
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B5C2/779D04A0364111EB8499D219C4F9AE02/Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.mft
File: Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.mft (raw, json)
Hash identifier: tnOft2cJyYtdzyIhDySbRonc1SeTIAGmuZFjP2S1F7w=
Subject key identifier: 0A:CC:F6:FE:C2:9A:13:0D:63:77:0C:9C:A1:45:7B:DA:CA:21:B2:02
Authority key identifier: 1E:ED:26:3F:04:28:D8:4E:3F:BE:51:75:3D:16:D4:B3:D6:27:97:C4
Certificate issuer: /CN=A913B5C2/serialNumber=1EED263F0428D84E3FBE51753D16D4B3D62797C4
Certificate serial: 07E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B5C2/779D04A0364111EB8499D219C4F9AE02/Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.mft
Manifest number: 07D3
Signing time: Sat 04 Apr 2026 21:11:27 +0000
Manifest this update: Sat 04 Apr 2026 21:11:27 +0000
Manifest next update: Sat 11 Apr 2026 21:11:27 +0000
Files and hashes: 1: Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.crl (hash: HY0LiYYTfyOCooGUoEvu9N2Ogg5BHudnnH6IxWgfJJE=)
2: F704E032765811EE8C17A621C4F9AE02.roa (hash: bI3B3K0Bao6H6vIWYDPFQgKE5GK2hXxIjwYY6Qiwf6c=)
3: 5010A55A8C6411EE9E586967C4F9AE02.roa (hash: 7G+75bZAu53kyXyw+g5eEhk2ynB5kEClTZZuT/txCrQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B5C2/779D04A0364111EB8499D219C4F9AE02/Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.crl
rsync://rpki.apnic.net/member_repository/A913B5C2/779D04A0364111EB8499D219C4F9AE02/Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 21:11:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2023 (0x7e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B5C2, serialNumber=1EED263F0428D84E3FBE51753D16D4B3D62797C4
Validity
Not Before: Apr 4 21:11:27 2026 GMT
Not After : Apr 11 21:11:27 2026 GMT
Subject: CN=69d17e7f-232c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d2:a0:00:96:01:dd:46:01:4d:3f:68:b1:d2:
6c:9b:8e:f9:a1:6a:19:ce:1d:b8:04:a6:02:07:78:
9e:39:e3:2a:2e:f8:7d:12:11:a2:7c:bc:ea:61:80:
12:f9:58:9b:a7:f5:95:f7:54:e7:8f:fb:ec:df:1e:
a6:a6:7f:0e:bc:11:4e:a4:44:3b:c0:d4:6a:bd:96:
b6:37:c0:bb:62:d4:de:7e:c3:19:f3:d0:c7:b1:d2:
45:74:4e:72:30:e0:64:bb:38:c8:c9:c8:bb:38:b7:
5b:53:53:50:db:d8:54:4e:b0:0f:16:bc:84:b1:46:
62:4d:b7:66:62:b2:aa:ff:e3:e2:d3:a7:b3:ec:5d:
68:80:9a:2d:a7:23:b7:b3:83:12:0b:72:3b:5d:99:
54:50:8d:6a:51:b0:17:ca:ff:b8:7f:32:72:a8:3d:
14:84:ce:0d:ef:53:e3:48:76:75:1a:e1:53:35:86:
21:a3:3e:7e:70:fc:39:05:95:d7:e1:88:12:24:4d:
64:a2:77:0d:e4:4c:19:96:8c:78:af:b1:0c:74:7c:
76:6c:02:87:8e:13:40:bd:f8:b6:22:70:5f:6d:79:
cb:20:ca:d1:14:20:f5:cb:9b:8e:fc:9f:56:18:ee:
c8:31:69:75:1b:44:c6:fe:65:01:60:2c:39:54:92:
0d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:CC:F6:FE:C2:9A:13:0D:63:77:0C:9C:A1:45:7B:DA:CA:21:B2:02
X509v3 Authority Key Identifier:
keyid:1E:ED:26:3F:04:28:D8:4E:3F:BE:51:75:3D:16:D4:B3:D6:27:97:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B5C2/779D04A0364111EB8499D219C4F9AE02/Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B5C2/779D04A0364111EB8499D219C4F9AE02/Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:81:ca:9d:3c:b3:a6:59:d2:95:1e:23:ac:a7:c6:78:c1:a8:
06:51:47:a9:85:e3:88:7b:d0:98:05:51:07:df:0e:9e:dd:68:
65:bc:26:14:b1:1c:ea:79:25:e6:f2:22:e7:08:99:0e:56:ed:
87:76:57:6a:ed:a4:b8:ba:09:ee:05:80:f6:f1:df:90:2e:05:
7c:cb:75:2a:aa:07:aa:5e:52:5e:a2:aa:dc:e6:2e:fe:30:ba:
c4:3e:c7:b6:d8:68:ad:81:48:c2:b0:be:45:46:39:7e:4a:16:
f0:fe:e4:6b:1a:51:87:d0:1e:d8:3b:61:7e:47:19:17:78:be:
4b:74:fb:5f:e7:59:43:08:db:89:91:0b:ce:12:69:a5:c3:ec:
fb:7b:a0:01:03:df:24:ae:7f:c6:28:55:7b:86:07:4e:14:f9:
d6:33:c3:69:22:51:d8:5a:c3:f3:59:f8:a2:1b:57:45:74:89:
25:6f:d2:d0:78:ef:52:0c:32:0a:44:b9:d0:be:d9:cb:a2:94:
d2:e5:40:04:66:35:e2:67:c9:0f:1d:05:c6:50:3a:dd:8e:3d:
cd:6f:f1:80:17:f2:9b:c5:e0:8b:60:6c:e0:6d:63:bf:6a:79:
00:af:fc:05:28:2b:ff:3f:0e:a9:0e:8d:7e:c7:fb:aa:8b:35:
8a:95:73:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:29:38 2026 by rpki-client