
$ rpki-client -vvf rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft
File: SHy2MxcaDd84rLtq0e2K5pZVhgo.mft (raw, json)
Hash identifier: IpS7tQUw6i87BVRjd9d5G7pSPyyiLEYMkVBT6vtWwH8=
Subject key identifier: F8:DB:96:26:92:38:EA:AD:89:C8:93:08:2C:6F:3A:36:8E:19:0F:92
Authority key identifier: 48:7C:B6:33:17:1A:0D:DF:38:AC:BB:6A:D1:ED:8A:E6:96:55:86:0A
Certificate issuer: /CN=A916899E/serialNumber=487CB633171A0DDF38ACBB6AD1ED8AE69655860A
Certificate serial: 023D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SHy2MxcaDd84rLtq0e2K5pZVhgo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft
Manifest number: 0237
Signing time: Fri 27 Mar 2026 02:06:39 +0000
Manifest this update: Fri 27 Mar 2026 02:06:38 +0000
Manifest next update: Fri 03 Apr 2026 02:06:38 +0000
Files and hashes: 1: SHy2MxcaDd84rLtq0e2K5pZVhgo.crl (hash: c3HAsW4UAVcYXWbJ0m7uJD2/Cm4aiBPf7q2UrzVaZZA=)
2: 96540A72CD0E11ED9A9CAE58C4F9AE02.roa (hash: VUhX4V+uuAXCvJJx8gbFvjg2DTFUtnIh9VNRCqvzwQY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.crl
rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SHy2MxcaDd84rLtq0e2K5pZVhgo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 02:06:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 573 (0x23d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916899E, serialNumber=487CB633171A0DDF38ACBB6AD1ED8AE69655860A
Validity
Not Before: Mar 27 02:06:38 2026 GMT
Not After : Apr 3 02:06:38 2026 GMT
Subject: CN=69c5e62f-dd88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f6:6f:89:35:79:80:c3:98:86:ea:01:77:a4:
85:ae:a8:13:8f:8a:72:2f:1a:05:f9:69:2c:79:e6:
d3:f5:89:e1:fd:c1:6b:6d:d5:87:3f:65:4f:36:d4:
9d:9c:34:33:4f:5b:4f:16:f2:38:f3:2f:5e:61:25:
b0:89:93:35:57:12:f9:69:61:d6:66:79:e8:6d:54:
b9:e4:fc:b9:99:4f:87:6c:b6:60:0e:5f:da:8d:5f:
ee:ec:7d:6c:bc:0b:43:15:5d:0f:84:87:b9:b6:2d:
6d:a9:27:c6:a6:fd:3e:52:ab:ab:c3:41:01:56:bb:
83:f7:00:c3:d0:e2:0a:6d:2e:b9:52:26:be:10:2f:
70:b4:1d:ae:43:d9:12:f3:f4:fc:70:2d:6f:da:a2:
de:76:75:3a:14:7e:ec:3d:ca:55:90:da:28:e9:95:
14:88:cd:99:09:22:12:14:a2:28:f5:54:af:a9:65:
a0:03:ac:8a:b3:35:25:6f:ef:ed:9d:a1:e1:e5:f5:
1e:c2:52:43:3f:72:c3:f3:fc:e9:04:69:cb:32:53:
1e:9c:db:3a:6e:45:0f:09:f0:b5:19:55:01:dc:2a:
15:89:e4:68:bd:c4:5f:1e:7d:e8:f3:2e:ab:1d:f5:
bf:9c:ac:a8:d5:e1:db:ed:29:f2:be:0e:19:d4:70:
48:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:DB:96:26:92:38:EA:AD:89:C8:93:08:2C:6F:3A:36:8E:19:0F:92
X509v3 Authority Key Identifier:
keyid:48:7C:B6:33:17:1A:0D:DF:38:AC:BB:6A:D1:ED:8A:E6:96:55:86:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SHy2MxcaDd84rLtq0e2K5pZVhgo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:62:67:15:33:e9:ef:93:33:6a:cb:90:78:65:18:46:ab:ca:
c5:6b:2a:fc:1c:64:6c:5b:ef:37:74:50:ba:80:cd:a3:0f:35:
af:aa:83:48:59:a1:37:13:f3:eb:d0:7d:6e:e6:0b:a3:a5:fe:
f2:aa:19:2c:de:c8:39:a7:7f:fe:e9:87:95:df:ac:f7:9c:9b:
da:cd:7d:1d:d8:a5:83:dc:18:01:e9:c6:96:9f:5e:a4:e6:73:
9e:59:8e:11:a4:54:bc:54:88:1e:8f:9d:13:89:e8:67:9d:7d:
03:ad:53:30:d9:e8:13:80:99:d6:65:38:6a:e8:9b:ce:89:8b:
03:42:37:ac:c6:59:06:cc:05:95:20:3e:f0:71:dc:e6:77:81:
bd:b8:5a:eb:eb:49:dc:90:3d:c9:5f:cc:a3:2f:a9:f2:89:84:
aa:78:24:71:9b:32:ef:1a:bd:87:1b:55:eb:d2:e3:a8:bc:ea:
02:bb:7f:40:6c:3f:21:5e:2e:f9:62:a9:37:37:0a:f7:5e:4f:
6d:00:03:3e:a5:76:8e:41:98:2c:e7:41:40:0d:18:18:6f:6b:
04:4a:be:f1:ed:6e:c9:9b:9d:03:fe:a8:e7:bc:c8:a8:09:b9:
6e:ac:2e:de:21:67:d8:1a:4a:9c:56:72:2d:b4:62:fd:27:94:
cf:aa:41:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:19:32 2026 by rpki-client