
$ rpki-client -vvf rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.mft
File: hPqw1oT6rxaVCqyjjm1lOszyWLw.mft (raw, json)
Hash identifier: N6rwNdPCRxsfamGZEjN8ERa0o35zHXOzFmE+4FYSF1k=
Subject key identifier: 40:58:94:AE:24:7A:80:85:01:1A:6B:FE:1C:38:02:60:AF:56:F3:95
Authority key identifier: 84:FA:B0:D6:84:FA:AF:16:95:0A:AC:A3:8E:6D:65:3A:CC:F2:58:BC
Certificate issuer: /CN=A914247C/serialNumber=84FAB0D684FAAF16950AACA38E6D653ACCF258BC
Certificate serial: 0BC6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hPqw1oT6rxaVCqyjjm1lOszyWLw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.mft
Manifest number: 0BBD
Signing time: Wed 20 May 2026 19:01:39 +0000
Manifest this update: Wed 20 May 2026 19:01:39 +0000
Manifest next update: Wed 27 May 2026 19:01:39 +0000
Files and hashes: 1: hPqw1oT6rxaVCqyjjm1lOszyWLw.crl (hash: TaDdUhWt5lUrfe5v2R2mJ8UEbWqJcUS0gOLKzGS6+uc=)
2: E1AB1F92430F11EAA60DB885C4F9AE02.roa (hash: HE9RcAckVDFGxlQ4u3qH1H4zDtKxUzAsKn4dFWVW/9E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.crl
rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hPqw1oT6rxaVCqyjjm1lOszyWLw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 19:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3014 (0xbc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914247C, serialNumber=84FAB0D684FAAF16950AACA38E6D653ACCF258BC
Validity
Not Before: May 20 19:01:39 2026 GMT
Not After : May 27 19:01:39 2026 GMT
Subject: CN=6a0e0513-606b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d7:50:f6:90:53:55:f3:2b:43:24:a9:3c:68:
2f:cc:d9:f2:db:63:10:c7:66:3a:40:83:fc:a4:b8:
24:b1:60:d5:0c:db:a1:56:ff:2a:37:5b:72:b6:36:
ad:0d:ec:6b:e6:81:45:c1:54:59:6d:a3:81:75:7e:
00:4f:08:02:84:89:93:e7:74:0f:0a:bf:1f:ce:5f:
05:5f:55:20:91:03:cb:af:f2:89:a7:0b:de:ab:43:
87:2b:f9:01:a0:59:73:ff:9d:dd:86:f9:73:6a:cd:
48:57:09:3f:35:5b:3e:05:ea:2c:6b:51:c6:ca:9f:
a9:ad:69:ad:69:f8:29:e3:46:45:a4:44:db:8f:6e:
0b:59:db:32:cf:a1:69:6a:db:dc:45:05:84:52:38:
93:e6:9c:6a:a4:1e:31:8e:4e:2b:f8:0d:52:56:19:
50:d6:68:54:04:30:19:45:5e:87:66:bd:c5:ec:ff:
25:ca:77:09:97:1b:6d:5f:a9:75:e6:8f:a9:51:f7:
40:e3:b4:a8:be:0e:ec:4e:b1:28:1d:9d:1f:ba:ee:
dc:62:72:2f:bd:95:30:08:9e:cd:5c:be:94:75:a9:
c6:ee:a0:79:a8:a6:75:c4:47:04:2f:d6:16:2e:77:
0d:4b:1a:e6:ce:e3:74:ea:bc:78:fd:43:d2:27:60:
e4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:58:94:AE:24:7A:80:85:01:1A:6B:FE:1C:38:02:60:AF:56:F3:95
X509v3 Authority Key Identifier:
keyid:84:FA:B0:D6:84:FA:AF:16:95:0A:AC:A3:8E:6D:65:3A:CC:F2:58:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hPqw1oT6rxaVCqyjjm1lOszyWLw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:85:07:75:c3:ea:9e:5d:8a:e6:b3:37:55:22:f8:6f:74:b8:
b6:f9:ad:42:6a:d7:b8:10:1d:33:5f:bd:66:3d:6c:a5:4d:2e:
19:b3:ed:04:24:7d:d3:45:45:c2:ca:34:31:11:1a:39:30:fc:
52:9f:21:be:0d:3e:e5:1d:86:9f:40:0e:18:ff:26:3c:a3:74:
ed:c8:1e:a5:2f:2e:fd:ed:04:cf:e3:41:24:cc:6a:15:74:37:
37:c2:c0:f6:7f:41:43:ab:6a:71:04:02:7d:21:58:c4:f7:96:
ae:f3:cb:42:da:06:e1:26:88:99:fc:b4:8c:7d:3c:30:aa:42:
a9:16:17:af:0f:39:22:e9:fa:71:c5:c9:74:ec:1d:ba:be:d1:
af:2c:9f:a2:be:6f:1a:72:e9:99:ef:b5:85:28:7c:20:1f:0b:
ec:f7:e4:32:9c:e3:48:2a:ec:d7:f4:6c:e7:cc:4a:1b:d9:5b:
44:e5:ef:e9:67:79:c4:da:30:e8:7b:44:b2:3e:4b:87:a3:6f:
df:db:cb:50:00:b1:1e:c4:82:92:22:2f:76:74:59:33:6f:3f:
c3:35:0d:84:96:83:a2:6e:8d:e5:a1:03:6e:55:2c:fd:c6:f8:
c8:13:95:f0:ab:7c:29:d3:5b:16:dc:09:38:d7:eb:e2:2e:d0:
88:9b:2b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:15:54 2026 by rpki-client