
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft
File: h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft (raw, json)
Hash identifier: Y0SMkf8r+NMbLexTYUwo95r8flNQdsmfvN1KnR65Ilo=
Subject key identifier: 0E:15:1C:C7:8A:16:EF:9F:0B:52:9C:51:14:DA:94:AD:8D:8E:E5:77
Authority key identifier: 87:8B:86:86:95:FC:45:C9:C6:3B:6F:BC:54:CC:B3:50:9C:4B:9F:4B
Certificate issuer: /CN=A918A35C/serialNumber=878B868695FC45C9C63B6FBC54CCB3509C4B9F4B
Certificate serial: 0C41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft
Manifest number: 0C39
Signing time: Sat 04 Apr 2026 18:35:04 +0000
Manifest this update: Sat 04 Apr 2026 18:35:03 +0000
Manifest next update: Sat 11 Apr 2026 18:35:03 +0000
Files and hashes: 1: h4uGhpX8RcnGO2-8VMyzUJxLn0s.crl (hash: EXACno2TIM7Idg0+aJZZqp8HLmjmO1cM9GiyLujvKYk=)
2: 0D22F748261A11EA83CE8D17C4F9AE02.roa (hash: AGJ3imo4fnyGAnxscjmKEoYw6azyeSOHkHTLOF2MKsQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.crl
rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 18:35:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3137 (0xc41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A35C, serialNumber=878B868695FC45C9C63B6FBC54CCB3509C4B9F4B
Validity
Not Before: Apr 4 18:35:03 2026 GMT
Not After : Apr 11 18:35:03 2026 GMT
Subject: CN=69d159d8-75e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f2:39:04:58:7f:0a:af:07:02:fb:8f:21:aa:
33:aa:12:67:b4:6a:41:74:03:77:ad:91:60:41:7d:
d6:8e:3d:54:96:d3:27:91:a6:d9:89:1b:2f:be:b1:
d9:71:2c:e3:9c:ea:eb:e8:82:92:f2:f9:25:d0:7d:
78:74:8c:9c:db:60:66:f6:b1:6f:c4:b4:a8:2b:d4:
45:9d:f8:a3:39:2b:bf:eb:04:5a:70:8e:58:1e:9a:
03:c1:ff:18:df:ab:fe:94:fa:80:4c:93:76:31:e3:
f5:9e:d7:0e:00:d5:a7:1f:29:bb:cb:24:1a:a9:d6:
9c:e8:45:c3:2b:a6:82:cb:75:7f:82:7c:54:78:4f:
9e:7c:7b:36:f3:d0:1c:4d:7b:91:8d:69:98:1b:22:
78:c6:29:39:a8:30:ce:f6:2e:31:66:9b:3b:24:2d:
5a:0a:3a:c0:ef:4e:b6:e4:39:17:0f:cf:1f:2e:f3:
88:0f:25:a9:b3:2f:cd:db:b3:90:a9:a1:18:a8:b8:
16:39:6c:03:6f:af:1b:de:e5:9d:2d:48:60:14:3c:
05:c8:86:65:6b:99:cc:89:d0:5a:2d:44:60:98:13:
23:08:9d:54:4d:52:b9:fa:67:fc:75:33:c6:31:83:
69:34:56:77:4f:dc:ac:fd:b7:b5:32:73:a5:57:82:
80:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:15:1C:C7:8A:16:EF:9F:0B:52:9C:51:14:DA:94:AD:8D:8E:E5:77
X509v3 Authority Key Identifier:
keyid:87:8B:86:86:95:FC:45:C9:C6:3B:6F:BC:54:CC:B3:50:9C:4B:9F:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c1:02:aa:17:46:46:5c:50:19:b9:39:64:e2:34:ef:f2:43:87:
16:6a:11:0f:be:ec:7c:66:30:93:c0:cc:e7:b2:91:29:81:3e:
90:a9:ba:b6:9d:d4:47:e8:86:1f:88:5d:ce:85:be:47:c9:35:
fe:14:e5:e9:c2:e5:6a:69:53:45:f3:fa:a6:2d:fb:7a:39:50:
05:fb:7e:ef:59:2a:25:2b:f5:27:08:52:59:b4:a7:7d:43:b1:
d1:d1:45:27:b6:00:9a:38:f6:6b:e4:f4:86:3e:e1:52:ba:2f:
84:fe:54:b1:e7:7a:d9:94:57:de:d0:46:a2:00:15:79:7d:e5:
b7:a4:87:d0:c3:5c:ba:52:70:a0:43:e5:19:fe:6c:a6:85:fb:
fb:fd:e1:05:34:19:19:62:13:ab:58:1a:e8:84:6b:4a:14:53:
13:70:46:a4:f7:c2:c8:28:ee:5a:e3:3c:5c:23:82:d7:93:d8:
bc:07:90:c4:39:e9:08:7c:71:30:a7:69:53:0e:10:23:26:d4:
94:e4:2f:57:c7:6c:04:87:1c:da:5d:d9:3e:0a:5b:9e:7f:6e:
28:93:6b:56:52:4c:b5:01:be:58:b4:60:2b:05:8b:ac:f3:5d:
97:21:a8:5e:43:68:9b:05:38:03:fc:58:d7:c8:8b:2d:72:4b:
35:03:e7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:27 2026 by rpki-client