
$ rpki-client -vvf rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft
File: sHoKQBnouCACE78tzPxocPheBGY.mft (raw, json)
Hash identifier: qCHrcQrYw2x0FSZQbWMuxNLudvBluNHdIqB5bESTYy8=
Subject key identifier: 08:B7:0E:88:FA:C9:39:77:BD:7F:F8:36:58:30:6A:6D:E0:77:E0:4F
Authority key identifier: B0:7A:0A:40:19:E8:B8:20:02:13:BF:2D:CC:FC:68:70:F8:5E:04:66
Certificate issuer: /CN=A916E5FB/serialNumber=B07A0A4019E8B8200213BF2DCCFC6870F85E0466
Certificate serial: 0CEA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sHoKQBnouCACE78tzPxocPheBGY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft
Manifest number: 0CD0
Signing time: Sat 04 Apr 2026 18:13:26 +0000
Manifest this update: Sat 04 Apr 2026 18:13:25 +0000
Manifest next update: Sat 11 Apr 2026 18:13:25 +0000
Files and hashes: 1: sHoKQBnouCACE78tzPxocPheBGY.crl (hash: jUw4wLAZbunZqmDOMEyHGMHPymduEFlOjqzcR4vD9Gg=)
2: 6ED5481209DF11EAA6052433C4F9AE02.roa (hash: HrmVnXUGJt8jw2Un+GAxOWQzRcn/YFzs1aPIkDSrkXs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.crl
rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sHoKQBnouCACE78tzPxocPheBGY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 18:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3306 (0xcea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916E5FB, serialNumber=B07A0A4019E8B8200213BF2DCCFC6870F85E0466
Validity
Not Before: Apr 4 18:13:25 2026 GMT
Not After : Apr 11 18:13:25 2026 GMT
Subject: CN=69d154c5-a6eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b1:38:a7:7a:20:0f:92:53:20:6c:01:82:51:
07:32:de:ea:15:42:14:e6:d1:23:b1:7a:80:af:52:
84:5c:0f:57:de:cd:c4:be:02:c8:a0:e9:e2:40:f5:
47:f2:f3:a8:c8:d7:d1:fc:25:30:5f:6f:27:fb:97:
ac:c6:85:a6:ff:2d:81:a5:e4:35:2c:43:64:5e:dc:
ea:fa:3c:92:bd:c4:a4:51:0c:85:bf:7e:6d:81:55:
28:5b:5c:54:2e:81:db:3e:d6:3a:08:84:b8:56:61:
d3:6d:33:5e:bc:ea:cc:3b:ca:e3:d1:55:fb:0e:ad:
b5:e7:dc:9a:ad:b4:8e:87:9e:d6:9a:aa:03:cd:19:
a1:2d:d6:3f:01:05:97:b8:e7:d5:ce:f2:65:1a:40:
25:b3:b3:2a:54:df:e9:c5:01:a2:e0:d3:ca:48:72:
c3:ec:bb:dc:12:0a:7f:a5:35:85:ae:81:82:37:51:
e3:6b:07:ca:f4:36:00:69:44:e6:ce:7b:08:d4:88:
6c:62:47:c2:e8:9b:8b:00:8b:c9:e2:ca:8c:0a:61:
6e:7c:f0:fd:db:3e:3e:91:c1:5b:f0:e7:d3:60:52:
22:bf:d1:99:90:9b:30:a8:18:aa:34:e9:1f:00:81:
73:de:df:74:88:b7:62:f3:0e:a3:52:61:2d:3f:0c:
d3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B7:0E:88:FA:C9:39:77:BD:7F:F8:36:58:30:6A:6D:E0:77:E0:4F
X509v3 Authority Key Identifier:
keyid:B0:7A:0A:40:19:E8:B8:20:02:13:BF:2D:CC:FC:68:70:F8:5E:04:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sHoKQBnouCACE78tzPxocPheBGY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:a2:94:08:5c:6e:ea:d1:c2:f5:9a:83:e4:ed:10:64:02:b6:
bd:51:0a:17:8d:11:90:1b:7a:37:85:77:4f:8d:31:b6:c0:8e:
08:27:bb:1f:31:9f:0f:43:ec:49:f0:5e:1f:e1:7e:c2:a3:40:
14:31:4d:2c:25:fe:70:50:f6:18:b8:4d:f6:9a:64:91:fb:37:
79:01:1d:11:cc:d7:4f:81:86:6d:06:19:6c:a6:87:9f:11:38:
b6:7f:00:29:86:08:b4:73:9b:be:b4:91:8d:4a:9a:a7:63:b2:
91:df:0e:92:8a:9f:82:1f:bb:43:b1:a5:cb:26:47:70:54:6f:
9b:b7:30:1f:15:a9:e8:0e:f8:cb:26:11:25:e0:cd:90:c1:3d:
f3:4e:8b:2f:00:20:29:ed:5a:cf:84:94:aa:a3:c7:f5:1a:17:
54:c6:72:f6:22:20:17:6c:ce:3c:8e:e6:11:58:78:7e:b1:be:
d9:68:80:64:fc:6b:14:08:15:af:97:bd:29:1e:50:93:4c:df:
24:9c:33:3d:e3:d5:86:56:99:b0:92:1f:7e:35:98:04:89:ca:
5c:42:93:dc:c3:da:77:6b:5a:5f:53:9a:74:d9:44:63:3d:7e:
97:48:47:52:95:68:2e:ff:b3:99:d8:06:38:73:1a:64:8f:6c:
bd:24:b3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:57:59 2026 by rpki-client