
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft
File: rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft (raw, json)
Hash identifier: dS1DKrbn3g0XgMWF+BaXEtlRrL/kJc05zWUjAOdvrcU=
Subject key identifier: 1B:7B:B6:E7:8E:3D:4B:E9:D3:8F:55:41:32:FE:6F:8F:8D:40:23:3B
Authority key identifier: AE:59:C7:1F:D6:3B:D2:6B:46:30:26:E0:74:90:46:97:04:A8:FB:9B
Certificate issuer: /CN=A914530B/serialNumber=AE59C71FD63BD26B463026E07490469704A8FB9B
Certificate serial: 0155
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rlnHH9Y70mtGMCbgdJBGlwSo-5s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft
Manifest number: 0155
Signing time: Sat 03 Oct 2026 05:53:57 +0000
Manifest this update: Sat 03 Oct 2026 05:53:56 +0000
Manifest next update: Sat 10 Oct 2026 05:53:56 +0000
Files and hashes: 1: rlnHH9Y70mtGMCbgdJBGlwSo-5s.crl (hash: XoRk0Vdy7OeJSsrTn9heL1XmcbPxCI5zbWQRlDBftZ0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.crl
rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rlnHH9Y70mtGMCbgdJBGlwSo-5s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 05:53:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 341 (0x155)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914530B, serialNumber=AE59C71FD63BD26B463026E07490469704A8FB9B
Validity
Not Before: Oct 3 05:53:56 2026 GMT
Not After : Oct 10 05:53:56 2026 GMT
Subject: CN=6ac09875-fd0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:20:ae:28:2e:60:53:5d:b2:ea:2b:e9:d7:c1:
2a:3c:b7:fe:53:1b:a3:7e:21:e9:97:26:a4:b0:96:
c1:e3:93:b6:ee:62:dd:f5:c0:da:9d:b0:e5:a9:cf:
e6:4a:6d:06:d1:20:d3:1f:89:1d:0a:f7:7d:7c:d8:
ad:cb:45:dc:b8:d7:b5:2f:47:d8:cc:48:96:a9:2f:
16:70:fe:48:2b:0c:ca:0a:0e:a5:c5:f1:e8:a1:aa:
8e:55:14:c5:bb:cc:43:0c:4c:18:ca:d7:c7:b2:b6:
d6:7f:ae:bd:b8:ac:54:92:74:d8:2a:e7:2b:28:d1:
c1:e2:53:98:f7:08:bc:2d:98:22:cf:73:2e:5a:d9:
02:9c:21:57:a8:f8:4b:74:9d:4c:e0:c6:ef:07:70:
4c:0e:34:74:bc:02:8d:06:46:40:b9:b7:49:84:d0:
8a:07:72:d8:6b:aa:d8:eb:f0:c1:02:f2:a6:b6:04:
64:70:54:1c:ad:24:15:7b:e3:b3:1f:d8:a1:df:cf:
d5:d2:28:c3:71:48:ad:65:f2:60:4c:fa:e9:a5:f5:
f2:cf:af:19:3e:2a:e0:1b:1c:e9:49:a4:50:60:8c:
8d:fe:49:db:98:b7:97:27:3c:96:29:ec:d1:7a:09:
d9:30:47:d0:02:3b:4c:f4:5f:90:22:a9:8c:87:e6:
65:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:7B:B6:E7:8E:3D:4B:E9:D3:8F:55:41:32:FE:6F:8F:8D:40:23:3B
X509v3 Authority Key Identifier:
