
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft
File: h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft (raw, json)
Hash identifier: 9x4knfbtTs7did2LlndBVOOcKFbbqpo5pIvhxzi+QJU=
Subject key identifier: F6:61:DC:C9:D2:E8:3A:CE:7A:04:F0:44:89:D2:F5:93:B9:29:DA:C0
Authority key identifier: 87:F3:1B:20:1B:DD:18:75:81:54:0C:5B:8B:86:44:38:C2:99:90:B9
Certificate issuer: /CN=A916B02F/serialNumber=87F31B201BDD187581540C5B8B864438C29990B9
Certificate serial: 01CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft
Manifest number: 01C5
Signing time: Sun 05 Apr 2026 03:16:38 +0000
Manifest this update: Sun 05 Apr 2026 03:16:37 +0000
Manifest next update: Sun 12 Apr 2026 03:16:37 +0000
Files and hashes: 1: h_MbIBvdGHWBVAxbi4ZEOMKZkLk.crl (hash: xzVvdGn8vznKg2KU4Z6Aa70h/nR7fVpiyVnkQWps9c0=)
2: 27178D9E7FBC11EEAF80B825C4F9AE02.roa (hash: sVfM9UcBSAxUn8++eCgurkk9Zg1ANJCcYtd5vbh1oJM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.crl
rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 03:16:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 459 (0x1cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B02F, serialNumber=87F31B201BDD187581540C5B8B864438C29990B9
Validity
Not Before: Apr 5 03:16:37 2026 GMT
Not After : Apr 12 03:16:37 2026 GMT
Subject: CN=69d1d416-fa9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:28:8d:9c:8c:98:1c:70:9c:a2:da:2b:4f:97:
b6:67:48:fb:f8:8e:cc:d4:f5:c6:65:2a:07:07:a4:
0d:ca:b3:b8:aa:58:ae:c1:88:5e:d7:ed:ab:1a:5b:
db:bf:66:02:f4:1d:c2:98:c1:36:55:bd:5e:c5:d1:
9d:71:c4:93:b5:95:1f:19:30:6a:6f:96:17:5d:0c:
b1:23:5e:39:7e:c4:6a:10:45:cb:d3:16:2c:72:fa:
97:05:59:09:f9:54:83:0a:8c:90:2c:68:6d:57:60:
a1:1b:29:9a:fa:01:4e:81:0d:68:07:93:9a:cd:1e:
d7:34:f4:e6:16:52:89:dd:24:29:49:95:ec:46:d4:
cc:54:0b:4c:af:10:11:86:3f:d9:b8:9a:29:01:b6:
a8:26:b8:33:06:9c:7f:09:ab:cf:ff:ef:ce:77:e8:
78:0d:55:73:f7:1c:65:70:14:8d:03:a8:5f:39:5d:
b1:67:b1:6b:55:d3:66:4a:21:6e:62:9d:a3:56:ed:
06:ef:1b:34:16:4e:b0:a5:8c:87:17:b4:83:ec:f2:
4c:29:7a:49:d2:4d:68:c0:fe:79:08:c4:30:4a:7b:
5e:19:2e:e7:79:61:0c:61:59:3c:e3:0a:1d:44:08:
7b:79:d2:33:ca:c9:60:59:f6:2a:16:eb:15:87:6c:
15:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:61:DC:C9:D2:E8:3A:CE:7A:04:F0:44:89:D2:F5:93:B9:29:DA:C0
X509v3 Authority Key Identifier:
keyid:87:F3:1B:20:1B:DD:18:75:81:54:0C:5B:8B:86:44:38:C2:99:90:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:22:b5:78:54:ba:bc:ea:03:c8:e0:63:0e:44:b9:0e:17:ff:
3a:5a:e8:7a:75:ab:eb:40:e3:e4:ba:33:b0:32:ba:43:52:d0:
1d:2d:b3:5a:1f:ab:20:c2:a5:e5:90:b6:d5:76:b9:cc:9a:1e:
e1:e6:23:2f:ba:75:86:b7:1d:a3:d0:c1:e5:be:12:22:d1:60:
18:dc:04:57:f0:69:c0:78:73:61:5a:18:d5:b0:6a:3e:1a:a1:
95:48:c7:af:2d:02:67:41:94:22:7b:df:bf:28:95:f1:71:95:
4f:71:40:17:82:c4:47:e9:3d:ae:1f:dc:9e:14:bf:e3:13:ac:
34:c1:b9:8e:d5:a5:c5:3c:88:e6:19:d3:24:30:30:19:5a:e4:
76:82:10:a0:e6:d4:4f:c5:fb:ab:5c:3f:2a:af:eb:e6:04:8e:
7c:21:b8:81:9f:f0:fd:75:ef:41:75:37:cf:67:10:12:18:c3:
79:30:4f:91:b5:77:4e:16:cb:b1:3d:7d:ca:7c:f3:f0:f1:6c:
8f:70:f6:21:64:6f:6f:7d:18:a7:92:8b:f5:c2:91:67:6f:c5:
2e:69:22:00:5a:ac:13:09:f4:1a:c0:58:95:02:8b:a4:b8:8f:
27:59:fe:21:8b:f8:78:0b:aa:8e:3d:2a:03:68:d1:23:03:1e:
e1:01:ed:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:30:35 2026 by rpki-client