
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft
File: JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft (raw, json)
Hash identifier: cgn5OvSEWvzNRqzjOGnPxVfF5/35PsALd2E6qxn5CdA=
Subject key identifier: C8:46:D0:86:0A:59:4C:9B:84:D6:0D:4C:0D:1C:A9:84:15:0E:F6:BE
Authority key identifier: 24:7B:5D:6E:62:E4:A4:9E:9D:F4:DC:24:C3:1E:CA:6E:D7:A4:3B:28
Certificate issuer: /CN=A91C54A1/serialNumber=247B5D6E62E4A49E9DF4DC24C31ECA6ED7A43B28
Certificate serial: 01F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft
Manifest number: 01EA
Signing time: Thu 23 Jul 2026 04:45:25 +0000
Manifest this update: Thu 23 Jul 2026 04:45:24 +0000
Manifest next update: Thu 30 Jul 2026 04:45:24 +0000
Files and hashes: 1: JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl (hash: CHq+pz+nrhdYxG6Dv7G+8nFDo/QQYATQRlV/vNtlALY=)
2: 3F69EB4C1D0B11F08389C829C4F9AE02.roa (hash: 4YSK+iaPKx3acIazhk09lsImhU6+yUHomcj+4pCQSC4=)
3: 3EA78B421D0B11F08389C829C4F9AE02.roa (hash: UpXQLmw7cYNYgQoy2FdAYqD1shDQWt+tw0L6PWQgH4Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl
rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:45:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 501 (0x1f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C54A1, serialNumber=247B5D6E62E4A49E9DF4DC24C31ECA6ED7A43B28
Validity
Not Before: Jul 23 04:45:24 2026 GMT
Not After : Jul 30 04:45:24 2026 GMT
Subject: CN=6a619c65-78b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1f:4e:fd:29:00:74:bc:47:16:ce:ce:50:b6:
59:cf:c9:57:d7:87:bc:54:d0:30:cb:fb:16:5a:bb:
72:de:3a:82:b4:e9:3d:3f:95:38:3c:97:c9:d2:55:
2b:c4:f2:15:9e:0e:e2:a8:5a:21:74:1a:6c:aa:ed:
c3:42:f6:cc:b4:0a:64:5f:a1:e1:0b:df:af:71:2c:
8e:9e:8e:97:8d:15:43:4b:4d:ea:cf:03:60:b6:3c:
5f:9e:88:91:90:6d:23:60:d6:e0:6e:9a:73:e5:5d:
bb:47:36:4b:46:97:cd:e9:85:9a:1d:f4:8b:a7:a1:
0b:cd:00:19:0b:e1:45:fa:af:21:82:77:de:29:6c:
2b:23:7c:fb:a4:54:bc:22:e6:4a:68:66:7a:3c:62:
fb:3a:56:27:62:d0:e1:f0:d3:66:60:96:6b:4a:c8:
53:f3:38:0c:66:97:2a:3f:1a:5d:ce:09:8c:af:9f:
cf:1e:97:45:6e:3b:d5:09:43:d8:15:68:b5:a1:81:
2c:f2:5b:8b:36:56:2c:d1:f6:36:fb:dc:3a:6e:4b:
8e:82:91:7a:a1:b0:67:70:c0:fe:90:eb:b4:75:95:
b0:6d:ad:01:0c:31:74:b8:3d:6b:4c:52:3b:f1:dc:
46:07:1d:8d:e4:36:bf:fe:be:ca:17:8c:e1:76:6f:
52:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:46:D0:86:0A:59:4C:9B:84:D6:0D:4C:0D:1C:A9:84:15:0E:F6:BE
X509v3 Authority Key Identifier:
