
$ rpki-client -vvf rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft
File: h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft (raw, json)
Hash identifier: 9sNHydRuxZJGDL4xiWlUwp/AL3FaDvYe3v9aJ62i3Tc=
Subject key identifier: 14:64:F4:31:D4:64:DC:FC:2D:EC:6E:1D:F8:AA:A8:94:3C:B1:06:82
Authority key identifier: 87:95:4C:02:31:CA:AC:B2:BE:2D:FD:B5:67:C7:4A:F5:EC:B7:5B:0C
Certificate issuer: /CN=A916BCDF/serialNumber=87954C0231CAACB2BE2DFDB567C74AF5ECB75B0C
Certificate serial: 1317
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft
Manifest number: 12F3
Signing time: Wed 22 Jul 2026 17:09:35 +0000
Manifest this update: Wed 22 Jul 2026 17:09:34 +0000
Manifest next update: Wed 29 Jul 2026 17:09:34 +0000
Files and hashes: 1: h5VMAjHKrLK-Lf21Z8dK9ey3Www.crl (hash: cibjH4xqa5goU0woO+Yrwrke1SPcA0+PQ2INSXj+V0M=)
2: 3BA64F0AF22611F094D5D2AE526F56BC.roa (hash: gjQ8EjTh4YTn2TSGcxeqBGmNj2WHRb5bDlBbyu/0FTk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.crl
rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:09:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4887 (0x1317)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916BCDF, serialNumber=87954C0231CAACB2BE2DFDB567C74AF5ECB75B0C
Validity
Not Before: Jul 22 17:09:34 2026 GMT
Not After : Jul 29 17:09:34 2026 GMT
Subject: CN=6a60f94f-5a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4f:75:1e:07:b8:0c:53:4e:fb:31:45:7f:a9:
d4:9d:e5:43:8c:76:d2:7e:7f:d6:28:c2:3a:95:30:
a9:f7:83:9e:60:09:19:90:60:b9:ba:9e:03:74:5b:
a8:92:8b:99:50:87:d7:bf:4c:98:79:00:91:07:52:
f8:2e:f0:77:10:5e:cc:a4:d6:25:d8:7f:fd:b4:48:
07:fb:22:74:f0:a1:5f:24:2f:4f:45:c5:26:12:ae:
5a:db:e7:29:0b:cb:24:83:9a:49:ca:fb:63:29:32:
fc:50:32:25:5d:04:4a:f8:71:bb:d9:81:36:47:d3:
56:49:66:99:71:e9:ae:43:26:22:d4:ec:75:05:8d:
49:98:0f:07:4a:f4:86:a9:5b:74:30:9b:63:b0:98:
80:c9:cc:7a:3e:ed:38:54:74:89:b3:93:89:6e:db:
84:32:bb:5b:31:f5:0c:bb:ba:e7:ec:c4:bc:73:01:
b4:2d:a7:a6:7f:7a:f0:d2:70:f3:c2:4d:02:5f:24:
42:a5:02:9c:8a:39:93:a4:74:a8:6c:e5:68:c1:0d:
14:f4:96:e8:0b:06:7f:ae:e6:4c:a5:d0:c3:1a:94:
17:b7:0b:f8:56:65:25:8c:ca:4f:0a:0e:d2:fe:3f:
f8:81:6c:a6:20:18:90:03:1f:31:ce:47:ab:40:82:
fa:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:64:F4:31:D4:64:DC:FC:2D:EC:6E:1D:F8:AA:A8:94:3C:B1:06:82
X509v3 Authority Key Identifier:
keyid:87:95:4C:02:31:CA:AC:B2:BE:2D:FD:B5:67:C7:4A:F5:EC:B7:5B:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:86:aa:ba:ef:b0:cf:eb:4f:c5:da:33:03:51:57:3f:51:3d:
55:f7:2c:5a:b2:a6:d1:c1:99:41:d7:c0:47:b1:eb:a8:99:fe:
9f:3f:2e:7b:f3:1c:6b:ac:ab:10:b7:41:ad:a9:88:c3:c4:84:
08:5c:7f:82:ed:51:43:1f:1a:f6:b3:ec:4a:ea:f5:69:6a:c1:
b4:cd:16:e6:79:0a:0f:90:69:f9:b5:ea:b0:06:45:4b:0c:b7:
a5:54:5f:26:82:95:8e:a2:89:73:78:ba:a1:8e:f0:39:c4:ab:
0d:5a:a2:a8:70:ff:a3:80:4e:06:d9:21:95:f5:61:f5:80:c3:
2e:6c:c0:e3:78:33:58:c8:07:30:46:7e:fa:6b:3f:cc:ac:80:
bb:90:fc:7e:70:30:bf:cf:f9:0e:cf:7d:44:92:35:52:17:22:
57:fa:44:8e:2b:82:22:fb:e5:7c:b1:1a:90:90:b9:89:44:03:
c5:bc:11:28:d9:dd:e1:1e:2f:c5:68:a8:60:98:43:1a:40:23:
f2:5d:19:b9:b7:d9:fc:3b:3b:c1:16:f7:ae:21:4e:3d:cb:38:
0b:8e:03:a1:04:1a:b8:17:7d:b0:38:3c:92:e0:05:c9:0e:18:
61:ec:76:48:1d:7f:19:e2:16:81:0e:9e:93:48:25:5f:59:c9:
bf:f6:12:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:47:31 2026 by rpki-client