keyid:AE:59:C7:1F:D6:3B:D2:6B:46:30:26:E0:74:90:46:97:04:A8:FB:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rlnHH9Y70mtGMCbgdJBGlwSo-5s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:2d:06:ac:60:c6:d6:56:e4:89:03:9f:db:3a:7c:b8:b3:bc:
d6:54:69:a6:18:e0:a8:12:0e:2d:d4:39:66:b5:e9:f6:12:ab:
10:09:75:99:e7:19:4c:7c:53:16:b0:ce:7a:ff:e1:90:93:93:
36:fd:8d:1a:ee:a8:59:15:63:ea:a0:17:c2:48:89:47:93:b7:
98:61:36:9d:f9:94:e5:96:25:09:bb:ba:33:d1:ae:55:5b:df:
cd:9f:af:c5:2d:22:0b:dc:3f:48:c8:46:46:c2:7d:09:8d:95:
e4:ca:c4:81:87:5d:33:1f:83:a9:65:62:5d:97:62:96:47:f6:
a8:f2:f9:27:2e:07:8d:ec:31:22:db:e0:31:26:23:88:72:b1:
2d:6c:20:17:5c:c5:e7:9d:8b:f7:ef:b7:72:e5:d2:ca:eb:03:
31:75:07:29:a5:98:1c:21:31:0d:5a:ad:0c:26:f8:02:74:5f:
d9:8d:dd:4a:4e:20:e4:61:a5:e6:58:79:40:b2:e4:47:41:b3:
98:36:40:51:e1:68:dd:b8:96:03:95:43:cf:55:b1:7f:b7:80:
bc:08:98:bb:09:6a:59:a5:21:d1:f7:da:bb:58:e9:3f:5b:c9:
6c:31:2d:22:e5:3c:4b:3d:80:f5:87:a1:b2:47:78:3a:52:a4:
e5:ee:fc:58
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDUzMEIxMTAvBgNVBAUTKEFFNTlDNzFGRDYzQkQyNkI0NjMwMjZFMDc0OTA0Njk3
MDRBOEZCOUIwHhcNMjYxMDAzMDU1MzU2WhcNMjYxMDEwMDU1MzU2WjAYMRYwFAYD
VQQDEw02YWMwOTg3NS1mZDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAryCuKC5gU12y6ivp18EqPLf+UxujfiHplyaksJbB45O27mLd9cDanbDlqc/m
Sm0G0SDTH4kdCvd9fNity0XcuNe1L0fYzEiWqS8WcP5IKwzKCg6lxfHooaqOVRTF
u8xDDEwYytfHsrbWf669uKxUknTYKucrKNHB4lOY9wi8LZgiz3MuWtkCnCFXqPhL
dJ1M4MbvB3BMDjR0vAKNBkZAubdJhNCKB3LYa6rY6/DBAvKmtgRkcFQcrSQVe+Oz
H9ih38/V0ijDcUitZfJgTPrppfXyz68ZPirgGxzpSaRQYIyN/knbmLeXJzyWKezR
egnZMEfQAjtM9F+QIqmMh+ZlEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBt7tueO
PUvp049VQTL+b4+NQCM7MB8GA1UdIwQYMBaAFK5Zxx/WO9JrRjAm4HSQRpcEqPub
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTMwQi9BNkE1NDRFMEI3
OUExMUVGQTBENjk3NURDNEY5QUUwMi9ybG5ISDlZNzBtdEdNQ2JnZEpCR2x3U28t
NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JsbkhIOVk3MG10R01DYmdkSkJHbHdTby01cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NTMwQi9BNkE1NDRFMEI3OUExMUVGQTBENjk3NURDNEY5QUUwMi9ybG5ISDlZNzBt
dEdNQ2JnZEpCR2x3U28tNXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVi0GrGDG1lbkiQOf2zp8uLO81lRpphjgqBIOLdQ5ZrXp9hKrEAl1mecZTHxT
FrDOev/hkJOTNv2NGu6oWRVj6qAXwkiJR5O3mGE2nfmU5ZYlCbu6M9GuVVvfzZ+v
xS0iC9w/SMhGRsJ9CY2V5MrEgYddMx+DqWViXZdilkf2qPL5Jy4HjewxItvgMSYj
iHKxLWwgF1zF552L9++3cuXSyusDMXUHKaWYHCExDVqtDCb4AnRf2Y3dSk4g5GGl
5lh5QLLkR0GzmDZAUeFo3biWA5VDz1Wxf7eAvAiYuwlqWaUh0ffau1jpP1vJbDEt
IuU8Sz2A9Yehskd4OlKk5e78WA==
-----END CERTIFICATE-----
Generated at Sun Oct 4 17:02:26 2026 by rpki-client