
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft
File: rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft (raw, json)
Hash identifier: +1Gcr3iC52DV3mIxX54nZeUaoT3KY3RAVXSWbuKCdJI=
Subject key identifier: 31:1B:D2:83:A7:BE:6B:CE:96:8F:61:0B:5A:37:62:97:C8:19:7D:E1
Authority key identifier: AE:16:04:58:72:DD:DA:C3:DC:F1:2F:07:95:CA:D7:0E:4C:09:D9:6C
Certificate issuer: /CN=A912D2CE/serialNumber=AE16045872DDDAC3DCF12F0795CAD70E4C09D96C
Certificate serial: 0D69
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft
Manifest number: 0D5C
Signing time: Tue 22 Sep 2026 17:57:50 +0000
Manifest this update: Tue 22 Sep 2026 17:57:49 +0000
Manifest next update: Tue 29 Sep 2026 17:57:49 +0000
Files and hashes: 1: rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.crl (hash: NJzU0aJ1Yyu9KVqRK4Jp5gm2SCIRrJfSKh3BtUY0+8I=)
2: 25234272DF4311EDA83C7074C4F9AE02.roa (hash: GvywSj55EV1yzQml0fqNzXzPDZF0ADJSCDwlr5eZm/s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.crl
rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 17:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3433 (0xd69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D2CE, serialNumber=AE16045872DDDAC3DCF12F0795CAD70E4C09D96C
Validity
Not Before: Sep 22 17:57:49 2026 GMT
Not After : Sep 29 17:57:49 2026 GMT
Subject: CN=6ab2c19e-bd97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4b:81:c5:1a:79:0a:c5:06:67:b2:1d:17:dc:
7d:24:b1:57:f7:49:b6:f9:c4:65:e1:83:d5:a7:0d:
8e:21:c2:2e:e5:2c:ae:e8:ef:70:4e:56:d3:22:27:
da:b5:59:44:cb:44:f8:4c:46:d6:9a:eb:2b:03:61:
e3:67:c7:4e:3e:ba:10:90:70:e4:6e:2a:83:56:e7:
fa:ba:65:27:37:2d:84:91:df:35:0d:7f:40:8f:25:
54:4d:16:b0:f1:5a:aa:de:12:70:83:0a:3f:f8:bd:
e7:1d:8a:84:68:52:b0:ac:4d:9e:a2:e5:8c:b3:b6:
0a:6c:0f:57:b8:28:40:43:89:24:50:9a:51:71:9a:
fb:f0:3f:0a:61:53:09:d0:0f:b0:4e:6b:57:fb:16:
bf:2d:86:7a:5d:ee:8b:b1:89:dc:3a:68:37:14:9b:
21:3f:06:1c:0c:00:0e:46:58:09:f8:80:46:ae:d3:
ec:40:1a:f1:e0:61:68:0c:d8:22:ff:28:24:f5:2a:
cc:1d:62:b3:79:e7:34:16:54:c5:19:9f:db:b2:45:
6c:89:7d:77:47:89:4e:5e:a3:42:a7:95:58:23:96:
39:35:4f:16:f9:cb:7a:4e:f0:b7:da:96:d4:84:14:
a8:83:30:e2:b5:8c:b1:25:28:4e:f2:5a:44:1f:ae:
b3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:1B:D2:83:A7:BE:6B:CE:96:8F:61:0B:5A:37:62:97:C8:19:7D:E1
X509v3 Authority Key Identifier:
keyid:AE:16:04:58:72:DD:DA:C3:DC:F1:2F:07:95:CA:D7:0E:4C:09:D9:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:f6:af:ca:5f:10:06:be:a9:3a:07:61:4b:be:bc:a8:32:bd:
b5:c7:31:e6:c6:03:0e:a8:ad:17:cc:a2:d5:e5:82:1c:30:f7:
5c:a1:7e:c7:4e:86:2f:3b:23:ca:58:fd:f8:5a:92:e4:df:8a:
a9:47:d6:59:56:31:4a:33:fc:23:8c:fe:8b:25:f1:5b:fd:c2:
d8:bc:6a:cf:38:8b:85:9b:f6:79:b6:86:2a:99:eb:84:a8:51:
a3:2a:db:73:70:f5:d8:59:90:8d:ca:5d:c3:09:d6:25:1a:c1:
b1:ad:1a:a5:f9:05:57:c9:c2:4f:f2:08:9a:35:c9:99:58:b4:
2a:98:96:84:04:ef:07:b6:cd:29:5a:60:68:d6:ff:ef:1f:8d:
66:e7:35:8e:d2:d9:89:4f:d5:91:09:b5:c1:98:22:c1:88:44:
52:03:bb:e8:b8:5a:6a:89:09:f5:98:dd:2d:36:10:25:57:0c:
8e:4f:ae:51:57:04:0f:4a:35:ae:8d:59:32:2e:78:14:be:38:
38:08:0b:8b:82:41:68:16:32:08:d5:3c:8c:5e:21:06:e3:63:
8c:09:0e:1a:9c:69:98:2f:cf:5c:42:23:85:21:43:ee:e1:fb:
5d:b2:93:6d:8a:28:9c:a5:98:9c:fe:41:1a:4e:de:bb:11:4e:
d0:f1:55:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:37:28 2026 by rpki-client