
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft
File: h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft (raw, json)
Hash identifier: h0gp6l01ZQDqboyKpZcEhddDvPgCHKrCUC+kh/zmUC4=
Subject key identifier: A4:0B:DD:F6:31:DE:62:55:4A:56:7D:1D:44:94:23:5B:99:31:8E:F2
Authority key identifier: 87:95:4C:02:31:CA:AC:B2:BE:2D:FD:B5:67:C7:4A:F5:EC:B7:5B:0C
Certificate issuer: /CN=A916BCDF/serialNumber=87954C0231CAACB2BE2DFDB567C74AF5ECB75B0C
Certificate serial: 1337
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft
Manifest number: 1313
Signing time: Tue 22 Sep 2026 16:57:11 +0000
Manifest this update: Tue 22 Sep 2026 16:57:10 +0000
Manifest next update: Tue 29 Sep 2026 16:57:10 +0000
Files and hashes: 1: h5VMAjHKrLK-Lf21Z8dK9ey3Www.crl (hash: K8NemAQtTVpmIc1TfdlOKPG0n/uOmGUQKQ5U/O0XoHw=)
2: 3BA64F0AF22611F094D5D2AE526F56BC.roa (hash: gjQ8EjTh4YTn2TSGcxeqBGmNj2WHRb5bDlBbyu/0FTk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.crl
rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 14:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4919 (0x1337)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916BCDF, serialNumber=87954C0231CAACB2BE2DFDB567C74AF5ECB75B0C
Validity
Not Before: Sep 22 16:57:10 2026 GMT
Not After : Sep 29 16:57:10 2026 GMT
Subject: CN=6ab2b367-cd12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:94:6c:29:94:a9:d6:44:0e:ab:a9:de:f5:08:
c7:88:38:b3:d4:83:3e:9d:f5:89:2c:fb:51:17:1e:
42:21:ac:b6:a4:d4:f5:1f:ae:e0:3f:b7:84:70:50:
0e:a5:9c:53:68:02:88:61:ac:46:56:6f:f2:23:5c:
c3:db:14:30:5d:14:67:a2:15:c2:65:63:15:74:d1:
c7:e2:8c:44:39:98:bd:6a:1b:e9:fb:ee:d6:7b:18:
02:51:f2:22:27:c3:89:5f:9c:be:5c:d1:18:89:70:
93:66:91:b7:48:75:9d:32:70:5c:a4:d9:ff:5e:89:
0b:e0:d3:2e:ce:b3:1c:dd:b5:06:f8:71:ee:62:2c:
8f:24:4c:70:81:f4:b8:bb:ce:4a:07:29:1e:d2:23:
5a:c8:e8:d9:af:92:16:a9:bc:ac:f4:7c:27:88:69:
e0:b4:b8:93:83:a6:46:b4:87:e6:19:7e:60:7d:56:
10:ee:1b:d1:c0:34:8d:90:ab:10:9c:cd:8c:ce:77:
92:12:40:65:86:ea:6e:14:df:90:9d:b8:3d:87:e5:
bc:a7:2f:11:fc:f0:8b:30:24:99:c7:c4:ba:6a:4b:
c6:42:74:40:2b:56:75:20:de:0f:00:25:95:58:e7:
2d:fe:6f:2e:69:50:85:be:71:f8:85:20:11:40:7f:
1c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:0B:DD:F6:31:DE:62:55:4A:56:7D:1D:44:94:23:5B:99:31:8E:F2
X509v3 Authority Key Identifier:
keyid:87:95:4C:02:31:CA:AC:B2:BE:2D:FD:B5:67:C7:4A:F5:EC:B7:5B:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:d3:63:29:9a:5a:fb:c3:c5:24:fb:a2:c3:fa:5d:08:e0:0a:
c4:80:26:1e:cf:9b:78:68:29:0b:b6:78:22:66:46:66:e8:15:
95:39:97:47:74:75:16:b8:a5:28:d1:f3:fc:80:1d:7f:7c:5e:
6e:2e:45:aa:01:29:5b:c6:dc:e1:5a:66:8b:84:b7:e3:5a:e1:
2a:7f:5c:54:ce:fc:a2:9b:7d:f1:ce:6e:91:1b:0b:8a:1c:fa:
5c:c8:6a:b9:06:55:01:61:6a:2a:04:fd:25:d4:84:d2:ed:0e:
68:ec:a0:7d:d6:d7:be:1b:b0:7a:27:6d:84:d5:92:d3:2d:0e:
38:29:31:c9:61:7f:15:c3:75:f5:6b:be:3d:de:02:77:40:fc:
52:78:cb:1a:1a:8d:3b:2d:ad:02:06:82:bd:96:98:46:b2:63:
c7:2b:05:d1:d5:a1:bc:f2:5a:1a:ee:6b:ea:f0:a8:3e:a1:67:
4f:7d:4e:d2:6f:02:70:5d:7f:96:58:e9:47:b1:fe:7d:9e:7d:
7d:45:91:62:dd:57:1f:be:97:84:8c:f1:9e:7a:d8:8c:f8:22:
41:30:c1:6a:ff:53:c9:e2:f1:de:c8:63:d8:5c:de:f8:0f:89:
48:18:7a:4e:46:2b:cf:40:f9:9d:0a:77:87:23:ba:be:61:15:
f1:57:dc:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:37:32 2026 by rpki-client