
$ rpki-client -vvf rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft
File: Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft (raw, json)
Hash identifier: EoBiYXgjOLjnDS9JMPCGMv4LSl4kPFFlm4GuWpRXoSI=
Subject key identifier: DB:C7:D1:F0:5A:42:91:1C:10:8B:6A:5B:D1:43:43:A5:3C:8A:50:DA
Authority key identifier: 1E:57:B4:3F:04:4D:4A:BA:82:22:A4:09:78:66:14:28:0A:A7:39:A1
Certificate issuer: /CN=A911112F/serialNumber=1E57B43F044D4ABA8222A409786614280AA739A1
Certificate serial: 01D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft
Manifest number: 01BD
Signing time: Wed 13 May 2026 04:05:27 +0000
Manifest this update: Wed 13 May 2026 04:05:27 +0000
Manifest next update: Wed 20 May 2026 04:05:27 +0000
Files and hashes: 1: Hle0PwRNSrqCIqQJeGYUKAqnOaE.crl (hash: +mPNBYTLiQjRTVb3P/3W1CUSIMV7I8lHCIfPMCRgrBQ=)
2: 1CD34B6CEDFC11EE880F6F58C4F9AE02.roa (hash: 843592kmHI2mJyXbkDnRzoJpw2lZFHjhOJjwKGMqHsI=)
3: E4BA0144BA8E11EE91E3AF15C4F9AE02.roa (hash: rTksk/NcwRNUlpEN58oWLKJieEnMmoGQor+Ru3sGYqQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.crl
rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 04:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 471 (0x1d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911112F, serialNumber=1E57B43F044D4ABA8222A409786614280AA739A1
Validity
Not Before: May 13 04:05:27 2026 GMT
Not After : May 20 04:05:27 2026 GMT
Subject: CN=6a03f887-3705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e3:6e:d4:f4:e6:1e:3f:28:8f:bd:80:22:1a:
1b:ce:35:88:ad:00:8d:90:28:af:d7:27:7d:58:47:
cc:16:db:b0:c8:96:c1:91:6b:f2:d5:65:2b:f1:20:
41:58:a0:eb:70:d0:6e:c6:be:f5:d7:fd:84:ad:7a:
e9:1c:43:13:07:b5:08:e3:d2:55:b8:e6:5a:08:7e:
6c:8b:bd:06:c4:79:17:a6:0d:c0:4b:c8:3c:fd:51:
e9:b3:a8:ec:a5:33:0f:2f:40:30:01:e6:88:9e:5d:
27:28:2f:de:1c:d2:28:bd:27:81:33:61:84:c2:25:
7a:b0:4a:75:a5:a3:b9:16:28:b4:be:e3:85:5b:9d:
da:b7:d6:3d:b7:be:e9:e1:03:30:ce:c3:01:ce:82:
b5:e7:13:51:a9:f0:f2:14:08:53:ca:74:8d:a0:74:
ea:35:3e:bf:41:d5:53:29:f1:48:3e:fd:d7:78:2f:
76:e6:33:56:b9:d4:01:6f:8c:d8:97:f5:bb:12:c5:
dd:2e:32:2a:e7:07:4c:04:71:ce:ed:dc:25:2e:8d:
81:18:75:4e:37:04:0e:cb:fa:bf:4f:b2:b3:5f:d6:
6b:5b:f9:5b:c5:da:9b:5f:49:ec:5a:64:fa:48:2c:
f8:58:ed:02:20:50:bb:75:ba:b9:15:7d:a3:87:c8:
43:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C7:D1:F0:5A:42:91:1C:10:8B:6A:5B:D1:43:43:A5:3C:8A:50:DA
X509v3 Authority Key Identifier:
keyid:1E:57:B4:3F:04:4D:4A:BA:82:22:A4:09:78:66:14:28:0A:A7:39:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:9b:79:15:78:00:ea:db:ff:90:6b:48:57:83:32:fe:9f:03:
67:f0:78:be:bd:98:da:be:26:c5:08:7e:75:4b:9a:89:8f:01:
1f:16:c0:da:43:cb:19:2e:b0:3f:d5:23:93:55:2d:a9:e6:52:
3b:bc:c3:ef:0a:0b:a3:f1:02:58:e6:57:68:28:ad:42:d6:91:
35:69:2a:bf:c2:14:7b:ee:ab:f9:ea:bd:3c:94:c4:dc:ee:02:
91:0d:ae:15:bc:3c:2e:bd:f3:19:1f:93:23:38:c7:ed:f4:ed:
a8:19:0f:52:3e:19:4c:06:01:83:90:0f:4f:8f:32:0a:76:68:
24:90:b6:2c:3c:83:53:37:57:42:09:2f:e8:4b:e0:c2:c2:75:
33:39:64:f8:6e:45:bf:43:90:a1:83:ce:43:6d:35:ba:86:ba:
a9:b9:2b:00:8f:b0:a1:0e:eb:4b:37:db:b9:e3:b8:e0:32:83:
87:ff:c0:6b:98:91:3b:30:83:f2:3b:03:5d:bd:2a:df:e0:d7:
47:c9:cb:67:f0:7e:9a:85:9d:99:96:a7:7b:3d:f0:41:69:10:
9c:d6:24:bc:b0:f1:15:f1:3b:f8:85:36:06:cc:ea:48:a5:01:
63:6b:0c:ac:53:75:53:0c:f6:3a:6a:6f:d6:f9:93:ec:1d:8a:
60:b5:7a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:45:26 2026 by rpki-client