
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft
File: h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft (raw, json)
Hash identifier: eGkQTVj35446OH8Ir/cE/g09Obp3LKP9rfeHmSWtiC8=
Subject key identifier: C5:DC:99:2A:4D:78:1A:BF:E5:D3:1B:90:00:05:4C:8F:A0:86:B7:C9
Authority key identifier: 87:95:4C:02:31:CA:AC:B2:BE:2D:FD:B5:67:C7:4A:F5:EC:B7:5B:0C
Certificate issuer: /CN=A916BCDF/serialNumber=87954C0231CAACB2BE2DFDB567C74AF5ECB75B0C
Certificate serial: 133A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft
Manifest number: 1316
Signing time: Mon 28 Sep 2026 17:05:15 +0000
Manifest this update: Mon 28 Sep 2026 17:05:15 +0000
Manifest next update: Mon 05 Oct 2026 17:05:15 +0000
Files and hashes: 1: h5VMAjHKrLK-Lf21Z8dK9ey3Www.crl (hash: dzs8JyxwRcQb0s+CTyUnxeY0whhw8nNERdR4rixLG/M=)
2: 3BA64F0AF22611F094D5D2AE526F56BC.roa (hash: gjQ8EjTh4YTn2TSGcxeqBGmNj2WHRb5bDlBbyu/0FTk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.crl
rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 17:05:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4922 (0x133a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916BCDF, serialNumber=87954C0231CAACB2BE2DFDB567C74AF5ECB75B0C
Validity
Not Before: Sep 28 17:05:15 2026 GMT
Not After : Oct 5 17:05:15 2026 GMT
Subject: CN=6aba9e4b-fdab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6d:1b:8c:2b:d9:91:06:31:66:12:dd:c6:fd:
e7:6b:8f:f4:84:40:60:e9:3b:4b:0e:eb:58:07:10:
5a:d1:ee:ec:00:e3:89:f4:0a:0e:96:88:96:19:d3:
c1:f8:01:dd:37:6e:1b:cb:eb:ef:fb:74:10:d5:9d:
b6:1a:f2:67:a5:37:36:88:6a:0c:68:1b:41:d0:24:
fc:dc:57:86:d9:04:9f:bd:e7:16:bc:6c:df:59:90:
48:5a:b4:bd:04:07:cd:e3:ea:7d:6c:39:dc:c1:c5:
2d:c4:d9:6b:91:df:e5:ee:6f:c6:f4:b0:dc:06:24:
45:5c:46:da:ab:29:b3:0a:19:a7:a2:c8:2b:09:8f:
2c:80:7c:ac:f1:ca:2a:42:5d:21:2c:02:69:37:55:
95:73:5d:64:37:80:f2:01:5d:dc:e2:85:bd:b8:7e:
08:0e:d0:50:a6:61:ca:d9:eb:d1:bb:d2:da:8b:a6:
bc:77:97:1e:d8:13:7a:fd:eb:ee:7a:30:8c:b1:42:
ea:a3:a5:f1:24:1e:1e:7d:55:67:9c:7f:3f:5d:97:
91:d2:c5:a7:df:5a:7d:d9:28:13:7b:fa:61:34:9c:
5b:f2:26:29:49:d9:21:8b:fd:02:3c:ee:71:90:d1:
1a:4f:a8:8a:4a:9d:c4:ea:8f:70:a7:4d:1b:a1:11:
37:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:DC:99:2A:4D:78:1A:BF:E5:D3:1B:90:00:05:4C:8F:A0:86:B7:C9
X509v3 Authority Key Identifier:
keyid:87:95:4C:02:31:CA:AC:B2:BE:2D:FD:B5:67:C7:4A:F5:EC:B7:5B:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:c9:59:60:42:db:e2:df:06:97:3f:66:d0:47:72:7b:72:bc:
99:4b:98:2f:02:4f:82:b8:7e:e3:45:49:75:08:a0:55:3b:eb:
44:4d:04:0d:f9:3d:db:63:35:58:f7:08:cb:29:0e:80:89:51:
df:ec:eb:0d:5d:3f:07:23:8a:59:bc:0a:32:9f:e7:79:97:00:
8b:2e:06:4d:40:f9:36:47:4d:5e:93:d4:68:d1:00:f3:56:8b:
d0:5a:68:1a:08:2c:c5:ba:ac:53:e7:e9:6a:6e:1e:3c:49:b5:
64:86:a6:68:d4:47:88:b3:14:ae:8f:14:4b:33:b2:f5:b8:fc:
3d:50:a3:8c:b6:b0:5e:8b:ba:d3:1a:0e:e4:f4:f4:df:7d:45:
cc:52:ab:f8:11:3e:ec:09:cd:3f:27:74:d2:3f:52:c5:a9:84:
ff:1e:23:7d:f9:20:ac:78:4f:e7:ef:63:f7:c1:e1:21:3b:56:
ca:a6:d9:d9:63:72:1d:16:fa:42:71:00:41:92:f1:a7:f4:97:
3c:c3:37:74:df:82:86:a3:e0:65:e3:8d:38:58:95:e5:4e:85:
a3:28:6e:0a:43:c4:6b:da:04:2a:9f:29:0c:8d:19:81:ea:77:
ea:18:ba:7d:36:90:16:9e:3e:4b:dd:48:78:8c:72:d0:83:32:
4f:3c:61:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:13:48 2026 by rpki-client