
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.mft
File: hEd6PPADq7y8hU4_QMh8vPKhWN8.mft (raw, json)
Hash identifier: sF2Mcp34wqwMVU1gH/IdPw/JeqIVgB3K/oNrLWpDQ9s=
Subject key identifier: B3:05:FB:00:88:82:2F:2E:B4:DA:C9:2C:5E:C6:1D:BB:F2:70:81:46
Authority key identifier: 84:47:7A:3C:F0:03:AB:BC:BC:85:4E:3F:40:C8:7C:BC:F2:A1:58:DF
Certificate issuer: /CN=A916A505/serialNumber=84477A3CF003ABBCBC854E3F40C87CBCF2A158DF
Certificate serial: 05A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEd6PPADq7y8hU4_QMh8vPKhWN8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.mft
Manifest number: 0584
Signing time: Tue 24 Mar 2026 23:01:02 +0000
Manifest this update: Tue 24 Mar 2026 23:01:01 +0000
Manifest next update: Tue 31 Mar 2026 23:01:01 +0000
Files and hashes: 1: hEd6PPADq7y8hU4_QMh8vPKhWN8.crl (hash: /67/0X+6C3J7+fmCH6mQmZz21B75bkkOgC7uW3vy29s=)
2: 8DC3F57A093D11F18DEFD893023D8C67.roa (hash: qvopjIrTWgH5X5t4JmlQUR/xI62bgnHlH5D+8Giwsug=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.crl
rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEd6PPADq7y8hU4_QMh8vPKhWN8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1440 (0x5a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A505, serialNumber=84477A3CF003ABBCBC854E3F40C87CBCF2A158DF
Validity
Not Before: Mar 24 23:01:01 2026 GMT
Not After : Mar 31 23:01:01 2026 GMT
Subject: CN=69c317ad-c6bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:21:05:11:f3:0d:96:8d:2b:57:d7:92:fe:92:
90:07:4b:45:cb:e8:19:3e:8a:00:a9:1a:54:3a:59:
45:6f:24:42:c8:b0:05:ab:33:90:f5:27:6d:b4:f2:
01:4d:69:ce:f9:0d:d5:12:36:e3:ea:57:6d:83:36:
dd:33:cd:ec:49:5b:58:9a:0d:09:5e:73:54:52:24:
5f:a0:9f:ba:88:74:bc:46:8a:f5:5c:c0:a5:5b:5b:
ed:5a:52:f7:87:f1:4e:e9:b8:1b:6c:87:b0:1c:21:
06:70:32:1f:2b:f1:03:8c:ca:87:b1:2a:af:0b:08:
31:48:28:7e:ed:f5:42:58:65:a0:e3:88:cf:ce:4e:
62:0e:90:f8:c0:4b:d1:67:ef:93:33:c2:8a:60:e5:
d7:c5:ad:fe:e7:6d:c3:e4:c9:e7:c6:10:bf:8e:1f:
0b:ba:5e:be:f1:09:a0:20:87:f3:23:2c:16:2c:3b:
50:40:b3:71:e3:cd:9c:35:8c:46:70:cf:c1:b3:b1:
0a:08:91:06:4e:d8:09:0a:fb:d7:d5:ec:b7:9e:e9:
77:45:d9:5c:f7:4a:4c:86:ea:a0:4a:fd:46:e1:bd:
8c:9f:37:b6:55:90:9d:69:87:af:fd:32:86:9e:4b:
49:7b:f3:cd:b8:4d:90:7e:b8:33:0c:f9:c7:53:28:
52:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:05:FB:00:88:82:2F:2E:B4:DA:C9:2C:5E:C6:1D:BB:F2:70:81:46
X509v3 Authority Key Identifier:
keyid:84:47:7A:3C:F0:03:AB:BC:BC:85:4E:3F:40:C8:7C:BC:F2:A1:58:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEd6PPADq7y8hU4_QMh8vPKhWN8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:31:03:8c:2d:0b:81:84:bc:07:d3:3c:5a:a8:c0:82:6b:80:
ed:a9:20:50:f3:78:14:6c:4c:2e:cc:ed:4c:53:95:07:b5:65:
5b:7f:da:e9:45:8d:92:02:0b:6c:37:bc:f8:48:3f:d8:fb:fa:
03:9b:5f:87:be:2d:57:49:b8:d3:7d:d9:18:92:16:c0:46:a6:
2f:c2:1b:67:0d:5a:17:aa:6d:1f:99:06:98:cd:96:f1:02:a8:
2a:cf:0b:2b:6c:2a:4d:40:2c:b7:4d:57:fb:42:5f:11:b1:df:
c8:f1:96:f4:70:c9:7f:d9:31:59:5a:a8:0d:e1:c8:9c:93:3a:
33:f5:0a:07:e8:50:cd:b7:cb:4f:38:29:62:16:fb:33:12:f2:
74:75:60:ce:68:06:b7:52:c3:bf:e4:96:20:83:46:22:a4:70:
c5:60:06:74:bb:ab:93:5a:1e:e6:38:18:21:5d:7e:5f:f8:00:
04:ff:64:d0:5e:b3:05:5d:81:16:e8:6f:ff:67:6c:2d:31:1f:
3f:b0:61:63:4d:14:22:60:c8:b4:4b:a1:3d:12:41:45:ff:f4:
80:5d:e7:94:4c:1c:b1:a1:98:fb:8e:8e:b9:92:37:74:97:12:
db:6b:24:76:04:f6:ac:d4:7f:ce:e7:a6:d1:ee:8a:e1:32:c8:
b8:24:f3:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:40:04 2026 by rpki-client