
$ rpki-client -vvf rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.mft
File: _HkvHWLyld9EH6IejzvPJ8phBjA.mft (raw, json)
Hash identifier: tMvQPhjcH/IbAKN1vlS594i66s1LEp79k58sgAVWPWc=
Subject key identifier: FF:DC:29:D0:14:63:25:2B:01:A3:61:1E:A0:29:57:90:7C:E3:61:2C
Authority key identifier: FC:79:2F:1D:62:F2:95:DF:44:1F:A2:1E:8F:3B:CF:27:CA:61:06:30
Certificate issuer: /CN=A913DAC6/serialNumber=FC792F1D62F295DF441FA21E8F3BCF27CA610630
Certificate serial: 014D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_HkvHWLyld9EH6IejzvPJ8phBjA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.mft
Manifest number: 0145
Signing time: Mon 11 May 2026 05:21:06 +0000
Manifest this update: Mon 11 May 2026 05:21:06 +0000
Manifest next update: Mon 18 May 2026 05:21:06 +0000
Files and hashes: 1: _HkvHWLyld9EH6IejzvPJ8phBjA.crl (hash: 1z9n+y52nR61Zr7v4/tKRU57n1Su0mxOHrTw3zhdYi0=)
2: B01E86045EC511EFA4479F42C4F9AE02.roa (hash: zsKXMSkp+PvWPKVbS2PdjPccXHzghWKgI1Bm0STGTmY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.crl
rsync://rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_HkvHWLyld9EH6IejzvPJ8phBjA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 05:21:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 333 (0x14d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913DAC6, serialNumber=FC792F1D62F295DF441FA21E8F3BCF27CA610630
Validity
Not Before: May 11 05:21:06 2026 GMT
Not After : May 18 05:21:06 2026 GMT
Subject: CN=6a016742-91fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:78:d0:a9:75:18:32:7b:70:70:db:53:46:fa:
0a:9c:fb:eb:51:e8:25:49:82:a9:60:04:8b:25:65:
aa:4e:f5:fe:bb:7f:34:5b:b4:5d:f1:eb:32:49:3a:
78:87:d6:7a:cb:ca:96:c4:7f:74:1d:fa:2c:1e:5e:
43:41:93:61:22:f4:74:4d:97:f6:1e:e4:15:07:35:
12:aa:c2:19:3e:ac:52:e3:86:0d:c0:c7:b0:72:45:
02:b8:8b:26:14:fe:21:b7:25:c8:19:99:07:31:d5:
60:c2:07:35:d7:13:29:ae:40:9d:4b:99:25:b1:1f:
02:36:21:ed:be:72:79:1b:53:bb:5c:da:cb:7d:26:
56:cf:96:27:a2:7f:6a:de:59:a8:04:08:32:49:2b:
77:0c:ef:3d:5c:34:6c:98:db:10:cf:a6:18:83:cc:
a4:c3:9c:4b:91:02:2b:3a:d4:74:fc:0b:bc:8c:6d:
62:28:a7:d8:b2:c2:c0:6f:73:4d:ae:d9:b8:16:26:
d4:89:08:ce:d1:d8:7b:ab:bf:0c:23:a1:80:bd:3d:
99:98:45:1d:08:73:d8:49:80:29:2d:9a:5a:ab:63:
68:70:f3:e3:74:8d:4a:f0:57:5e:81:44:58:c7:2f:
85:dd:0f:0e:b8:0c:3b:f0:fc:3b:7d:30:54:e6:d5:
a8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:DC:29:D0:14:63:25:2B:01:A3:61:1E:A0:29:57:90:7C:E3:61:2C
X509v3 Authority Key Identifier:
keyid:FC:79:2F:1D:62:F2:95:DF:44:1F:A2:1E:8F:3B:CF:27:CA:61:06:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_HkvHWLyld9EH6IejzvPJ8phBjA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:0e:7a:a4:ef:a7:c8:ea:8e:db:b3:61:4b:72:c8:66:ce:73:
84:0f:02:ac:3c:61:9c:92:f8:e4:8a:8e:9d:70:33:01:89:83:
af:88:0d:35:18:03:70:1d:41:d3:1c:f3:20:94:e7:82:19:db:
54:90:e3:8f:6e:31:8c:ec:26:3d:2b:68:be:67:94:75:e8:8d:
a9:e9:55:29:e5:8a:48:19:fd:f6:10:24:84:2f:17:dc:f4:10:
b4:8c:95:36:b6:16:74:b6:bb:f6:df:b5:d4:d4:cb:17:88:5f:
19:2e:9d:bb:fc:f2:22:b6:4b:b5:6e:41:09:22:ca:4f:4e:52:
55:7f:4c:c4:d3:04:c5:7b:1e:e7:45:17:b1:b0:89:dd:55:bc:
46:87:6c:00:bb:7d:f4:0a:ca:70:b8:85:33:be:c2:72:ef:c2:
ef:70:b7:b6:21:df:b8:f9:c2:0e:cb:18:1b:19:62:d8:43:0d:
12:e3:fa:70:f3:5a:34:e0:43:eb:95:92:b3:02:d4:b7:1f:c3:
03:36:2d:16:84:95:73:ac:b3:29:5a:d6:19:48:ce:7b:de:9b:
7d:e6:d2:56:99:70:8d:81:37:f9:48:32:f7:3e:0f:b0:60:8c:
0e:2c:8c:16:24:f3:12:b4:05:4b:03:06:0e:66:44:5e:6b:fa:
d7:f5:cd:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:20:21 2026 by rpki-client