
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft
File: rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft (raw, json)
Hash identifier: Km6w4BEUUFYn92gi+0/R3+WpgsMDGQ8yXZAhpkxsTfI=
Subject key identifier: 47:43:AA:62:2E:E4:08:CF:55:2C:72:3C:E1:5F:E9:11:79:15:CF:F0
Authority key identifier: AE:10:7F:3C:29:77:71:7A:1C:D3:57:1D:18:37:48:FD:07:D9:FC:5F
Certificate issuer: /CN=A9117E4D/serialNumber=AE107F3C2977717A1CD3571D183748FD07D9FC5F
Certificate serial: 3561
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft
Manifest number: 3549
Signing time: Mon 20 Apr 2026 14:26:19 +0000
Manifest this update: Mon 20 Apr 2026 14:26:19 +0000
Manifest next update: Mon 27 Apr 2026 14:26:19 +0000
Files and hashes: 1: rhB_PCl3cXoc01cdGDdI_QfZ_F8.crl (hash: OKDiAxMezNz/MpC66hWx/6nHkkusiTYWARolpuxADGw=)
2: 2FA57B9A97B611EDAE9D4381C4F9AE02.roa (hash: FVSbWN+txOfkWkBvMLmDBeYriGUMAw+teOvv0Ix7L2U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.crl
rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Apr 2026 14:26:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13665 (0x3561)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117E4D, serialNumber=AE107F3C2977717A1CD3571D183748FD07D9FC5F
Validity
Not Before: Apr 20 14:26:19 2026 GMT
Not After : Apr 27 14:26:19 2026 GMT
Subject: CN=69e6378b-e374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:27:ac:f4:76:85:cb:fb:5b:ba:59:28:8f:35:
3f:47:1b:f6:ed:d1:75:ed:5a:8c:1e:0e:b9:23:9f:
45:9b:b1:09:f7:87:75:f6:81:15:df:20:d7:d2:b5:
71:42:4b:d8:07:c2:ce:6b:c9:da:f0:06:83:6f:01:
ea:c4:c8:fa:8d:38:23:24:00:6c:6f:b0:e4:af:e0:
ce:ea:62:41:2c:e4:fc:5a:a4:8e:75:76:c5:bc:b6:
af:26:c2:d6:e0:fc:63:35:7f:e3:05:f9:50:45:de:
3d:dd:18:35:0a:0b:44:02:bd:8a:4a:89:08:3c:20:
c7:05:76:09:2e:b7:aa:99:a6:97:f4:45:6a:2b:5e:
0f:75:ab:36:74:5d:c5:d0:15:f4:d5:0d:78:ef:17:
70:33:35:bf:52:35:ba:6d:f9:0e:c3:d3:60:a6:be:
c5:09:43:4a:f0:57:2c:7f:58:59:8e:b6:54:90:5d:
a0:86:8d:55:ac:7b:09:3e:ad:fa:7b:c5:4b:13:f8:
bf:18:03:c9:5f:5a:90:01:97:23:79:c7:a5:d2:07:
16:2f:ae:6e:20:a4:81:89:5b:3e:af:29:03:1c:bb:
16:8c:87:93:61:37:d1:76:68:0e:fd:5c:75:26:49:
94:bd:0b:50:f0:47:e7:5a:e7:d0:ec:43:7d:c5:6c:
7c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:43:AA:62:2E:E4:08:CF:55:2C:72:3C:E1:5F:E9:11:79:15:CF:F0
X509v3 Authority Key Identifier:
keyid:AE:10:7F:3C:29:77:71:7A:1C:D3:57:1D:18:37:48:FD:07:D9:FC:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:83:23:ba:bb:4c:76:a8:3c:47:10:b5:d7:cd:e3:26:cc:76:
ce:b2:14:f3:1f:39:8d:69:ec:89:9f:0c:dc:62:4d:41:0c:b2:
41:d5:40:95:fd:48:20:bd:21:f7:ff:96:d6:67:a5:82:96:93:
07:72:44:ff:70:35:90:62:94:2b:7f:e9:0a:07:64:14:98:48:
4c:04:58:b6:e4:06:82:30:0e:e9:65:fb:10:c6:2f:c9:31:13:
03:e8:24:f1:ec:d8:ad:8d:3a:d4:26:29:44:6a:aa:d5:08:9b:
fc:1f:52:73:28:62:a5:d0:80:2c:37:e9:3c:ee:8a:8e:eb:3e:
fa:46:d0:1f:4b:89:d4:f1:9a:e0:27:e1:6a:d9:a3:12:09:2e:
a6:2b:f3:71:ea:dc:87:08:ca:fc:a2:73:37:95:4b:0b:e7:f2:
a5:a9:b1:b6:d0:74:7e:b7:14:46:77:1c:f6:c9:13:cf:40:58:
22:95:65:4f:16:18:29:a9:7a:a5:e1:26:64:33:d5:40:f4:53:
3e:b9:d9:cb:4e:cd:3a:85:75:d8:e9:8e:cb:66:9c:d4:fe:89:
90:81:7b:70:45:3f:85:c1:20:f4:d7:10:37:36:f5:a7:ce:c6:
8e:e6:e8:2d:9e:e3:3c:f6:34:18:94:90:2c:ce:09:76:70:f4:
6d:5c:2f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 03:33:01 2026 by rpki-client