
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft
File: rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft (raw, json)
Hash identifier: mKD7vygoj1PXgHacd1qLmCULrM4bFu9sdYtLhv909Cc=
Subject key identifier: 4E:E0:C2:96:D7:F2:41:9A:7F:E1:1C:B2:06:08:5E:1E:58:3B:5F:26
Authority key identifier: AE:16:04:58:72:DD:DA:C3:DC:F1:2F:07:95:CA:D7:0E:4C:09:D9:6C
Certificate issuer: /CN=A912D2CE/serialNumber=AE16045872DDDAC3DCF12F0795CAD70E4C09D96C
Certificate serial: 0D0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft
Manifest number: 0CFF
Signing time: Tue 24 Mar 2026 18:01:47 +0000
Manifest this update: Tue 24 Mar 2026 18:01:47 +0000
Manifest next update: Tue 31 Mar 2026 18:01:47 +0000
Files and hashes: 1: rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.crl (hash: ck2GhirpR+LmayNlijZxLcaC24ogFRKXM9689p1Cy2g=)
2: 25234272DF4311EDA83C7074C4F9AE02.roa (hash: GvywSj55EV1yzQml0fqNzXzPDZF0ADJSCDwlr5eZm/s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.crl
rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3340 (0xd0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D2CE, serialNumber=AE16045872DDDAC3DCF12F0795CAD70E4C09D96C
Validity
Not Before: Mar 24 18:01:47 2026 GMT
Not After : Mar 31 18:01:47 2026 GMT
Subject: CN=69c2d18b-d86b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:72:64:12:94:e2:c2:5f:16:a5:6a:7b:d5:d2:
08:4a:26:77:9f:09:d0:e3:9c:b6:86:43:47:6f:a3:
0b:20:fc:d5:68:52:86:b5:ad:5d:6f:96:c3:1e:7c:
0d:d7:cc:e9:c4:98:42:e0:a5:1c:d6:f7:a1:66:6d:
4a:81:f6:c8:97:86:e6:ee:0e:9e:a7:9a:eb:cb:a7:
0f:3f:d5:0c:ee:37:0a:f6:0a:9b:40:6a:48:36:b8:
42:14:8b:98:5a:f6:23:05:18:3d:c2:7f:1b:c7:40:
a2:9b:28:d6:99:a6:35:7d:1d:73:75:ae:40:da:3b:
44:57:de:46:d9:4d:19:1b:e5:28:54:e1:6b:10:45:
52:0b:ea:26:df:d6:cb:b2:69:f6:c4:39:15:d8:dc:
34:12:b3:bd:d5:bd:61:4a:50:17:9f:d0:22:87:71:
8a:1f:a0:4d:4f:c5:8e:7d:07:58:62:a9:e9:47:65:
2a:bf:ba:98:cf:a0:c7:fd:4f:31:8d:1d:22:9d:c6:
5b:08:54:3e:d3:dc:36:39:28:e4:ad:20:12:dd:9b:
09:3c:3f:72:5c:58:25:dd:6f:27:62:03:f7:3d:04:
46:98:0c:f3:db:a7:9b:53:fe:67:39:30:d3:d1:e2:
34:1c:a4:44:a4:5d:b4:ad:17:76:b2:1d:e4:1d:8d:
75:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E0:C2:96:D7:F2:41:9A:7F:E1:1C:B2:06:08:5E:1E:58:3B:5F:26
X509v3 Authority Key Identifier:
keyid:AE:16:04:58:72:DD:DA:C3:DC:F1:2F:07:95:CA:D7:0E:4C:09:D9:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:c5:61:f5:28:6a:48:40:ec:60:41:31:68:74:47:58:ae:43:
f3:a9:d7:0c:70:f7:09:36:5f:64:d5:11:af:98:f2:34:dc:f8:
30:c3:75:d7:2e:5d:7e:b1:bd:c6:21:c4:f1:f4:76:ec:72:b4:
8a:bb:c0:14:fd:19:a9:ab:a1:e0:63:6c:dc:88:ee:1f:0e:47:
ce:e5:e0:ce:6b:67:8e:14:a6:c0:c6:78:d0:72:04:b0:a8:41:
51:df:7c:c7:8a:fe:e1:b1:c4:cc:46:e9:db:05:68:14:46:94:
89:35:98:f0:3a:b0:a4:b3:ab:bd:be:a6:7d:a4:4b:cc:a6:14:
40:be:74:98:a8:30:56:49:65:e5:a0:fd:dc:0b:4a:32:d5:5e:
9b:19:0b:3c:2a:e3:7c:b5:54:65:ad:b6:1a:53:ad:cb:f0:32:
85:35:41:42:b1:1c:7f:6c:b8:49:89:44:c5:79:c2:17:f8:c3:
79:7f:a9:f5:ae:cd:a4:f1:e9:4a:15:f6:39:11:37:5c:d5:de:
ec:66:45:57:fc:2e:e4:4f:cb:07:92:51:a6:c4:6f:4f:fe:78:
87:35:79:80:bf:58:ba:ee:ed:b7:90:7b:e1:d6:16:02:24:f3:
4d:43:bd:93:83:02:1e:0d:bb:d6:41:9c:e7:8f:f1:19:a4:a7:
23:bd:a5:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:51:04 2026 by rpki-client