
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft
File: h57Jr836J6POe11DeHoviQOFWG4.mft (raw, json)
Hash identifier: UFtFdCjqjakL60qFYMK2pAqCQr8vy+D8y7FDAv31VDo=
Subject key identifier: D3:86:9A:B6:FA:95:0F:7B:DC:D7:92:A7:C1:8F:E3:51:E7:FB:F9:09
Authority key identifier: 87:9E:C9:AF:CD:FA:27:A3:CE:7B:5D:43:78:7A:2F:89:03:85:58:6E
Certificate issuer: /CN=A914E556/serialNumber=879EC9AFCDFA27A3CE7B5D43787A2F890385586E
Certificate serial: 0855
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h57Jr836J6POe11DeHoviQOFWG4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft
Manifest number: 084B
Signing time: Wed 20 May 2026 20:55:13 +0000
Manifest this update: Wed 20 May 2026 20:55:13 +0000
Manifest next update: Wed 27 May 2026 20:55:13 +0000
Files and hashes: 1: h57Jr836J6POe11DeHoviQOFWG4.crl (hash: 82+iDzQwxK0iGIWR71lex0y6vwMcel+NCvea3bnEe2s=)
2: 375F7DAA0C3911EB828BDC25C4F9AE02.roa (hash: sOGIE1Y4pAVns9lfWvpaPD3KRpb6ovE8rozjjlTX5nw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.crl
rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h57Jr836J6POe11DeHoviQOFWG4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 20:55:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2133 (0x855)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E556, serialNumber=879EC9AFCDFA27A3CE7B5D43787A2F890385586E
Validity
Not Before: May 20 20:55:13 2026 GMT
Not After : May 27 20:55:13 2026 GMT
Subject: CN=6a0e1fb1-2ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ed:ed:11:05:b2:46:8f:cd:02:d1:17:5a:53:
06:43:21:c2:ba:46:2d:11:e4:94:7a:94:13:f4:c4:
3f:91:56:5b:ce:e6:8e:06:23:f0:93:7b:a4:3f:80:
40:db:be:4f:05:02:08:77:78:3c:e7:b1:2f:33:54:
bf:7f:a1:aa:3a:ff:f2:60:cc:eb:03:94:fb:d1:82:
43:5d:81:67:17:f1:f3:30:12:64:3c:f5:bd:58:f5:
1b:fa:c8:69:b7:c1:65:29:e8:96:d4:dd:90:2f:7b:
92:13:62:b5:90:44:a7:be:0b:93:f1:30:30:62:59:
95:3f:4c:39:81:94:a0:dc:ac:ac:a3:f0:93:a9:47:
f9:59:43:03:dd:f8:6b:9c:5f:0f:90:1b:ed:c7:c3:
be:d0:77:4b:09:43:5c:a4:4f:15:6f:e0:56:c5:40:
b9:2e:a4:2b:50:11:da:32:10:b9:35:c2:45:d0:97:
92:69:7e:09:86:ad:81:76:00:69:41:14:c8:78:7d:
a5:42:bc:9d:a5:0d:03:57:db:44:06:a1:72:a9:96:
25:a6:c9:50:69:ea:ea:a2:04:d2:e8:73:a5:5b:a0:
d9:cb:49:df:2a:bc:c9:bc:36:1e:8d:fe:bb:e7:69:
32:b6:c7:ee:cf:fb:89:6c:9d:f2:0d:ff:e9:e9:6a:
c6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:86:9A:B6:FA:95:0F:7B:DC:D7:92:A7:C1:8F:E3:51:E7:FB:F9:09
X509v3 Authority Key Identifier:
keyid:87:9E:C9:AF:CD:FA:27:A3:CE:7B:5D:43:78:7A:2F:89:03:85:58:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h57Jr836J6POe11DeHoviQOFWG4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:38:ae:5a:ac:36:10:16:08:06:2a:50:73:dd:48:18:1b:4b:
8e:0f:77:e2:1a:1e:74:a3:37:22:4c:42:0f:4e:c7:78:b0:e4:
c2:28:3c:c3:bd:e1:68:3d:c3:36:e7:e8:00:e9:3b:68:44:60:
20:70:b5:15:3c:b3:f4:7d:bd:5f:9d:90:a1:86:eb:d6:e5:f7:
be:fb:89:1c:45:b4:01:1c:50:73:a0:b9:78:e0:24:45:35:c0:
03:be:77:69:e3:f4:c5:fc:a1:b3:73:f1:51:a0:64:b9:44:a9:
7a:f9:6e:e9:b7:51:b7:a2:5c:fb:2c:b8:89:e9:92:2d:10:83:
4f:a7:81:be:ba:b1:d5:0b:41:de:b2:b3:1a:91:e3:a5:16:ff:
3a:da:83:30:5b:62:08:fd:89:9b:35:e9:16:17:5d:40:aa:ed:
87:9f:e6:3d:33:5d:7e:52:52:b6:68:3d:88:29:ca:3b:46:fa:
57:68:86:f2:b1:4c:e1:2f:a1:f9:69:8b:c4:9b:2c:76:fc:7a:
67:1f:74:3f:4b:b8:41:64:bb:a2:73:05:e4:2f:58:4d:4b:17:
fd:36:70:17:f3:2e:35:f8:ba:2b:f4:53:69:2d:80:93:84:14:
17:02:8c:b5:21:83:6c:eb:56:02:1e:6c:4c:00:65:d4:67:29:
75:5b:b9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:19:30 2026 by rpki-client