
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B7FC/C73BA16403A711F0A7FF9C87C4F9AE02/hXUH8dizkVyVENUEcA7OiQsGaF8.mft
File: hXUH8dizkVyVENUEcA7OiQsGaF8.mft (raw, json)
Hash identifier: 9nalGHA+cdgRMXgFn4+mrkS14TiwglNz6HAVzAuptXc=
Subject key identifier: 5A:D5:BB:0C:78:99:03:BF:A5:92:DF:9B:A0:DE:EB:54:A2:3D:CB:38
Authority key identifier: 85:75:07:F1:D8:B3:91:5C:95:10:D5:04:70:0E:CE:89:0B:06:68:5F
Certificate issuer: /CN=A916B7FC/serialNumber=857507F1D8B3915C9510D504700ECE890B06685F
Certificate serial: ED
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hXUH8dizkVyVENUEcA7OiQsGaF8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B7FC/C73BA16403A711F0A7FF9C87C4F9AE02/hXUH8dizkVyVENUEcA7OiQsGaF8.mft
Manifest number: E8
Signing time: Mon 01 Jun 2026 07:17:32 +0000
Manifest this update: Mon 01 Jun 2026 07:17:32 +0000
Manifest next update: Mon 08 Jun 2026 07:17:32 +0000
Files and hashes: 1: hXUH8dizkVyVENUEcA7OiQsGaF8.crl (hash: /gv6k2wUUFkZLaxIkkHhCmnsyR6Yoi2CVnXFEoSvaK0=)
2: B49957AA134B11F0AE18CB2BC4F9AE02.roa (hash: JXFvADq4YTaqaen/tnBh56vOg+t9TdkXrX7ZuGzAnPI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B7FC/C73BA16403A711F0A7FF9C87C4F9AE02/hXUH8dizkVyVENUEcA7OiQsGaF8.crl
rsync://rpki.apnic.net/member_repository/A916B7FC/C73BA16403A711F0A7FF9C87C4F9AE02/hXUH8dizkVyVENUEcA7OiQsGaF8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hXUH8dizkVyVENUEcA7OiQsGaF8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 07:17:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 237 (0xed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B7FC, serialNumber=857507F1D8B3915C9510D504700ECE890B06685F
Validity
Not Before: Jun 1 07:17:32 2026 GMT
Not After : Jun 8 07:17:32 2026 GMT
Subject: CN=6a1d320c-f9c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:38:d6:92:c3:44:24:37:4f:4c:c3:06:94:cb:
5b:cf:c3:fc:ff:61:c0:10:27:de:3c:f3:bf:4b:88:
74:80:65:6b:7d:a1:f7:61:90:56:bf:86:9f:a6:4a:
7a:4e:c4:e3:30:74:9c:49:4a:09:4a:05:63:78:9f:
da:94:45:e2:18:5d:58:5d:21:02:ee:4d:c2:70:bf:
9b:fa:7d:39:55:3c:4f:79:8e:a6:54:09:8c:a9:86:
c4:c1:e4:65:60:4a:87:4d:c1:01:aa:c9:ca:e4:06:
95:1a:83:c0:23:e1:5e:40:be:4a:e7:6d:47:4d:3c:
26:0d:3f:3d:54:47:8d:9a:6e:62:6f:76:7a:a2:7a:
60:40:be:ed:d3:c7:1b:e9:d6:57:16:15:c4:0e:22:
ca:d9:36:ce:bd:2e:f5:db:c0:d3:2d:8c:97:9d:6b:
37:ed:a8:a9:38:f7:f5:86:31:0d:97:35:2a:36:07:
46:49:f7:8c:40:2e:ec:fd:8d:16:05:e6:67:da:aa:
ed:63:5b:8f:80:e8:7b:24:14:0e:96:52:a9:63:66:
c5:68:ef:cd:6c:4b:30:d1:5d:bf:6e:e4:01:b1:e8:
a0:54:72:c5:e8:19:60:e7:8e:a2:ae:cd:1c:b7:d5:
03:c4:ae:c0:2e:74:f1:1b:b9:a2:ac:50:05:78:a7:
6d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D5:BB:0C:78:99:03:BF:A5:92:DF:9B:A0:DE:EB:54:A2:3D:CB:38
X509v3 Authority Key Identifier:
keyid:85:75:07:F1:D8:B3:91:5C:95:10:D5:04:70:0E:CE:89:0B:06:68:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B7FC/C73BA16403A711F0A7FF9C87C4F9AE02/hXUH8dizkVyVENUEcA7OiQsGaF8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hXUH8dizkVyVENUEcA7OiQsGaF8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B7FC/C73BA16403A711F0A7FF9C87C4F9AE02/hXUH8dizkVyVENUEcA7OiQsGaF8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:3f:dc:62:de:1a:fd:bb:7d:45:54:8a:a9:7e:e3:a7:15:3d:
b9:a6:1a:e6:7b:4d:76:38:98:05:dd:b7:26:08:cd:c9:5a:f2:
6a:bf:30:24:3c:f8:93:82:d1:38:a9:48:88:55:aa:72:c7:83:
c5:34:88:8f:52:5b:8f:03:54:85:38:b4:b5:10:01:83:e1:81:
de:b0:40:3a:1e:b0:b7:79:b4:ec:74:c9:0a:6b:cf:e9:c8:df:
26:30:f9:1a:dc:46:8d:69:6c:d6:11:95:4b:e2:f1:05:73:1f:
c3:83:81:fb:de:7e:57:68:79:d9:06:c9:13:0a:21:da:a4:2a:
a8:50:98:7c:39:22:1b:60:4c:e2:83:74:40:97:00:bd:d6:49:
06:25:ac:95:45:16:09:e3:c5:61:ec:b9:39:8f:d4:d3:5c:8e:
95:24:21:5e:2a:e5:b8:63:ce:2f:78:aa:6e:b7:dd:84:93:c0:
49:a9:ae:19:68:1d:fe:35:b4:b0:d1:38:41:8e:a3:0a:25:8e:
84:06:02:11:20:5b:d6:f5:2d:98:b5:f4:31:1c:71:7a:10:f1:
fb:dd:82:f3:58:20:b1:76:aa:20:ed:8c:f1:db:85:9f:58:f1:
e6:c7:0c:03:fc:27:15:28:97:ee:b2:bd:36:2d:8b:1d:6a:d6:
be:6a:69:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:36 2026 by rpki-client