
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.mft
File: hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.mft (raw, json)
Hash identifier: XNsY+4nzBQiNjV07PMy13GqgsN6ttwX9d/O2AGxN0pE=
Subject key identifier: 84:46:58:9A:73:84:00:96:D5:02:33:55:67:AB:59:BE:1B:59:FB:21
Authority key identifier: 84:8A:79:AB:50:41:E7:1C:E6:22:50:B5:7F:C1:E0:F5:49:78:C9:3A
Certificate issuer: /CN=A918EC78/serialNumber=848A79AB5041E71CE62250B57FC1E0F54978C93A
Certificate serial: 0B53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.mft
Manifest number: 0B46
Signing time: Mon 22 Jun 2026 19:14:12 +0000
Manifest this update: Mon 22 Jun 2026 19:14:11 +0000
Manifest next update: Mon 29 Jun 2026 19:14:11 +0000
Files and hashes: 1: hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.crl (hash: bo8g0KlolYPMjsU6gVtmnMAyMugQAQD89LcFnw3ebTg=)
2: BF77D1785DCB11EA880A7643C4F9AE02.roa (hash: A0fYtG6N2BexE9W0qntrNVFN6Gcpgpfkbf4hLPy3YFQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.crl
rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 19:14:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2899 (0xb53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EC78, serialNumber=848A79AB5041E71CE62250B57FC1E0F54978C93A
Validity
Not Before: Jun 22 19:14:11 2026 GMT
Not After : Jun 29 19:14:11 2026 GMT
Subject: CN=6a398984-fa36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:36:e2:3e:ae:aa:58:fa:3f:74:d8:26:2f:2b:
d5:9b:72:71:4a:ed:fd:62:99:dd:54:c7:0d:b0:83:
4a:55:27:e5:09:ef:b6:d5:4f:74:1e:2e:01:28:4a:
70:2c:b2:4e:10:7c:15:d8:f5:7f:7a:33:0e:40:84:
72:e3:33:a8:a5:a7:cd:61:4e:e4:91:3a:e9:30:a5:
70:55:4e:58:ad:ae:dd:00:f5:f5:19:c9:e3:4d:00:
47:d7:51:4d:9d:b4:f4:df:be:79:e7:0d:01:38:db:
70:0c:4b:59:65:d4:fa:0d:8d:38:73:76:c2:3d:7f:
1a:1d:12:b7:b4:52:6c:c6:0c:96:9e:ae:75:15:94:
9a:c4:a0:81:18:70:c0:69:e3:a8:e7:15:18:a5:78:
5a:36:34:f3:6c:ce:e2:c8:9a:e8:67:ce:e1:cf:5e:
0c:03:16:92:c1:59:d4:53:91:34:6d:ad:cb:22:23:
93:1b:e7:80:91:12:64:71:27:d5:81:17:eb:c2:b7:
20:87:9b:57:c6:23:0a:35:fd:48:0a:da:d8:45:af:
b5:03:d1:72:a5:8f:4b:44:88:80:0b:95:c2:04:d6:
fb:fc:35:78:a1:a6:13:30:99:79:b8:bf:d2:1e:88:
a1:85:03:fa:af:10:0e:b0:b8:59:1b:05:d9:5d:2a:
9a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:46:58:9A:73:84:00:96:D5:02:33:55:67:AB:59:BE:1B:59:FB:21
X509v3 Authority Key Identifier:
keyid:84:8A:79:AB:50:41:E7:1C:E6:22:50:B5:7F:C1:E0:F5:49:78:C9:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:ae:a0:74:b3:de:25:cf:d8:15:b9:b9:02:6c:78:56:ca:c3:
9d:78:ef:7b:54:a1:0f:d7:e0:26:b1:61:d3:44:a0:83:cd:c7:
35:b7:ac:e5:49:77:bd:56:e2:07:28:57:0f:c2:9b:36:fe:31:
0b:96:c4:fd:fb:ce:6e:6c:08:3a:8b:6d:d8:44:9a:f2:18:db:
8b:d9:75:54:07:f1:b9:cb:8b:1d:c5:2c:c7:68:00:54:e5:03:
aa:4e:e4:f0:64:2c:d7:80:0d:5f:5d:b7:ae:d2:4b:e5:2d:7f:
d7:90:d1:53:53:15:28:4e:93:2c:4c:fe:c7:86:96:37:e4:1f:
17:29:91:ca:80:5b:bc:41:2a:20:7d:94:d5:67:fa:44:dc:ef:
72:d5:14:18:e4:a4:a7:4b:ec:5b:2b:3d:56:04:02:14:28:02:
1c:cc:cc:79:50:5a:4d:13:b9:86:6a:21:c9:1d:29:31:44:cc:
fc:2c:af:6d:26:36:3c:0c:04:b2:c9:47:ec:a4:ce:39:bc:44:
d1:08:47:ea:29:33:b7:a7:3c:f0:68:34:31:7f:62:fe:8b:fa:
1b:75:16:85:f9:6c:84:97:0e:f8:c8:70:0e:71:30:78:90:16:
ad:18:60:09:a1:3a:87:02:89:d8:9b:20:50:e5:1c:ff:45:87:
19:9e:50:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:29:40 2026 by rpki-client