
$ rpki-client -vvf rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.mft
File: H_jK4i0tckq70cLRJft9t7T4Sv8.mft (raw, json)
Hash identifier: 2OhJhOOWuJgakO9flUBtV4lhoLUXK7DOwSCGYRwLLh8=
Subject key identifier: E7:1E:27:35:37:A3:57:91:D3:30:19:8C:85:A9:0C:6F:6E:46:47:0A
Authority key identifier: 1F:F8:CA:E2:2D:2D:72:4A:BB:D1:C2:D1:25:FB:7D:B7:B4:F8:4A:FF
Certificate issuer: /CN=A915670F/serialNumber=1FF8CAE22D2D724ABBD1C2D125FB7DB7B4F84AFF
Certificate serial: 24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_jK4i0tckq70cLRJft9t7T4Sv8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.mft
Manifest number: 22
Signing time: Wed 25 Mar 2026 08:01:51 +0000
Manifest this update: Wed 25 Mar 2026 08:01:51 +0000
Manifest next update: Wed 01 Apr 2026 08:01:51 +0000
Files and hashes: 1: H_jK4i0tckq70cLRJft9t7T4Sv8.crl (hash: VYa3buhuJOrRFNKaJERgb0BUgePtVgTRjsATcvbPuNY=)
2: E342A7D0F9D911F0908C8513676F56BC.roa (hash: rFk76m5fW9CYOpE5VZsRNzUgbtpqshwPbQBMeshiV/E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.crl
rsync://rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_jK4i0tckq70cLRJft9t7T4Sv8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36 (0x24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915670F, serialNumber=1FF8CAE22D2D724ABBD1C2D125FB7DB7B4F84AFF
Validity
Not Before: Mar 25 08:01:51 2026 GMT
Not After : Apr 1 08:01:51 2026 GMT
Subject: CN=69c3966f-b14a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3d:71:ec:8e:a1:62:f1:fc:46:2f:24:c1:8e:
84:2c:96:08:8e:cf:47:4c:55:52:36:4b:07:97:35:
0f:09:cb:11:3e:d3:7f:15:62:a7:80:b5:a1:7d:5e:
27:3c:1c:f2:e9:ad:46:25:6d:7c:7c:28:4b:b4:3a:
fe:82:68:18:48:01:93:fa:a9:53:5e:c0:49:27:79:
06:9a:b7:eb:aa:37:82:a8:12:c8:7c:51:03:77:b6:
d4:4f:23:cc:60:77:07:4b:c9:f2:9f:5a:73:03:ac:
93:fb:65:07:fa:3f:80:44:9a:60:45:1f:10:15:56:
b2:4e:63:2d:9c:ea:e1:61:8c:51:0b:d2:99:73:ae:
9a:51:e0:e9:12:4b:44:3a:e1:6f:7c:98:e2:c8:f4:
a8:b2:52:4a:bf:a2:26:d3:48:c1:1d:b6:dc:ce:23:
66:2e:92:b7:80:00:05:ae:cc:2c:0c:52:a4:f8:aa:
33:b5:e6:4a:2f:98:a0:9c:95:a5:6a:e6:ea:0f:a5:
40:67:52:81:a9:4c:38:d8:e2:ad:16:88:ec:97:18:
b0:84:60:24:e7:75:fc:2f:31:b0:49:71:8f:ac:56:
91:f4:62:07:7d:c8:8b:fc:63:65:14:91:e0:33:54:
0f:35:d7:e0:d5:27:55:0e:03:c2:af:0a:f8:05:09:
23:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:1E:27:35:37:A3:57:91:D3:30:19:8C:85:A9:0C:6F:6E:46:47:0A
X509v3 Authority Key Identifier:
keyid:1F:F8:CA:E2:2D:2D:72:4A:BB:D1:C2:D1:25:FB:7D:B7:B4:F8:4A:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_jK4i0tckq70cLRJft9t7T4Sv8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:9e:49:b9:5c:ba:28:ba:68:4f:41:16:16:2f:1d:69:91:83:
9c:c8:ab:fc:2a:87:20:ae:e2:6b:18:be:a5:b0:10:a4:09:f0:
68:a4:41:0a:08:6e:7d:9d:b1:94:22:6b:e4:c1:aa:74:a5:3b:
c9:a1:49:b0:ed:2b:47:ce:b0:b5:7d:e3:84:d5:9e:d0:a4:b5:
47:15:ba:7e:eb:cc:38:9e:dd:9f:f8:7a:ce:1f:d5:88:a8:9b:
6c:09:68:ea:d7:bc:b2:57:d3:db:31:32:18:83:1a:92:71:ac:
08:4b:15:b6:29:06:14:d3:e1:1b:48:aa:f9:18:5b:fd:0c:74:
09:eb:55:61:fa:cc:2e:71:c6:33:27:70:b2:2f:ac:94:d3:8d:
2c:ea:2b:3a:fb:0e:8c:6f:d5:76:a6:51:be:ec:6a:e0:4f:12:
0d:1e:db:37:66:f4:ff:5a:f9:11:f4:c7:a2:04:cb:d4:12:91:
97:0c:ca:85:64:c0:42:aa:97:23:77:9a:22:18:b9:bc:1c:ad:
c7:81:04:fb:05:dc:47:10:bd:76:3d:5c:4f:09:d9:13:d6:4a:
a9:7b:eb:ad:a9:d3:9a:0f:1e:29:e4:99:69:72:91:6f:a6:46:
28:79:b7:d6:5f:07:fb:4a:c4:b9:af:c8:d9:93:6f:b9:fc:b3:
51:a1:d2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:22:14 2026 by rpki-client