
$ rpki-client -vvf rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.mft
File: hPqw1oT6rxaVCqyjjm1lOszyWLw.mft (raw, json)
Hash identifier: UG+Wkrp9b5zue70TMWs3mwuVqdXC/TrJSmfb4yFTSxA=
Subject key identifier: 4C:1F:40:6C:7C:99:4C:D7:95:70:6E:F1:2D:E4:91:5D:FB:10:33:51
Authority key identifier: 84:FA:B0:D6:84:FA:AF:16:95:0A:AC:A3:8E:6D:65:3A:CC:F2:58:BC
Certificate issuer: /CN=A914247C/serialNumber=84FAB0D684FAAF16950AACA38E6D653ACCF258BC
Certificate serial: 0BC2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hPqw1oT6rxaVCqyjjm1lOszyWLw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.mft
Manifest number: 0BB9
Signing time: Tue 12 May 2026 19:04:00 +0000
Manifest this update: Tue 12 May 2026 19:04:00 +0000
Manifest next update: Tue 19 May 2026 19:04:00 +0000
Files and hashes: 1: hPqw1oT6rxaVCqyjjm1lOszyWLw.crl (hash: 45APTTwdRf+CkJPXx8By3N9FMtvyRM1ECLP436KfzXw=)
2: E1AB1F92430F11EAA60DB885C4F9AE02.roa (hash: HE9RcAckVDFGxlQ4u3qH1H4zDtKxUzAsKn4dFWVW/9E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.crl
rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hPqw1oT6rxaVCqyjjm1lOszyWLw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:03:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3010 (0xbc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914247C, serialNumber=84FAB0D684FAAF16950AACA38E6D653ACCF258BC
Validity
Not Before: May 12 19:04:00 2026 GMT
Not After : May 19 19:04:00 2026 GMT
Subject: CN=6a0379a0-f95b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f8:c7:48:2d:db:0d:be:95:f9:9a:cd:d9:fd:
c0:81:fe:77:2d:6e:fe:20:4e:92:68:1b:84:ac:af:
f8:c2:53:d8:7f:e1:78:8c:4c:d9:24:5f:d7:39:96:
dc:0c:f2:e3:74:9b:b0:97:35:23:cd:24:99:86:b4:
7d:5e:ca:db:2e:af:9a:59:d7:96:d4:f8:89:aa:ac:
19:8f:75:4e:d8:3c:42:29:86:7c:d5:16:5c:cc:57:
e6:4e:a1:ff:5c:4a:f3:9b:f5:f5:c3:37:7c:49:9e:
ce:61:e8:91:29:b2:7c:ca:b7:8f:89:57:51:7c:8a:
9b:c6:5e:5c:b0:da:9e:6c:92:ff:25:37:91:5e:cc:
9f:d1:8b:95:b9:31:1c:b4:29:52:c1:f5:39:02:02:
ca:f8:c2:d4:d3:aa:36:a1:98:f2:7b:a3:1f:57:33:
38:ef:11:5b:03:4a:d1:22:a7:bb:ec:fb:24:c3:6d:
50:07:d9:8f:75:69:79:c9:bb:63:6a:a3:83:50:b1:
cd:a2:74:5c:95:a9:47:35:af:4a:ea:3a:6b:68:c6:
b2:f5:fd:ab:90:56:49:6f:1c:b5:8d:97:0a:06:95:
34:42:5b:3f:ce:89:51:0c:2c:26:35:22:6e:23:7a:
42:30:9b:23:b2:93:6f:b6:10:aa:33:1e:b3:38:a4:
f4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:1F:40:6C:7C:99:4C:D7:95:70:6E:F1:2D:E4:91:5D:FB:10:33:51
X509v3 Authority Key Identifier:
keyid:84:FA:B0:D6:84:FA:AF:16:95:0A:AC:A3:8E:6D:65:3A:CC:F2:58:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hPqw1oT6rxaVCqyjjm1lOszyWLw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:7f:53:7c:ca:78:ac:6c:cd:bc:8e:3f:74:2f:b5:ae:e3:e6:
3c:53:ed:7a:f8:c1:90:8f:eb:5d:c3:f6:5e:a7:3d:ba:56:7e:
2f:72:a5:7f:5f:1d:2a:a4:98:bb:02:a3:7b:e2:51:52:2b:f6:
d0:64:0e:9d:58:00:bc:cf:11:bd:8f:d2:5c:f4:81:37:5c:dc:
55:3f:4a:00:d6:4a:57:9c:ef:52:44:e7:8a:60:53:5a:17:91:
5a:d6:b2:c2:10:9c:b1:17:cd:0c:b0:30:78:ed:81:fc:3b:42:
cd:a5:9f:56:24:85:8e:22:a5:01:48:2a:cf:58:5c:39:2a:f9:
0b:8a:e3:55:ab:63:70:03:47:ec:03:9b:aa:e1:7b:5b:eb:f8:
76:9c:bc:16:47:d8:43:12:1a:aa:dd:99:60:3e:d4:2b:a4:df:
55:11:5a:79:58:70:df:0f:5b:76:e0:07:47:54:92:8c:70:4b:
8f:a0:b1:7e:fd:6b:12:01:64:ec:20:59:a4:07:4c:9c:2f:ac:
2d:f4:29:3e:2e:fb:86:14:ff:c1:1b:93:7f:b6:6c:5b:05:b6:
67:46:64:42:2a:fb:ce:d5:ee:05:52:75:b2:d8:0f:77:7e:26:
2a:a8:7a:1b:54:6d:bd:af:5b:23:4f:56:d5:88:ee:49:b6:37:
bb:b2:ac:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:37:37 2026 by rpki-client