
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft
File: H5ogKJzpMW5ls9tyToxzYGyPhks.mft (raw, json)
Hash identifier: 2A14TGrf2N6D41DzUMqDm1NioF7N0gmFGWkyTi91RJI=
Subject key identifier: 56:75:4D:AC:54:D7:5F:3A:71:45:1B:F5:F6:26:BE:5E:29:E6:A7:AB
Authority key identifier: 1F:9A:20:28:9C:E9:31:6E:65:B3:DB:72:4E:8C:73:60:6C:8F:86:4B
Certificate issuer: /CN=A914BF33/serialNumber=1F9A20289CE9316E65B3DB724E8C73606C8F864B
Certificate serial: 0CFB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft
Manifest number: 0CE1
Signing time: Thu 14 May 2026 18:25:24 +0000
Manifest this update: Thu 14 May 2026 18:25:24 +0000
Manifest next update: Thu 21 May 2026 18:25:24 +0000
Files and hashes: 1: H5ogKJzpMW5ls9tyToxzYGyPhks.crl (hash: fC0/EL0HfmloNg44H55IzynI6dFIC99+RZGaGn2AfiQ=)
2: 172E487A416911ECB6B11742C4F9AE02.roa (hash: lJfLPhd1kAAzDWL/Ne5AiMPNOkxSubYVAGKuzG/T5pk=)
3: 67827BDC0B8511EA97C80D52C4F9AE02.roa (hash: 7CjBAuah6/o6TO56EaGyhTraMGUdKeiH/EG6F7J9nYY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.crl
rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 21 May 2026 18:25:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3323 (0xcfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BF33, serialNumber=1F9A20289CE9316E65B3DB724E8C73606C8F864B
Validity
Not Before: May 14 18:25:24 2026 GMT
Not After : May 21 18:25:24 2026 GMT
Subject: CN=6a061394-bf61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:1b:c0:95:5c:d6:55:d1:6c:bd:28:b9:36:4b:
31:22:97:80:ae:99:f8:c5:c2:02:74:96:fb:2e:74:
cb:8e:10:43:96:b4:a2:46:ec:67:14:c0:92:87:ac:
cf:95:7b:2d:a7:a2:93:20:a1:8a:10:9f:ff:df:9c:
e9:6d:a9:a1:a0:64:58:86:40:b7:90:10:26:35:cf:
72:22:00:49:ac:11:ba:73:e8:e0:3a:88:d9:aa:20:
cd:25:67:3e:99:0e:45:84:50:1d:1d:9c:b3:50:d8:
95:0d:c5:c4:72:54:43:c9:4c:3b:85:fb:fc:76:29:
09:99:38:55:49:f0:03:69:e7:ef:46:46:7e:d1:a2:
0d:dd:54:36:eb:ca:29:1a:0c:29:4a:ee:cb:1e:07:
f8:8e:13:c2:98:4b:b7:1a:22:18:ca:de:7e:5d:17:
e7:a7:47:f4:1b:97:e4:36:f2:d7:5b:93:dd:63:73:
ee:d6:45:a9:56:de:a6:d0:15:5c:b4:1e:43:14:fb:
5f:17:f7:18:41:7d:2f:67:11:47:fb:29:14:30:43:
7c:a9:9f:10:75:ef:4c:06:e9:73:6f:3a:dc:87:7d:
0a:08:0c:af:7a:3d:5a:0e:ce:22:70:96:18:e2:d3:
4d:3b:82:54:2f:02:4f:6d:ff:8b:56:52:4a:66:54:
f2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:75:4D:AC:54:D7:5F:3A:71:45:1B:F5:F6:26:BE:5E:29:E6:A7:AB
X509v3 Authority Key Identifier:
keyid:1F:9A:20:28:9C:E9:31:6E:65:B3:DB:72:4E:8C:73:60:6C:8F:86:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:27:c5:bb:45:90:24:d9:c5:b6:75:d5:22:c9:2e:19:2e:a7:
89:4f:06:51:03:88:50:ab:15:8c:f1:ff:bc:6b:54:59:c0:d7:
4f:b3:b4:5e:5e:27:6b:be:7b:b6:86:07:c7:ce:99:19:89:c2:
47:c2:d2:46:60:4a:04:b0:3a:3e:a5:89:e8:af:c0:54:13:a8:
e6:f4:02:68:a2:d1:0c:69:6d:51:38:80:bf:77:29:11:75:52:
93:69:f0:78:04:0c:3c:a9:a8:42:96:f0:ae:f6:1f:35:17:4d:
1c:0e:b1:18:d4:fe:24:7a:b6:45:79:c4:9a:76:b8:51:da:df:
b4:8c:ea:a2:85:d1:e3:fc:52:83:69:1e:35:d9:5b:34:7c:e2:
8c:54:b0:70:d5:e5:05:7a:2e:58:68:14:6a:a5:c0:48:14:e2:
1f:fc:17:ab:9b:bb:f2:bd:3c:da:cd:21:b1:ae:2a:b3:79:63:
09:37:67:c8:45:ef:b0:24:37:90:9c:9a:b8:21:94:e2:81:22:
12:f8:0f:43:12:57:b1:b5:f7:e2:9b:5d:a1:b0:d9:1a:1b:29:
b7:96:ab:d8:ff:e4:d2:f1:9b:9b:1b:61:f2:3a:d8:67:29:b0:
cf:60:43:6f:dc:d0:a8:d1:20:7f:fe:0a:e7:ce:81:51:9f:42:
fc:e8:e8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 01:27:34 2026 by rpki-client