
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft
File: h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft (raw, json)
Hash identifier: MH9OBrVzybTgLMWIAuRsO6OqS8Dwlcx+JUBycU0Lle8=
Subject key identifier: 68:F0:D8:F0:32:AF:A3:A6:44:CA:E2:8F:65:CD:9C:87:65:52:90:14
Authority key identifier: 87:8B:86:86:95:FC:45:C9:C6:3B:6F:BC:54:CC:B3:50:9C:4B:9F:4B
Certificate issuer: /CN=A918A35C/serialNumber=878B868695FC45C9C63B6FBC54CCB3509C4B9F4B
Certificate serial: 0C89
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft
Manifest number: 0C80
Signing time: Tue 18 Aug 2026 18:54:54 +0000
Manifest this update: Tue 18 Aug 2026 18:54:53 +0000
Manifest next update: Tue 25 Aug 2026 18:54:53 +0000
Files and hashes: 1: h4uGhpX8RcnGO2-8VMyzUJxLn0s.crl (hash: IM8voLVCpi6jrOoOave+wRbPrfiV7xX52/vZ4NzVW1k=)
2: 0D22F748261A11EA83CE8D17C4F9AE02.roa (hash: b+zymn1ltVuOppTrIVQmgPXI02QXRnzUgrsEcAqqyFw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.crl
rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 18:54:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3209 (0xc89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A35C, serialNumber=878B868695FC45C9C63B6FBC54CCB3509C4B9F4B
Validity
Not Before: Aug 18 18:54:53 2026 GMT
Not After : Aug 25 18:54:53 2026 GMT
Subject: CN=6a84aa7e-9fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:20:8d:64:87:06:cf:48:bf:45:a9:0e:08:d3:
2d:9c:31:f6:52:c5:ae:78:fd:4f:d0:93:01:40:0a:
d2:9f:85:5b:54:ed:69:b6:ba:3e:74:17:1b:1c:48:
d3:f0:05:6a:15:bf:47:21:4c:72:b1:2f:8e:64:a1:
e8:8d:da:82:6d:18:b6:88:c5:06:76:17:9a:b0:88:
4e:68:4f:e7:2c:8e:b1:9f:76:3a:17:be:60:b1:22:
5b:2e:e2:34:6f:71:7c:a9:26:ba:21:60:27:b5:d5:
c9:da:b9:0d:30:eb:57:6a:c7:e9:03:51:24:14:30:
7f:92:48:cc:79:b5:b1:0c:e0:41:f1:3d:2b:4b:87:
09:c2:90:75:ab:ab:7c:ca:2d:bd:d2:05:57:7d:e0:
23:2d:9b:16:22:5f:98:63:58:20:93:f3:00:a3:ca:
be:de:a7:fe:cb:7f:86:77:04:67:41:96:f3:e6:17:
f8:85:ea:58:b7:0e:6d:38:8a:23:95:75:b1:85:d9:
42:b0:ac:eb:08:30:a5:cf:32:98:85:7f:1d:89:b9:
a6:70:5d:aa:25:8e:6b:b4:ee:58:38:be:4e:39:c2:
7c:c8:3c:04:0d:e1:2f:e8:fe:82:cd:1a:78:7b:dc:
37:9c:0d:86:15:e6:db:d9:35:ec:69:38:bb:f7:12:
91:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F0:D8:F0:32:AF:A3:A6:44:CA:E2:8F:65:CD:9C:87:65:52:90:14
X509v3 Authority Key Identifier:
keyid:87:8B:86:86:95:FC:45:C9:C6:3B:6F:BC:54:CC:B3:50:9C:4B:9F:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:1d:22:9c:70:53:8c:5a:31:e8:c1:63:17:ea:90:de:46:74:
ca:8c:63:5c:fa:3d:99:ee:34:31:6f:17:4d:74:77:d9:c8:64:
25:a4:15:73:35:57:17:51:35:da:80:37:3b:bc:58:42:50:12:
d6:65:37:29:a4:bb:90:d9:36:35:59:09:7a:f6:4e:f7:3f:4f:
93:58:36:c7:44:f3:e2:bc:b0:7b:fa:21:4f:db:4a:4d:3e:4d:
87:07:e4:2b:af:51:da:68:db:af:a2:e8:8e:ca:f3:0e:95:f0:
0c:8b:d2:db:7a:d4:1e:ce:ed:5d:d7:32:c8:4c:6b:45:37:41:
4c:07:70:05:fc:97:a8:51:16:79:fb:bd:b0:8e:3e:40:57:c1:
e4:91:31:32:10:d1:01:8d:ea:41:3a:c9:54:db:b7:cc:9b:ce:
d0:20:4e:02:12:d1:1d:49:01:ab:ce:67:d4:1f:44:f6:5a:56:
e6:d7:7e:c2:19:e5:b0:c5:f4:21:c4:1d:e9:64:4f:18:24:9e:
5a:6b:d0:db:dc:e5:ea:dc:62:1d:c5:d5:4c:f7:8e:49:86:0a:
ab:a1:24:da:a7:a6:ec:03:2b:2e:96:83:98:4d:41:28:04:3c:
76:a6:b8:ad:28:60:79:a9:48:27:5d:92:f3:64:d5:bc:5a:e1:
4d:6f:e7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:55:32 2026 by rpki-client