keyid:24:7B:5D:6E:62:E4:A4:9E:9D:F4:DC:24:C3:1E:CA:6E:D7:A4:3B:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:73:24:82:34:29:f2:5e:01:49:db:4a:38:f4:cc:d4:a8:0c:
30:8e:32:24:b6:30:95:4a:2f:e8:1d:19:b7:a7:ba:1e:1a:8a:
d6:76:76:89:7e:d1:2e:f2:87:0b:9d:7e:78:ba:97:15:30:10:
98:dd:98:8d:6f:12:26:de:5d:32:9c:76:1c:df:c4:68:64:b9:
4d:6c:bf:41:4c:6e:3c:56:fb:6d:ee:6e:cf:4f:15:ac:53:4a:
7d:04:10:8f:79:7d:da:3a:04:f7:93:82:77:b2:0b:8f:54:11:
ce:5a:13:ed:f9:db:b7:fc:94:47:88:9d:ef:3e:c0:d1:fe:4a:
bb:93:8d:c1:1c:6f:1d:2c:71:21:b9:45:e5:f7:d7:86:ae:2f:
cd:58:0b:f0:06:95:bd:b4:c3:6f:af:16:2f:dc:31:6c:f8:49:
34:82:1f:4a:12:c6:0f:6a:4e:e4:4c:00:05:d1:b2:e7:e2:af:
f3:ab:aa:40:ab:34:32:ca:ef:d0:0d:ad:69:46:48:98:1e:f1:
e9:5b:c6:54:89:81:7f:fe:ff:cb:8c:8c:80:94:05:78:f7:f1:
fe:84:cf:76:32:12:ce:f7:90:00:ec:d7:3d:4b:5f:2d:6f:06:
78:bb:e1:0a:22:17:8c:13:0e:88:d4:f6:7c:08:e1:bf:23:c5:
79:0c:5e:ee
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzU0QTExMTAvBgNVBAUTKDI0N0I1RDZFNjJFNEE0OUU5REY0REMyNEMzMUVDQTZF
RDdBNDNCMjgwHhcNMjYwNzIzMDQ0NTI0WhcNMjYwNzMwMDQ0NTI0WjAYMRYwFAYD
VQQDEw02YTYxOWM2NS03OGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmB9O/SkAdLxHFs7OULZZz8lX14e8VNAwy/sWWrty3jqCtOk9P5U4PJfJ0lUr
xPIVng7iqFohdBpsqu3DQvbMtApkX6HhC9+vcSyOno6XjRVDS03qzwNgtjxfnoiR
kG0jYNbgbppz5V27RzZLRpfN6YWaHfSLp6ELzQAZC+FF+q8hgnfeKWwrI3z7pFS8
IuZKaGZ6PGL7OlYnYtDh8NNmYJZrSshT8zgMZpcqPxpdzgmMr5/PHpdFbjvVCUPY
FWi1oYEs8luLNlYs0fY2+9w6bkuOgpF6obBncMD+kOu0dZWwba0BDDF0uD1rTFI7
8dxGBx2N5Da//r7KF4zhdm9SrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMhG0IYK
WUybhNYNTA0cqYQVDva+MB8GA1UdIwQYMBaAFCR7XW5i5KSenfTcJMMeym7XpDso
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTRBMS83NDAyRDhEODlC
NjAxMUVFODZFRTFEMTBDNEY5QUUwMi9KSHRkYm1Ma3BKNmQ5Tndrd3g3S2J0ZWtP
eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pIdGRibUxrcEo2ZDlOd2t3eDdLYnRla095Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NTRBMS83NDAyRDhEODlCNjAxMUVFODZFRTFEMTBDNEY5QUUwMi9KSHRkYm1Ma3BK
NmQ5Tndrd3g3S2J0ZWtPeWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjnMkgjQp8l4BSdtKOPTM1KgMMI4yJLYwlUov6B0Zt6e6HhqK1nZ2iX7RLvKH
C51+eLqXFTAQmN2YjW8SJt5dMpx2HN/EaGS5TWy/QUxuPFb7be5uz08VrFNKfQQQ
j3l92joE95OCd7ILj1QRzloT7fnbt/yUR4id7z7A0f5Ku5ONwRxvHSxxIblF5ffX
hq4vzVgL8AaVvbTDb68WL9wxbPhJNIIfShLGD2pO5EwABdGy5+Kv86uqQKs0Msrv
0A2taUZImB7x6VvGVImBf/7/y4yMgJQFePfx/oTPdjISzveQAOzXPUtfLW8GeLvh
CiIXjBMOiNT2fAjhvyPFeQxe7g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:12:08 2026 by rpki-client