
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/hTkiUckhyp9RnbkRxagKd9_jVMQ.mft
File: hTkiUckhyp9RnbkRxagKd9_jVMQ.mft (raw, json)
Hash identifier: HPRht3aT55CwGQMPrx7eRKbRp/ORmYjjD/+JM7TOdCM=
Subject key identifier: 98:57:FD:51:C8:82:49:D3:CC:28:FC:A3:1A:AC:30:23:CC:06:0D:6A
Authority key identifier: 85:39:22:51:C9:21:CA:9F:51:9D:B9:11:C5:A8:0A:77:DF:E3:54:C4
Certificate issuer: /CN=A915B358/serialNumber=85392251C921CA9F519DB911C5A80A77DFE354C4
Certificate serial: 3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hTkiUckhyp9RnbkRxagKd9_jVMQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/hTkiUckhyp9RnbkRxagKd9_jVMQ.mft
Manifest number: 39
Signing time: Tue 21 Apr 2026 08:22:27 +0000
Manifest this update: Tue 21 Apr 2026 08:22:27 +0000
Manifest next update: Tue 28 Apr 2026 08:22:27 +0000
Files and hashes: 1: hTkiUckhyp9RnbkRxagKd9_jVMQ.crl (hash: TUU0I7qGU8+karwHWBiPYdBJBlifx/vBXY5TEUSPgyo=)
2: B1078FAAF1C411F0A342834F396F56BC.roa (hash: +jzkYrDbV9l56QxlBYuE37I0us4Fnv7wiflNV5QShGE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/hTkiUckhyp9RnbkRxagKd9_jVMQ.crl
rsync://rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/hTkiUckhyp9RnbkRxagKd9_jVMQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hTkiUckhyp9RnbkRxagKd9_jVMQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 08:22:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59 (0x3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B358, serialNumber=85392251C921CA9F519DB911C5A80A77DFE354C4
Validity
Not Before: Apr 21 08:22:27 2026 GMT
Not After : Apr 28 08:22:27 2026 GMT
Subject: CN=69e733c3-7185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e8:9e:63:96:45:35:a8:94:c3:a7:91:c4:d1:
2b:7c:07:85:6c:53:70:2c:a8:5f:83:59:8c:35:91:
df:2a:1c:9b:ce:a3:21:be:e1:7f:60:da:18:31:59:
4d:d8:b9:59:15:ac:ee:21:52:17:14:4d:b2:bc:df:
7d:97:94:a3:9d:04:bd:cb:39:05:9d:98:4d:b3:2d:
75:bb:09:5d:a8:b4:83:46:be:39:3d:fb:dc:86:02:
b5:d5:93:70:56:d6:8e:e6:18:08:f2:99:2b:dc:c5:
d9:82:c4:1f:fc:ee:b5:73:30:c6:22:97:8f:65:95:
c5:b9:80:b8:0f:82:31:71:4e:80:52:c1:46:d0:ba:
5e:0c:ee:7b:f1:78:ed:da:7f:f3:ee:53:bd:b5:5b:
8c:88:ff:97:77:80:7c:7d:b1:06:61:8f:e9:f0:9d:
fa:b3:48:8e:3c:23:8e:15:38:71:f1:9f:44:83:85:
0a:40:33:ce:b4:cf:9f:6c:1d:b3:98:9a:63:3d:cb:
a5:f3:5c:52:1f:55:21:e6:74:2f:37:79:c5:2f:54:
01:35:50:b8:61:26:1d:fc:db:49:56:03:e1:49:46:
57:08:bc:51:c4:22:fe:31:f1:10:6f:9f:7a:2c:e7:
81:09:5f:53:1b:6d:44:1b:25:e3:ad:dc:ec:01:b9:
4d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:57:FD:51:C8:82:49:D3:CC:28:FC:A3:1A:AC:30:23:CC:06:0D:6A
X509v3 Authority Key Identifier:
keyid:85:39:22:51:C9:21:CA:9F:51:9D:B9:11:C5:A8:0A:77:DF:E3:54:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/hTkiUckhyp9RnbkRxagKd9_jVMQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hTkiUckhyp9RnbkRxagKd9_jVMQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/hTkiUckhyp9RnbkRxagKd9_jVMQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:0f:d4:52:44:61:c5:62:7b:5b:ff:5c:5a:c8:35:3b:db:e5:
f7:a1:23:57:34:8c:06:c4:ed:39:ea:3c:a8:73:26:b3:39:7d:
13:92:91:d8:03:76:59:63:ef:96:66:14:83:38:54:1c:d4:32:
38:11:6b:53:1f:0f:65:e7:b8:b3:34:72:a0:cb:0d:50:29:fa:
30:13:8e:7f:7c:c0:6f:ed:da:20:7d:57:3d:11:ee:22:f4:cc:
77:36:d2:9c:ff:ac:9b:03:3c:b2:f6:fa:21:94:bb:6a:dd:91:
9c:58:ab:5e:b5:cb:87:93:9b:2e:f2:73:1f:a4:b3:4a:c3:21:
c1:2f:dc:bb:e2:a8:7b:64:70:26:04:6e:c2:2f:38:96:57:b5:
85:3f:01:b8:8b:0e:b4:c7:e2:28:7b:49:c3:8f:8a:f7:6c:f6:
ba:be:e6:c2:f4:9c:3c:38:c2:d4:c9:ed:45:35:04:e8:fa:62:
c0:b8:f7:d6:19:05:18:b7:9d:b6:0d:9d:20:5d:a9:8f:e9:cc:
d6:58:f8:ed:d2:b2:5a:c2:c6:1f:b6:d7:6c:e6:a8:1d:f3:59:
a2:01:99:eb:51:c8:7e:69:88:6c:2a:bf:6c:80:b9:31:a9:ba:
82:a3:3f:52:04:e7:21:b6:67:ff:a4:b6:4f:b1:d2:f8:e8:12:
2c:44:bb:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 04:08:14 2026 by rpki-client