
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.mft
File: hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.mft (raw, json)
Hash identifier: Cd4BEi9oKMnSRnHVpeWCYxA57tZgBzIOyYJxiNw5WWg=
Subject key identifier: 77:4C:03:BA:1F:C2:9A:B1:72:1A:85:3F:41:D7:D8:8F:ED:6C:0A:94
Authority key identifier: 84:8A:79:AB:50:41:E7:1C:E6:22:50:B5:7F:C1:E0:F5:49:78:C9:3A
Certificate issuer: /CN=A918EC78/serialNumber=848A79AB5041E71CE62250B57FC1E0F54978C93A
Certificate serial: 0B8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.mft
Manifest number: 0B7D
Signing time: Thu 08 Oct 2026 19:15:39 +0000
Manifest this update: Thu 08 Oct 2026 19:15:38 +0000
Manifest next update: Thu 15 Oct 2026 19:15:38 +0000
Files and hashes: 1: hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.crl (hash: 2jLyWzS39ivYu73meeka7qPTgyUhSQyPHz5tPjpuMrc=)
2: BF77D1785DCB11EA880A7643C4F9AE02.roa (hash: A0fYtG6N2BexE9W0qntrNVFN6Gcpgpfkbf4hLPy3YFQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.crl
rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 19:15:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2954 (0xb8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EC78, serialNumber=848A79AB5041E71CE62250B57FC1E0F54978C93A
Validity
Not Before: Oct 8 19:15:38 2026 GMT
Not After : Oct 15 19:15:38 2026 GMT
Subject: CN=6ac7ebdb-cd13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:11:8e:82:5c:91:17:42:69:c9:89:69:c8:ad:
c4:11:68:21:bd:b0:10:f5:50:28:9c:37:c5:68:70:
47:9b:4f:35:7d:be:88:bc:68:70:6d:bb:c7:b1:9d:
b9:99:30:b4:a1:93:d3:8a:cb:fb:ae:29:0c:23:6e:
6a:06:16:68:d9:7a:be:23:e3:34:ab:af:87:b3:75:
84:cb:40:27:a5:d4:5e:af:48:0f:77:d4:0d:fe:85:
5a:b3:42:13:50:00:8d:f6:c3:2c:60:6a:56:f4:85:
4b:f4:4f:f6:6c:88:2e:c6:6b:e8:18:83:80:07:9c:
8c:db:b7:5a:67:76:84:76:5a:59:6e:b4:0f:1c:ce:
0e:be:1e:a4:cb:c9:7c:69:43:9b:e0:c5:b2:b7:51:
c0:e6:9c:bd:71:0a:b6:ed:2e:23:66:99:3b:f2:a1:
51:dc:3d:a7:54:ca:ed:a3:e3:b7:a2:06:14:b4:ca:
ba:80:cc:77:52:ea:1d:cd:e1:96:ce:08:d4:72:9d:
19:b7:cf:27:af:1a:64:5a:21:6a:ee:48:01:a9:4f:
d4:83:f6:f6:98:68:c8:9b:6a:ad:38:28:e1:f4:68:
4b:ae:b0:11:34:70:21:5f:17:e1:a1:62:7b:b5:f4:
52:5b:35:5e:e4:4e:ea:41:d8:16:61:3d:7c:9b:2d:
e6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:4C:03:BA:1F:C2:9A:B1:72:1A:85:3F:41:D7:D8:8F:ED:6C:0A:94
X509v3 Authority Key Identifier:
keyid:84:8A:79:AB:50:41:E7:1C:E6:22:50:B5:7F:C1:E0:F5:49:78:C9:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:b2:2d:a2:ea:30:b7:ff:36:e4:8e:cc:d2:21:cb:dc:78:fc:
7e:8f:f8:bd:86:57:cb:f7:75:86:17:9e:06:bc:61:c7:61:4b:
30:e2:ec:8e:98:6e:a8:9c:f9:39:cd:62:3c:13:9c:32:46:bf:
f6:25:75:58:2c:b3:72:eb:80:23:98:0e:e3:07:86:6b:8c:fa:
91:a9:6d:09:06:70:8e:35:70:66:bf:17:d3:8e:bd:9f:03:82:
8f:16:9c:ff:f1:67:7e:11:ab:0d:34:aa:38:d1:22:c0:2a:56:
14:d8:1d:ee:93:50:85:d6:f2:62:b1:f6:38:80:5c:6e:51:98:
9f:ca:7f:7f:34:ca:c6:05:cd:8f:f8:c3:6d:41:55:c8:5a:d5:
cf:8d:8d:7b:f0:93:2c:f2:20:9c:28:7b:39:af:d7:56:51:a6:
a7:a0:a5:e4:16:7d:ca:77:cd:51:16:b8:fb:5c:65:76:55:65:
f0:2d:4b:52:80:21:6a:78:69:e8:81:03:2b:13:7c:b7:b8:bb:
65:d8:19:b6:a4:34:44:f1:a8:89:4f:dc:d1:5b:d7:03:1f:a3:
00:f4:74:13:86:38:99:0c:50:43:07:20:32:7d:7b:5f:ef:c5:
3e:01:9a:cb:20:e8:64:02:b8:ab:cc:22:cc:a4:a2:64:27:ef:
cf:48:be:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 23:02:46 2026 by rpki-client