
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft
File: h57Jr836J6POe11DeHoviQOFWG4.mft (raw, json)
Hash identifier: T553rXODzwziCbidXKndSBnHz1JcWM8vKwa5el/EZpM=
Subject key identifier: C1:45:02:22:42:C8:11:CE:29:D7:66:C7:CF:40:F6:45:5D:69:F4:74
Authority key identifier: 87:9E:C9:AF:CD:FA:27:A3:CE:7B:5D:43:78:7A:2F:89:03:85:58:6E
Certificate issuer: /CN=A914E556/serialNumber=879EC9AFCDFA27A3CE7B5D43787A2F890385586E
Certificate serial: 083B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h57Jr836J6POe11DeHoviQOFWG4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft
Manifest number: 0832
Signing time: Sat 04 Apr 2026 20:44:33 +0000
Manifest this update: Sat 04 Apr 2026 20:44:32 +0000
Manifest next update: Sat 11 Apr 2026 20:44:32 +0000
Files and hashes: 1: h57Jr836J6POe11DeHoviQOFWG4.crl (hash: WJxxAZWhsf4ZK+PdPijlf1OKnvrTyjcaAc4aScDvDrg=)
2: 375F7DAA0C3911EB828BDC25C4F9AE02.roa (hash: hCv4wxJX5+ETdeFNVL5GtKS1rPvCsBD6zv5q8RT353s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.crl
rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h57Jr836J6POe11DeHoviQOFWG4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 20:44:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2107 (0x83b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E556, serialNumber=879EC9AFCDFA27A3CE7B5D43787A2F890385586E
Validity
Not Before: Apr 4 20:44:32 2026 GMT
Not After : Apr 11 20:44:32 2026 GMT
Subject: CN=69d17830-149f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8e:1d:42:87:50:2a:17:55:ce:ca:02:a7:cd:
3b:2c:ae:ff:05:e7:fa:e0:d1:86:7f:73:f7:da:ca:
da:8b:7e:45:b5:57:66:66:f5:91:72:e5:41:43:03:
2f:9b:30:eb:a5:e3:9c:9d:cf:2e:3c:93:47:27:bd:
9d:c9:5b:56:37:55:f2:04:50:74:71:c2:7e:f3:54:
0c:48:39:7f:ec:11:9c:5c:64:58:95:6b:cc:a5:f0:
9f:c2:08:54:98:78:f3:58:8c:e4:6a:7b:34:78:62:
41:3c:12:37:11:f8:4b:6d:fb:dd:29:9e:fc:65:b0:
9a:5c:a1:29:5c:da:8e:f2:c2:95:aa:f0:b8:8b:2a:
bb:8d:a1:24:c3:64:81:f0:8a:6e:3a:c1:5f:9c:bf:
2e:02:b0:45:99:01:be:30:49:a3:35:3e:1f:b5:79:
4b:f0:ac:7e:35:22:98:8f:f5:48:de:79:61:ae:d8:
76:d2:c2:e2:c1:8a:63:fb:49:c0:a6:4a:57:36:c6:
21:c7:db:33:69:ca:39:64:43:10:14:b3:47:f4:a8:
f4:dc:8b:32:6c:f5:b8:3e:65:1a:32:22:a7:65:d9:
3d:6a:4f:ba:5e:cc:3a:44:55:9f:56:1e:20:a9:5e:
a8:c9:6f:e2:a8:29:74:f2:6d:87:4b:f6:fc:f6:7a:
4a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:45:02:22:42:C8:11:CE:29:D7:66:C7:CF:40:F6:45:5D:69:F4:74
X509v3 Authority Key Identifier:
keyid:87:9E:C9:AF:CD:FA:27:A3:CE:7B:5D:43:78:7A:2F:89:03:85:58:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h57Jr836J6POe11DeHoviQOFWG4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:b6:38:84:9a:26:3c:48:d4:83:c8:aa:4e:07:b7:41:ba:99:
30:35:a2:09:1b:dc:b0:f5:9c:78:a1:b1:7b:a8:d8:7d:0f:05:
20:41:97:a8:51:9a:18:73:99:c3:d3:6d:3f:8a:ca:ca:5c:ea:
4e:2c:34:d8:4c:88:7a:76:b3:4d:da:da:5d:a4:90:3e:54:b4:
01:94:8b:3c:85:95:9b:7b:15:d7:6b:d6:d6:12:ec:a9:ce:a2:
89:0c:04:d8:0b:2e:7b:2c:02:03:15:ca:9e:9b:0c:bd:fd:a8:
5c:56:b9:b5:6a:ea:88:9f:e6:1b:b2:72:d1:6b:bd:49:7a:6b:
61:37:d4:15:f1:e7:76:e9:61:e2:34:fa:83:84:40:ae:f0:f3:
08:5c:49:ce:43:4f:88:58:b3:35:8b:15:74:51:16:f0:cb:34:
7c:10:67:28:62:0b:23:f7:02:15:e1:f7:c0:8a:62:03:3b:87:
bf:69:01:e0:65:51:09:64:53:76:65:08:57:ef:ba:5c:32:f5:
3d:82:a3:7f:d1:5a:03:e7:68:2d:99:c0:59:ae:3d:bb:6a:8f:
9e:a2:65:d4:63:bf:f2:03:b5:06:c4:b0:7c:47:da:da:f7:99:
a6:f5:b0:d4:2c:cf:06:8d:21:06:ff:b4:85:91:2a:8f:f0:6e:
07:6c:55:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:44:13 2026 by rpki-client