
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft
File: h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft (raw, json)
Hash identifier: UVt3TBeqAT9Jgugha0XrWsbZFD796XnkZenwsYgLm64=
Subject key identifier: BC:5F:4C:82:C9:E7:60:5B:D7:2F:50:ED:B6:41:4D:F0:4D:1A:66:89
Authority key identifier: 87:92:DE:39:9C:F6:31:93:DD:C2:9D:30:FB:F0:A5:81:E0:24:F0:03
Certificate issuer: /CN=A911A4F7/serialNumber=8792DE399CF63193DDC29D30FBF0A581E024F003
Certificate serial: 016E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h5LeOZz2MZPdwp0w-_ClgeAk8AM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft
Manifest number: 016E
Signing time: Wed 23 Sep 2026 04:38:29 +0000
Manifest this update: Wed 23 Sep 2026 04:38:28 +0000
Manifest next update: Wed 30 Sep 2026 04:38:28 +0000
Files and hashes: 1: h5LeOZz2MZPdwp0w-_ClgeAk8AM.crl (hash: Istq7rLXQkyJNazZV5LNTPNuQ5QWgfXK9o7RNaFKzNM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.crl
rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h5LeOZz2MZPdwp0w-_ClgeAk8AM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 04:38:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 366 (0x16e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911A4F7, serialNumber=8792DE399CF63193DDC29D30FBF0A581E024F003
Validity
Not Before: Sep 23 04:38:28 2026 GMT
Not After : Sep 30 04:38:28 2026 GMT
Subject: CN=6ab357c4-dd36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:36:be:4e:a8:1d:87:e7:bf:f0:89:c3:61:c6:
07:b4:5b:2a:b5:37:fe:24:df:6e:20:bd:29:5d:bc:
6d:97:ff:8c:27:ef:a6:5b:13:c2:0d:5a:f8:91:27:
01:98:d0:6f:20:6e:4e:06:e6:8d:ce:df:b4:6c:5e:
a1:61:79:d4:3d:20:35:6a:4e:fe:80:4b:a5:53:d4:
a4:d1:c0:a5:9b:bb:b4:26:25:90:4e:62:72:20:40:
1d:5c:97:e5:c7:d1:e0:c1:01:76:84:80:be:fc:b9:
f2:93:34:6b:26:57:4a:d5:90:e5:a3:25:d2:71:61:
1e:85:62:be:6d:0e:a7:37:66:ef:5e:5f:3e:27:4f:
2f:8e:cc:b7:a2:2f:6b:c1:23:bc:97:0c:73:b0:da:
15:dc:d7:56:3b:36:26:4e:4f:4a:ab:36:04:b1:97:
90:3f:17:bf:57:44:d8:c9:e4:d9:9e:53:72:c2:58:
d9:87:2d:c9:7b:5d:e6:97:22:08:71:4f:81:a5:f9:
6b:17:cb:85:8b:c5:b4:c8:da:ce:30:25:5b:65:4d:
a8:bf:65:a3:85:03:09:05:79:91:c7:64:66:ba:9c:
7c:37:ab:cf:95:d4:f2:0b:8e:e8:a0:d4:b6:00:72:
36:5a:32:d2:c1:0f:3b:11:98:db:ff:38:82:cf:84:
1d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:5F:4C:82:C9:E7:60:5B:D7:2F:50:ED:B6:41:4D:F0:4D:1A:66:89
X509v3 Authority Key Identifier:
keyid:87:92:DE:39:9C:F6:31:93:DD:C2:9D:30:FB:F0:A5:81:E0:24:F0:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h5LeOZz2MZPdwp0w-_ClgeAk8AM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b1:35:a9:ac:96:87:c0:35:00:98:99:e9:c8:71:a4:d3:4c:
43:c0:c0:9c:ea:86:c4:6e:be:0f:ce:6c:66:3f:5d:e5:55:4b:
97:f9:a5:03:49:9c:46:0c:ff:40:64:85:63:c7:15:bc:10:5a:
5f:9b:86:05:29:72:0a:81:34:c0:f2:3b:53:a2:de:d5:a1:28:
85:f7:c1:30:ca:7e:32:13:51:c0:54:4b:a7:04:4d:57:ee:d5:
f2:e0:b2:88:52:16:ca:32:e7:d1:17:a1:8a:d4:3a:f9:b5:53:
a7:54:f5:af:56:45:44:da:41:61:8d:ba:53:dd:dc:c6:2d:3b:
6b:57:3a:c5:54:7d:9e:b8:1d:7d:29:34:32:33:a2:4b:ca:1b:
37:9d:d5:e1:6f:23:4b:c9:0b:0a:4e:d9:32:a0:82:e8:1d:65:
22:9f:8d:e5:b3:67:2b:d0:5e:42:88:16:f9:38:9c:82:fd:9c:
18:c9:10:1f:97:df:5a:d6:41:1f:d8:07:37:74:35:1a:0c:b1:
cc:1e:19:cd:59:54:d7:cd:e2:69:d9:e5:da:cb:3a:32:a8:3d:
23:b5:9f:46:f1:18:05:d3:69:f4:04:58:fb:f5:c5:26:5c:a3:
23:9d:8a:9d:94:4d:e3:a1:67:f9:a9:c0:4d:ac:90:77:f4:f2:
07:5c:7d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:42:55 2026 by rpki-client