
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft
File: JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft (raw, json)
Hash identifier: C3wxGIRPIt45AUJBfRgJYr18wiox91mS447h0q3e1BY=
Subject key identifier: E8:3B:0D:31:33:59:7C:64:8D:C1:96:90:7F:71:5F:2E:14:72:BB:05
Authority key identifier: 24:7B:5D:6E:62:E4:A4:9E:9D:F4:DC:24:C3:1E:CA:6E:D7:A4:3B:28
Certificate issuer: /CN=A91C54A1/serialNumber=247B5D6E62E4A49E9DF4DC24C31ECA6ED7A43B28
Certificate serial: 01D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft
Manifest number: 01C7
Signing time: Wed 13 May 2026 03:52:33 +0000
Manifest this update: Wed 13 May 2026 03:52:32 +0000
Manifest next update: Wed 20 May 2026 03:52:32 +0000
Files and hashes: 1: JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl (hash: mPwutM8W1f1imSkxUUhQ4L5iBSM3XhqUZ2MDOYtn2fA=)
2: 3F69EB4C1D0B11F08389C829C4F9AE02.roa (hash: 4YSK+iaPKx3acIazhk09lsImhU6+yUHomcj+4pCQSC4=)
3: 3EA78B421D0B11F08389C829C4F9AE02.roa (hash: UpXQLmw7cYNYgQoy2FdAYqD1shDQWt+tw0L6PWQgH4Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl
rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 03:52:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 466 (0x1d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C54A1, serialNumber=247B5D6E62E4A49E9DF4DC24C31ECA6ED7A43B28
Validity
Not Before: May 13 03:52:32 2026 GMT
Not After : May 20 03:52:32 2026 GMT
Subject: CN=6a03f580-e1a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b4:21:bc:1e:35:46:ce:e1:66:d0:a8:a6:16:
b4:17:58:c7:1e:9a:50:84:f5:40:4e:62:3c:8f:b0:
f2:f3:84:3b:38:58:b8:1b:5c:af:f2:c1:c4:d2:67:
c5:95:79:61:36:09:64:4c:5a:54:23:00:3c:77:0c:
ae:29:28:74:78:d1:dc:6c:0a:cd:ae:23:d6:51:92:
19:d2:c6:51:ce:a4:b2:88:c6:a9:ff:76:3e:71:2c:
9c:3a:d1:ff:4d:02:5d:a2:5e:95:ed:16:27:dc:39:
94:40:e1:a0:e7:8c:11:b8:07:15:c4:d8:24:50:fc:
a1:05:24:d7:8e:6d:db:a5:0f:33:c3:d8:f6:1b:b1:
b5:04:21:57:d7:f6:ce:64:3f:76:b0:9a:29:ae:77:
4c:ee:2d:ba:29:1c:4e:08:a8:e7:06:f1:ac:43:43:
ea:1e:4c:47:ab:ec:39:39:4a:3c:de:7b:77:2b:5d:
ee:9b:98:1e:84:ba:d2:5c:ae:ec:04:ca:fc:49:93:
75:86:b6:66:32:4d:5a:5e:a0:ec:73:cc:77:f3:7f:
77:5e:e2:36:23:fb:69:a2:9d:d2:fb:3f:72:e6:c7:
85:78:ca:23:ed:e5:c7:36:01:c2:be:e7:5b:7a:82:
96:b5:7b:fd:8d:30:37:1e:2a:83:cc:2e:5b:02:79:
62:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:3B:0D:31:33:59:7C:64:8D:C1:96:90:7F:71:5F:2E:14:72:BB:05
X509v3 Authority Key Identifier:
keyid:24:7B:5D:6E:62:E4:A4:9E:9D:F4:DC:24:C3:1E:CA:6E:D7:A4:3B:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:f4:e5:62:61:75:a4:41:fc:42:80:74:fe:89:3a:ca:a3:18:
a3:16:40:55:24:ef:da:33:d5:d8:d4:8c:09:6c:88:c8:97:bb:
c2:56:4a:f1:b6:d6:fe:9e:07:30:01:a8:29:2f:23:cb:e8:24:
05:0e:2b:51:6e:58:33:ea:5b:6f:f3:40:d0:0f:fa:36:8e:b1:
f8:69:07:80:fc:05:04:51:f1:45:b0:b3:f0:c3:12:bb:1a:0a:
24:c4:77:c3:b2:37:97:84:86:83:a1:31:8d:6b:0b:4a:67:dc:
cb:f9:6d:69:30:e8:e3:ef:92:bd:67:c3:f2:12:cd:fa:2e:cd:
f7:9b:b7:0d:d1:3f:94:27:7f:ed:6f:11:a6:22:74:16:e4:e7:
14:e3:b6:0d:6e:8a:45:10:f0:51:d4:c1:46:d8:2f:44:49:1f:
4f:82:72:3f:fb:bf:aa:8e:29:e9:07:28:43:dc:d5:d0:1b:9f:
72:b6:b8:ed:cb:02:64:16:22:fa:77:5c:6d:32:21:6d:e0:0d:
e9:fe:96:83:1b:6a:03:7c:dd:86:52:04:06:27:96:60:52:81:
f5:96:f4:63:a3:7d:0e:c2:3a:8d:9a:0b:94:83:db:2b:f3:65:
28:09:62:ce:6b:93:b1:63:44:1c:02:05:d5:a8:92:b0:41:c3:
6f:13:e0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:04:31 2026 by rpki-client