
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft
File: rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft (raw, json)
Hash identifier: kgzchxFMQTK7E8knykw3cODWutwUzK4SUq3uDbNaJvc=
Subject key identifier: 30:08:ED:6C:38:60:AC:A6:17:93:5E:DA:23:3D:5E:AA:A7:62:B0:FB
Authority key identifier: AE:10:7F:3C:29:77:71:7A:1C:D3:57:1D:18:37:48:FD:07:D9:FC:5F
Certificate issuer: /CN=A9117E4D/serialNumber=AE107F3C2977717A1CD3571D183748FD07D9FC5F
Certificate serial: 356C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft
Manifest number: 3554
Signing time: Tue 12 May 2026 14:26:54 +0000
Manifest this update: Tue 12 May 2026 14:26:54 +0000
Manifest next update: Tue 19 May 2026 14:26:54 +0000
Files and hashes: 1: rhB_PCl3cXoc01cdGDdI_QfZ_F8.crl (hash: SqYRQPSl+71GamwNBobl3F8FvqQG5/+iC20uPoWJfl0=)
2: 2FA57B9A97B611EDAE9D4381C4F9AE02.roa (hash: FVSbWN+txOfkWkBvMLmDBeYriGUMAw+teOvv0Ix7L2U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.crl
rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:26:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13676 (0x356c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117E4D, serialNumber=AE107F3C2977717A1CD3571D183748FD07D9FC5F
Validity
Not Before: May 12 14:26:54 2026 GMT
Not After : May 19 14:26:54 2026 GMT
Subject: CN=6a0338ae-413a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:14:78:df:0d:06:6f:41:9f:60:31:04:1f:c4:
3b:eb:2a:fe:37:1f:e6:dc:73:7e:5a:8a:19:79:73:
20:ef:69:dd:e7:42:bd:78:e2:e1:2a:83:e7:a0:fa:
23:69:10:22:f8:d1:30:38:c7:0a:61:71:c4:ae:7f:
b6:86:f2:a9:87:1a:9b:97:24:3e:56:8e:7b:10:8a:
a6:c7:06:58:67:5d:7c:cf:b7:b7:bf:69:3b:5a:7b:
ed:af:cc:96:04:05:f3:be:5f:47:74:d5:56:22:c9:
11:31:36:40:5b:43:a4:a0:b1:d5:de:4f:95:83:03:
87:09:4d:d8:d8:d5:db:c1:99:3a:95:4c:41:74:bb:
50:4b:67:80:0f:7f:83:fb:03:35:2c:52:b3:3a:c7:
f8:48:83:9b:6a:ba:82:58:45:87:8e:16:a0:a7:2b:
72:2f:ef:7a:04:7a:35:41:ab:d6:62:b8:27:b7:81:
52:23:18:ba:b1:aa:74:ad:78:d1:bb:06:9d:78:47:
1c:16:b5:4b:55:29:b6:86:ed:37:aa:f4:8f:db:7c:
83:01:38:3a:e4:5e:92:a1:e8:12:1a:91:ef:b9:25:
22:be:66:47:0d:2a:f0:06:9d:e9:5d:93:33:22:50:
b9:ae:d3:9c:d8:d1:b0:4d:f1:dd:e9:06:e0:89:f5:
92:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:08:ED:6C:38:60:AC:A6:17:93:5E:DA:23:3D:5E:AA:A7:62:B0:FB
X509v3 Authority Key Identifier:
keyid:AE:10:7F:3C:29:77:71:7A:1C:D3:57:1D:18:37:48:FD:07:D9:FC:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:ba:d7:0c:01:d9:cc:da:03:32:6d:0f:67:96:43:2c:3a:17:
a0:52:8d:98:e5:de:0c:55:68:bc:4b:1a:da:b0:aa:fc:05:6a:
3a:ff:1b:44:b8:a2:f0:b7:a5:89:78:f3:d1:af:e1:8e:9c:87:
b0:a2:9e:27:84:8e:2b:0f:31:55:fd:62:8f:14:c4:fa:de:84:
34:1d:be:16:9d:0b:ec:96:61:a9:4d:85:47:8a:b5:e3:49:f7:
6e:42:3d:9e:00:94:aa:b0:1f:a3:ba:3f:5b:ea:ae:8b:4c:15:
96:8f:32:87:96:8f:43:79:9d:15:c4:4d:8b:2f:68:74:d3:26:
cc:43:03:1a:74:9c:17:0a:de:c6:27:aa:93:6e:8b:bc:ed:c1:
40:96:2f:e0:a3:9b:a3:38:b0:8f:5a:a4:c5:b4:d2:37:d7:66:
b8:06:2d:5e:58:d2:25:d4:e0:a1:1e:17:4f:64:ef:a4:e2:dc:
e7:0f:9b:2a:60:0a:f5:d2:23:f7:1b:54:39:59:2b:61:80:71:
a2:4f:d8:24:c7:aa:a7:3a:2e:90:05:c6:cf:27:cb:73:c7:cd:
1f:aa:cf:85:57:80:2b:b2:04:5d:1d:ad:90:24:16:2c:8a:9b:
7a:1b:a0:2a:00:d0:f0:3f:90:c4:44:70:6a:13:cf:3a:0e:0e:
1f:59:22:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:13:06 2026 by rpki-client