
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft
File: rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft (raw, json)
Hash identifier: vrmb7xCAkNIUWH06WXGQ+k9TwrCMEz21DvqcBXWkrnk=
Subject key identifier: 6F:10:E4:A2:B1:69:32:78:3A:50:B6:4E:2F:CB:A9:CB:40:4D:B8:4D
Authority key identifier: AE:16:04:58:72:DD:DA:C3:DC:F1:2F:07:95:CA:D7:0E:4C:09:D9:6C
Certificate issuer: /CN=A912D2CE/serialNumber=AE16045872DDDAC3DCF12F0795CAD70E4C09D96C
Certificate serial: 0D57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft
Manifest number: 0D4A
Signing time: Tue 18 Aug 2026 18:20:35 +0000
Manifest this update: Tue 18 Aug 2026 18:20:34 +0000
Manifest next update: Tue 25 Aug 2026 18:20:34 +0000
Files and hashes: 1: rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.crl (hash: bjacxPxqACyUXnUGeA/1dxPcrZswsJzVzHeAS0sNefg=)
2: 25234272DF4311EDA83C7074C4F9AE02.roa (hash: GvywSj55EV1yzQml0fqNzXzPDZF0ADJSCDwlr5eZm/s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.crl
rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 18:20:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3415 (0xd57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D2CE, serialNumber=AE16045872DDDAC3DCF12F0795CAD70E4C09D96C
Validity
Not Before: Aug 18 18:20:34 2026 GMT
Not After : Aug 25 18:20:34 2026 GMT
Subject: CN=6a84a272-846d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7c:db:18:26:8c:58:01:ed:ff:34:c0:93:28:
16:91:31:de:b9:d1:85:e7:33:dd:e8:4d:0d:5e:b9:
06:1a:ee:2f:45:4e:54:84:63:1b:60:68:e5:a1:6a:
f6:90:32:7a:15:5b:f6:fc:70:84:6e:e2:f3:28:a9:
f8:2a:4e:b6:e0:25:86:bb:ee:c0:84:6d:28:37:02:
f8:7d:54:2c:4e:61:17:03:fd:59:f3:51:38:8c:d3:
5f:7e:1a:b0:6e:33:91:c5:48:b4:c8:71:61:28:35:
e6:c7:34:0a:a5:b3:61:96:3e:66:62:04:e5:60:2d:
56:9b:6e:55:12:1e:db:6b:d8:be:e3:ea:17:2d:1b:
84:cb:ae:be:af:87:b8:4d:f5:11:2d:47:f6:18:6e:
aa:f1:56:75:3e:1c:74:15:c5:ab:cf:3a:d5:d8:56:
84:c8:e5:65:75:f3:f2:5b:95:e1:2d:de:49:31:eb:
17:a6:62:3c:32:a5:cc:79:97:ee:fd:0d:9e:5e:64:
df:58:8d:01:5c:84:ea:1f:e9:85:af:78:6a:fd:3b:
1d:55:36:b6:b0:95:79:0a:67:bd:d0:b3:73:64:72:
e0:ab:7b:4c:35:04:8c:58:50:7d:51:7e:71:fa:4a:
2a:c7:2b:65:e6:4c:b7:46:79:d5:87:56:45:f3:e8:
a4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:10:E4:A2:B1:69:32:78:3A:50:B6:4E:2F:CB:A9:CB:40:4D:B8:4D
X509v3 Authority Key Identifier:
keyid:AE:16:04:58:72:DD:DA:C3:DC:F1:2F:07:95:CA:D7:0E:4C:09:D9:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:71:92:5e:8c:ed:92:09:af:6e:8a:e7:03:e4:45:48:9f:02:
73:92:12:13:aa:24:2c:0b:48:02:95:e3:08:85:0e:b1:60:3f:
34:fa:36:d2:30:b7:31:d5:4a:b4:9f:8b:5e:12:b7:95:63:ba:
fb:04:a3:d8:7a:a1:65:23:17:76:d9:cb:84:f5:56:80:13:89:
d4:fa:c6:2f:44:43:7a:b5:7f:60:b7:3c:60:43:c1:7b:5c:a4:
2a:51:70:57:55:3b:e2:37:cb:77:1b:ed:c0:a8:65:d7:e3:98:
ae:74:81:a0:4b:4c:1f:16:fd:70:c9:57:8f:06:45:16:23:c7:
b3:88:21:d0:2a:47:9a:ad:93:1e:7c:0a:79:92:77:36:e1:93:
6b:63:2b:e4:49:00:5d:7e:98:42:64:04:d2:1c:d6:98:cb:7f:
87:5b:66:6d:0d:54:14:d3:cb:30:8e:8d:bc:d2:5a:86:b2:83:
34:52:22:7e:fd:b0:0c:44:a1:3f:45:97:86:5c:66:97:23:ca:
00:d9:d2:40:e7:85:41:c8:78:67:ac:48:a7:1e:82:e3:bf:01:
d4:38:ca:c9:33:d9:8e:1f:e5:03:a7:ab:02:7d:24:ef:10:d3:
fc:23:70:92:b6:06:d6:cb:49:e3:32:9e:21:37:c0:b3:54:30:
d0:e0:04:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:40:13 2026 by rpki-client