue 19 May 2026 15:41:44 +0000
Files and hashes: 1: jhH8tOi9Y9J7hOstUmcMoXT5xDw.crl (hash: sAU5FtoWSIXCHiIuN4no9SZEZvJf7Pvb+jbSt5434RE=)
2: AFA37450139811EA807F1A26C4F9AE02.roa (hash: Y1iY5bDdtF14xe5+ecYddY6nYDDRlZBhph8kiu8Him8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.crl
rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jhH8tOi9Y9J7hOstUmcMoXT5xDw.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6975 (0x1b3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C3A74, serialNumber=8E11FCB4E8BD63D27B84EB2D52670CA174F9C43C
Validity
Not Before: May 12 15:41:44 2026 GMT
Not After : May 19 15:41:44 2026 GMT
Subject: CN=6a034a38-d32d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:89:01:34:92:40:92:7e:b1:ef:96:0c:bf:2a:
ec:73:35:35:02:97:62:ee:33:f8:1a:71:86:48:53:
48:45:24:6b:df:02:a3:f8:e1:52:22:39:74:5b:d9:
c0:19:0a:c5:1c:68:a9:89:a6:ba:60:da:0c:00:56:
82:6c:25:73:65:3e:a1:73:4c:98:45:8b:2e:e5:60:
e6:a1:8d:18:a8:84:f1:0b:1e:be:f1:16:d7:d7:5e:
55:83:48:96:36:fe:63:f3:29:ed:03:f2:cd:7f:87:
a7:c1:bc:2a:20:6c:ad:40:2f:d0:3b:de:b4:33:2b:
a5:c7:5c:28:54:a6:89:63:d3:d9:3d:f1:03:6c:1b:
7e:8d:24:70:58:15:fc:aa:5d:e1:26:db:cd:19:1b:
f0:b2:00:3c:57:5f:4d:c5:6c:4a:4a:1c:91:71:89:
6d:94:0c:e1:3b:6f:00:97:02:be:7c:6c:ec:3c:1d:
f6:ce:6a:fa:85:dd:7e:b1:ed:a3:15:96:0c:3a:33:
5e:3f:b4:65:2c:f2:d2:fa:4d:40:e0:8e:0e:de:05:
1f:34:31:ea:a3:94:3b:e0:93:cb:0b:ba:62:fc:69:
22:e1:09:a4:02:6e:82:c8:1a:d0:b4:8b:23:9f:1b:
f0:e7:08:47:a1:2c:9b:35:b8:75:7c:96:84:9f:00:
1f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:66:65:0A:2F:AC:97:46:F8:99:04:36:83:F4:AC:0B:7E:A6:D5:81
X509v3 Authority Key Identifier:
keyid:8E:11:FC:B4:E8:BD:63:D2:7B:84:EB:2D:52:67:0C:A1:74:F9:C4:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jhH8tOi9Y9J7hOstUmcMoXT5xDw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:c1:55:43:46:fd:c3:40:ad:b5:10:16:26:63:80:60:f4:b4:
70:c6:f4:06:68:93:0a:90:5d:2a:11:a2:b8:a7:2c:3b:9f:c0:
5d:6e:54:61:1b:c8:b9:3b:28:e7:b7:35:46:40:d5:2f:31:7d:
64:b4:49:11:d0:eb:54:24:39:d7:61:ac:3f:af:79:f2:9d:87:
62:24:54:8a:66:ef:b9:db:2b:fe:cf:2f:b1:52:61:fe:73:05:
dd:c0:86:ea:51:87:c0:7c:86:a5:fd:f9:f9:ad:12:77:ae:8b:
46:4f:19:60:88:c2:6b:54:92:61:52:34:3f:01:1f:17:9d:d0:
ac:a5:6f:59:27:02:ce:03:b0:53:f3:d8:0f:d9:1a:2e:77:a6:
a0:31:dc:63:61:78:ca:db:3c:30:12:77:d0:5c:be:af:18:6e:
c4:08:df:af:77:e7:e9:fa:d8:8e:9f:95:c4:24:04:29:7e:b1:
c4:59:e5:da:da:72:e0:27:c2:4a:ff:8e:c6:e8:f0:a6:e0:70:
d5:c4:bb:5d:fc:10:c1:d0:e9:16:a6:07:21:b4:a1:df:6e:d1:
83:97:4e:99:62:c4:85:13:86:9f:e7:fa:96:ef:f2:5d:05:3e:
75:63:1a:27:8f:b3:74:be:eb:5f:8e:c1:3c:bd:78:0b:88:ea:
87:0c:31:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:10:24 2026 by rpki-client