
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft
File: rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft (raw, json)
Hash identifier: SUThyYwzA/vNuClbJdLZ/gY6HO04WCdBT0D/2sFKDNI=
Subject key identifier: F6:DB:24:96:AF:2C:A3:EF:62:08:E6:40:1B:B0:E8:01:6B:BF:B0:EB
Authority key identifier: AE:10:7F:3C:29:77:71:7A:1C:D3:57:1D:18:37:48:FD:07:D9:FC:5F
Certificate issuer: /CN=A9117E4D/serialNumber=AE107F3C2977717A1CD3571D183748FD07D9FC5F
Certificate serial: 3604
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft
Manifest number: 35CC
Signing time: Fri 02 Oct 2026 14:27:29 +0000
Manifest this update: Fri 02 Oct 2026 14:27:29 +0000
Manifest next update: Fri 09 Oct 2026 14:27:29 +0000
Files and hashes: 1: rhB_PCl3cXoc01cdGDdI_QfZ_F8.crl (hash: iac7cKqVVlLtDME/dhaD0O4lpjbYGhYXlyGBKQnNyI0=)
2: 44D3107874E311F1BDAFA91462A30FBC.roa (hash: VfyhBUgrPxEZ3Pk507z9TQFQixjh7TGc37ukGF2VrsE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.crl
rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 14:27:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13828 (0x3604)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117E4D, serialNumber=AE107F3C2977717A1CD3571D183748FD07D9FC5F
Validity
Not Before: Oct 2 14:27:29 2026 GMT
Not After : Oct 9 14:27:29 2026 GMT
Subject: CN=6abfbf51-7399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3f:26:db:98:4a:ac:1d:15:9b:55:ba:68:2d:
9d:c2:d9:88:0d:64:c1:46:28:95:06:6a:ba:8f:93:
8a:68:5c:4f:be:8c:99:ee:73:78:5f:d8:10:60:9c:
b8:6a:87:66:d9:a2:7a:cc:df:7d:44:48:cc:f5:53:
73:6c:e9:84:62:7e:a4:12:b6:80:fd:70:8e:00:9b:
5b:2f:86:de:e6:a8:a8:2a:8e:e3:c7:cf:38:f2:fd:
32:58:fd:c5:a8:33:0a:96:07:50:89:4b:ae:30:f8:
ce:6c:71:48:36:53:64:21:b4:6f:40:07:c7:f6:c2:
cc:2b:2f:40:e7:2e:ce:48:82:0d:22:b2:f1:ca:ff:
0d:62:90:fe:77:f1:6a:7b:56:82:61:4d:8f:ec:ad:
d6:bd:55:4b:fa:ef:31:fd:98:5c:40:e4:84:b6:e1:
62:f7:71:ed:d5:64:5b:04:2f:86:f2:6b:eb:07:90:
ea:29:6d:a9:ba:be:d6:1b:01:03:28:8a:50:93:46:
ae:24:6b:9b:b2:fa:82:11:4f:07:df:78:12:03:15:
88:99:1b:d8:a2:d9:25:d4:bb:26:fe:26:62:3a:26:
f5:26:74:a2:71:54:2d:a1:85:72:65:ba:22:d8:b6:
d1:32:4f:36:90:d6:60:d1:ce:45:00:83:c2:27:81:
5b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:DB:24:96:AF:2C:A3:EF:62:08:E6:40:1B:B0:E8:01:6B:BF:B0:EB
X509v3 Authority Key Identifier:
keyid:AE:10:7F:3C:29:77:71:7A:1C:D3:57:1D:18:37:48:FD:07:D9:FC:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:12:03:59:50:20:00:d6:a9:98:88:c8:8e:b5:27:67:92:a0:
8b:0d:8d:64:00:ad:e5:db:5c:c5:9c:15:f7:cd:be:39:c1:40:
20:20:8c:5b:c0:2e:c2:da:f8:3f:6a:50:42:a9:d1:08:43:0e:
56:d4:6f:48:5e:7f:10:74:3d:d4:a1:09:44:33:2e:ae:80:f7:
bb:e0:b6:d8:1c:c8:9c:d4:91:a6:08:eb:a9:98:77:2f:cd:26:
d9:ef:a7:04:42:18:90:6e:07:f7:5a:06:2a:d0:44:2e:ab:ba:
25:cb:91:e5:fd:53:27:21:d6:fd:e4:6f:4f:5a:25:d3:0e:ca:
2d:37:49:39:90:11:5d:e6:16:fc:ab:b7:e9:c6:e6:c8:fb:bc:
b5:3f:98:2d:6a:7d:c7:91:97:a4:fc:27:36:00:db:2d:c6:35:
f3:92:82:cf:e6:4f:94:7e:97:63:ec:fc:43:9e:94:2c:71:44:
18:2c:b4:13:c3:34:1b:b7:f5:73:96:c4:c6:03:06:5b:ab:cd:
5c:14:c6:ae:3a:44:d5:fb:3c:10:67:15:48:87:0c:73:79:8b:
f3:b9:ab:79:8c:d9:06:6a:d8:4f:6a:28:ad:52:8c:d0:fb:3e:
99:62:4d:6e:10:5e:b4:95:26:55:c7:37:13:f8:ce:30:fb:e8:
01:5d:cd:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 09:11:16 2026 by rpki-client