
$ rpki-client -vvf rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.mft
File: usH6Gx5O5DACOyddInpdBDx_lqM.mft (raw, json)
Hash identifier: W5Avqy4R6+O+UGvL1pr9z/WQHxUcKafJgSriuzaiGbM=
Subject key identifier: AB:0D:4D:31:1C:FB:A2:17:F8:7E:68:39:27:D1:6B:68:98:D4:8E:81
Authority key identifier: BA:C1:FA:1B:1E:4E:E4:30:02:3B:27:5D:22:7A:5D:04:3C:7F:96:A3
Certificate issuer: /CN=A913FE55/serialNumber=BAC1FA1B1E4EE430023B275D227A5D043C7F96A3
Certificate serial: 8E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usH6Gx5O5DACOyddInpdBDx_lqM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.mft
Manifest number: 8B
Signing time: Tue 03 Mar 2026 07:11:08 +0000
Manifest this update: Tue 03 Mar 2026 07:11:08 +0000
Manifest next update: Tue 10 Mar 2026 07:11:08 +0000
Files and hashes: 1: usH6Gx5O5DACOyddInpdBDx_lqM.crl (hash: Nm3fhwXDII40yb0iejGI915ZsJKk8PsDlyU4kOLCfzU=)
2: 7D7ECB70480611F08B614210C4F9AE02.roa (hash: TDS7qbzkjns0lb3qBIPlOIfh7gAVrC0ccm+ewwA1wN8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.crl
rsync://rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usH6Gx5O5DACOyddInpdBDx_lqM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 07:11:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142 (0x8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913FE55, serialNumber=BAC1FA1B1E4EE430023B275D227A5D043C7F96A3
Validity
Not Before: Mar 3 07:11:08 2026 GMT
Not After : Mar 10 07:11:08 2026 GMT
Subject: CN=69a6898c-3516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:56:97:74:ab:ee:ca:71:a6:cb:ea:04:ac:f5:
d3:85:7a:5d:23:07:dd:d6:89:62:31:24:55:24:7b:
5d:1e:f4:6e:ed:6c:0d:8b:fe:23:96:e6:91:ad:e0:
06:a6:92:b4:6e:47:4b:70:a4:a9:da:c1:0b:ad:5e:
d4:03:44:94:b9:d0:e2:dd:89:eb:c9:c5:c9:fd:33:
47:c9:f4:b8:4c:b2:01:a4:91:c5:83:5e:8d:af:b3:
4d:ca:69:43:a0:2b:3a:82:71:c8:93:fd:dc:d4:4c:
83:1f:ce:6c:33:82:03:4a:12:eb:3b:0b:98:90:76:
45:82:15:2d:eb:62:fb:03:08:b5:65:25:50:22:41:
8c:be:31:2d:24:66:06:03:cb:36:ba:8c:7e:74:83:
01:10:a6:97:3c:e8:bd:1d:de:5a:64:e7:57:84:9f:
19:12:6e:10:8c:21:ea:44:d2:7c:9c:08:45:02:54:
dc:03:fe:8d:53:46:2e:94:d5:62:ef:af:15:59:7d:
90:6a:d7:5b:c2:fe:fe:44:d1:a8:4d:50:c9:b2:64:
79:a5:fd:64:50:cc:d3:d3:b6:7b:a8:0d:32:2d:fd:
c8:be:cc:1e:a9:2a:1a:5f:87:92:33:b3:e0:50:ad:
80:53:44:02:92:b6:ca:af:e8:69:15:c6:aa:19:e5:
81:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:0D:4D:31:1C:FB:A2:17:F8:7E:68:39:27:D1:6B:68:98:D4:8E:81
X509v3 Authority Key Identifier:
keyid:BA:C1:FA:1B:1E:4E:E4:30:02:3B:27:5D:22:7A:5D:04:3C:7F:96:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usH6Gx5O5DACOyddInpdBDx_lqM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:c6:f9:b2:28:08:3e:43:d2:8d:c1:5c:b8:86:26:e6:5c:50:
e6:63:ef:26:1f:cd:09:36:9a:82:82:ea:f1:5d:9c:9e:c8:03:
a5:2a:68:61:e9:4e:66:ed:dd:aa:cf:00:92:f3:7a:24:a5:88:
50:70:8c:2e:b4:0d:0e:2f:5d:3a:05:0c:f1:91:35:9e:ba:5e:
1e:9c:c9:4e:d9:5e:41:52:b4:a1:27:e1:d4:08:87:10:46:ee:
ed:c2:69:e5:3d:8f:15:12:ae:83:7f:c9:b8:9c:51:a5:4e:01:
a5:6a:9d:01:23:5c:df:f1:f5:fb:b4:71:75:7b:b0:9a:c7:e5:
19:bd:78:ac:3a:51:c0:d2:62:50:12:cd:c3:3a:75:0f:9c:c5:
0d:d4:76:76:ee:d0:d2:8f:90:45:9a:e9:78:7f:7f:df:bb:51:
1f:b0:31:01:25:77:44:66:68:34:29:a2:89:6e:39:4a:94:d0:
6c:36:f2:e2:c9:3b:34:d4:03:48:cf:c6:d8:ab:22:a6:3d:18:
a3:f9:ab:f7:6e:2c:65:73:c7:a7:85:43:cb:fe:91:15:14:a9:
4f:fb:5c:c7:46:6e:2d:15:e0:c6:8c:cb:ef:1d:00:a8:d9:9a:
fc:d8:c1:1e:e9:89:38:f0:ba:2c:20:f6:6d:91:3b:32:6c:9a:
a0:e8:72:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:22:44 2026 by rpki-client