
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.mft
File: hEd6PPADq7y8hU4_QMh8vPKhWN8.mft (raw, json)
Hash identifier: lcuxx6YQ4fpW+E8Yz/Zli+RAkO/eFtbLeufsQHIB05g=
Subject key identifier: 34:C6:BB:E6:5A:C4:BA:E6:D3:88:B2:4B:86:4C:A9:56:C4:3A:97:7F
Authority key identifier: 84:47:7A:3C:F0:03:AB:BC:BC:85:4E:3F:40:C8:7C:BC:F2:A1:58:DF
Certificate issuer: /CN=A916A505/serialNumber=84477A3CF003ABBCBC854E3F40C87CBCF2A158DF
Certificate serial: 060A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEd6PPADq7y8hU4_QMh8vPKhWN8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.mft
Manifest number: 05EC
Signing time: Tue 06 Oct 2026 23:09:13 +0000
Manifest this update: Tue 06 Oct 2026 23:09:12 +0000
Manifest next update: Tue 13 Oct 2026 23:09:12 +0000
Files and hashes: 1: hEd6PPADq7y8hU4_QMh8vPKhWN8.crl (hash: ukRrp7Zf8ry3VodQICmH+X8W8DspWwdbqHTYHQ4yxEw=)
2: 8DC3F57A093D11F18DEFD893023D8C67.roa (hash: Muc3aNVFMJ2alopXdvCsaBgSe9/1Mh3pVn8TP60vrOY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.crl
rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEd6PPADq7y8hU4_QMh8vPKhWN8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 23:09:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1546 (0x60a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A505, serialNumber=84477A3CF003ABBCBC854E3F40C87CBCF2A158DF
Validity
Not Before: Oct 6 23:09:12 2026 GMT
Not After : Oct 13 23:09:12 2026 GMT
Subject: CN=6ac57f99-ea1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:41:71:c6:c0:2f:dd:8a:9d:2f:d6:60:c0:86:
89:aa:1b:bc:0f:8e:d0:00:69:e0:e0:6c:19:71:5f:
a6:d7:8c:3c:b9:24:ce:ce:26:2a:e7:33:81:1d:18:
30:06:13:78:4e:39:ed:ac:fa:4a:6c:4b:5a:e6:95:
8e:b1:e4:9e:ab:4b:cc:3d:fd:cd:69:59:f4:1a:84:
1d:32:0c:e4:7a:41:48:e2:d7:fc:37:db:59:c8:5c:
b9:d9:38:a3:36:29:16:4f:94:4a:a1:76:57:bc:e8:
00:41:63:8b:b7:cb:28:a7:3a:9f:af:c8:52:3a:db:
cf:bc:66:8a:b7:0e:5d:24:b7:3f:5d:48:bd:94:27:
20:08:27:19:db:2a:e3:d2:ea:9f:c1:d2:37:53:9a:
71:44:cc:57:14:0c:67:5b:ae:b5:52:c5:62:df:6b:
f6:5f:66:99:92:f0:1d:5d:d6:a4:2e:d0:e8:32:8f:
02:92:fa:2f:f2:c7:6b:6f:64:a2:bd:ae:90:5d:06:
80:ee:c0:45:13:26:a0:88:6b:28:48:a3:95:f5:19:
b7:c7:98:e5:df:5c:bf:c4:f9:de:30:6c:2b:2a:85:
d8:3d:76:ba:6d:36:fd:49:48:36:4c:2e:35:07:4b:
e6:68:41:51:80:6e:f5:81:ec:9c:b9:ce:1e:83:85:
a2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C6:BB:E6:5A:C4:BA:E6:D3:88:B2:4B:86:4C:A9:56:C4:3A:97:7F
X509v3 Authority Key Identifier:
keyid:84:47:7A:3C:F0:03:AB:BC:BC:85:4E:3F:40:C8:7C:BC:F2:A1:58:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEd6PPADq7y8hU4_QMh8vPKhWN8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:bd:cb:43:29:0c:17:43:d4:9f:e0:9e:f2:c5:d6:65:fb:37:
23:c5:c0:7f:1d:48:5f:b5:ef:e8:75:f8:a6:ec:9f:04:22:a9:
c9:bd:bf:8d:cf:5e:8f:65:ab:b5:22:ad:3a:47:7c:af:f5:24:
18:c2:cd:32:55:fb:19:f4:e1:cf:61:30:aa:3b:d9:5f:e5:62:
d9:4e:06:a6:66:fe:77:43:83:26:12:f5:5d:e2:ce:82:90:6c:
b3:b3:b5:77:12:79:a9:6a:37:47:f2:75:81:47:d1:6a:3a:bc:
0b:de:46:89:ac:ff:08:0a:8e:76:33:49:ec:5b:ad:3a:b2:fc:
12:96:b7:ba:32:41:0a:ec:bd:61:a8:04:12:bd:b5:2e:66:e7:
d5:6d:fb:51:f8:72:98:cf:96:93:aa:b9:69:ea:91:d1:1d:bf:
ed:e9:c4:02:9e:68:fe:0f:72:fe:b1:b2:a5:ae:7c:06:ef:28:
ee:53:42:b7:38:bd:b0:ab:30:3b:a0:16:a7:fc:40:ac:9f:6c:
21:a0:c1:4c:f3:4f:31:32:59:b8:dd:83:f7:70:5b:42:2b:58:
84:b9:b5:88:95:57:14:ff:27:db:7f:46:62:72:86:9c:46:f7:
de:22:ba:3b:56:9c:d3:4d:9d:f2:35:3c:66:2b:32:4e:b0:da:
16:2c:de:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 23:20:29 2026 by rpki-client