
$ rpki-client -vvf rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft
File: h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft (raw, json)
Hash identifier: CF+uk7fbzCxS9UXhnPd/92E+C8AFrnNvGpr9aM3pvdg=
Subject key identifier: FA:81:02:91:3D:29:10:B9:CE:08:D1:52:0C:6E:EA:8E:87:61:2C:02
Authority key identifier: 87:95:4C:02:31:CA:AC:B2:BE:2D:FD:B5:67:C7:4A:F5:EC:B7:5B:0C
Certificate issuer: /CN=A916BCDF/serialNumber=87954C0231CAACB2BE2DFDB567C74AF5ECB75B0C
Certificate serial: 12FE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft
Manifest number: 12DA
Signing time: Tue 02 Jun 2026 17:03:01 +0000
Manifest this update: Tue 02 Jun 2026 17:03:01 +0000
Manifest next update: Tue 09 Jun 2026 17:03:01 +0000
Files and hashes: 1: h5VMAjHKrLK-Lf21Z8dK9ey3Www.crl (hash: bHkO5/JDS85CP9z6QP+UdI6Ou50ZrdaHTOxwEViZUiI=)
2: 3BA64F0AF22611F094D5D2AE526F56BC.roa (hash: gjQ8EjTh4YTn2TSGcxeqBGmNj2WHRb5bDlBbyu/0FTk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.crl
rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Jun 2026 15:18:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4862 (0x12fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916BCDF, serialNumber=87954C0231CAACB2BE2DFDB567C74AF5ECB75B0C
Validity
Not Before: Jun 2 17:03:01 2026 GMT
Not After : Jun 9 17:03:01 2026 GMT
Subject: CN=6a1f0cc5-8638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fd:8e:58:c2:9f:61:76:a8:90:94:0f:38:64:
80:9d:5e:a6:44:97:1c:71:b4:48:22:e3:3f:39:01:
5f:a3:26:ea:9c:58:d3:fb:30:ce:c8:95:94:8d:79:
e7:54:26:c2:2b:ff:17:ee:b6:14:19:ab:fe:ea:9b:
d8:ba:05:3a:1f:73:5c:5e:33:3b:cd:27:5b:b2:c2:
f9:5c:e3:d9:a1:e1:de:2d:38:70:54:9f:8b:3c:c7:
6c:b1:c9:24:72:b4:62:a2:a8:cd:88:aa:a9:af:95:
de:82:2f:8b:60:e6:63:3a:f0:b2:31:93:ef:d7:ff:
1e:50:a3:f7:5c:55:e8:07:48:74:3b:25:ac:31:62:
59:87:69:f7:af:08:c2:cd:2b:01:12:fe:f0:46:19:
f5:c2:3c:e9:8d:87:e3:e9:b1:31:d7:61:01:c1:77:
eb:4d:5e:1d:d4:84:d0:e7:99:5c:60:00:e2:83:17:
95:cb:2b:05:34:9e:fa:00:94:ad:49:fb:5f:6c:f2:
04:66:fe:9a:4d:2b:f1:3e:d7:d5:11:64:6e:e7:36:
32:dd:41:97:c5:f6:fe:a3:45:13:9e:3a:0b:8c:92:
5e:75:55:11:a0:e7:68:a0:43:e5:19:8f:40:76:0c:
19:27:98:69:e7:ac:90:be:ac:6d:b6:20:8b:8c:0a:
b4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:81:02:91:3D:29:10:B9:CE:08:D1:52:0C:6E:EA:8E:87:61:2C:02
X509v3 Authority Key Identifier:
keyid:87:95:4C:02:31:CA:AC:B2:BE:2D:FD:B5:67:C7:4A:F5:EC:B7:5B:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:16:41:ff:4e:f3:ca:3b:c4:58:dd:59:8a:8f:d5:5c:0f:db:
af:b1:96:e2:ce:03:db:15:58:b9:97:62:82:d1:3f:6a:31:4d:
25:54:d3:46:06:88:cc:ee:c6:8c:c3:4d:d1:df:47:2b:74:2e:
d3:cc:a1:25:b0:25:36:91:c3:9a:5f:23:a1:8f:99:d0:c2:10:
ea:82:14:60:ab:37:07:0f:d1:49:a7:96:86:8a:bd:8e:aa:6d:
1d:c3:85:82:1b:8f:04:cf:95:ee:d2:ba:09:12:f4:40:a9:44:
ea:97:0b:42:8a:2d:38:b0:de:c1:e6:7f:23:9c:e0:88:7f:ff:
9b:b7:35:08:5b:3d:84:e1:3b:0f:19:3c:0c:de:93:ff:7f:c1:
ee:c4:bc:f7:dc:90:33:6f:57:0f:ab:fd:f8:9b:ae:01:ee:2d:
4c:3f:84:49:01:42:59:a3:ea:39:74:09:f5:9e:43:08:bf:a0:
ac:93:0d:4d:2e:33:2c:cd:d1:a1:b4:74:79:e7:4e:e0:63:56:
c2:78:be:a6:5b:56:e1:47:67:38:9d:75:6c:52:a3:2f:ef:10:
ad:e3:7b:0e:8e:85:07:15:e2:f5:0c:6d:3e:50:31:c4:78:10:
42:1c:74:3f:31:d7:5b:9c:77:d2:5d:2e:5d:08:39:e3:68:15:
a8:8e:d0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:24:10 2026 by rpki-client