
$ rpki-client -vvf rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft
File: h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft (raw, json)
Hash identifier: thJQs8dvudPEeuun1tdeEiSyfqCitn2lAqOUFIcgddY=
Subject key identifier: 3E:AC:C2:17:F9:C0:5C:8D:CC:0F:E2:40:61:89:68:9C:D2:4D:26:9C
Authority key identifier: 87:95:4C:02:31:CA:AC:B2:BE:2D:FD:B5:67:C7:4A:F5:EC:B7:5B:0C
Certificate issuer: /CN=A916BCDF/serialNumber=87954C0231CAACB2BE2DFDB567C74AF5ECB75B0C
Certificate serial: 12F3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft
Manifest number: 12CF
Signing time: Tue 12 May 2026 17:04:54 +0000
Manifest this update: Tue 12 May 2026 17:04:54 +0000
Manifest next update: Tue 19 May 2026 17:04:54 +0000
Files and hashes: 1: h5VMAjHKrLK-Lf21Z8dK9ey3Www.crl (hash: qosWij4F5ufxnygx3IMK/GK8x4UzAnqu7sewl9sxTIM=)
2: 3BA64F0AF22611F094D5D2AE526F56BC.roa (hash: gjQ8EjTh4YTn2TSGcxeqBGmNj2WHRb5bDlBbyu/0FTk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.crl
rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:04:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4851 (0x12f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916BCDF, serialNumber=87954C0231CAACB2BE2DFDB567C74AF5ECB75B0C
Validity
Not Before: May 12 17:04:54 2026 GMT
Not After : May 19 17:04:54 2026 GMT
Subject: CN=6a035db6-5b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b5:10:18:a8:5a:b1:51:fd:b1:df:44:d6:c3:
d2:e7:f5:db:88:7b:9e:37:2b:bf:6e:4c:e3:77:b3:
ac:11:dc:5a:76:2a:d4:79:3e:c5:e8:dc:8b:0f:c3:
58:9e:13:b1:bb:83:c2:a2:e8:17:ad:a4:4e:46:05:
fe:d9:b2:bd:98:b4:bf:3b:f5:47:7e:76:f3:f9:6f:
70:9a:3b:71:7c:6f:1e:64:c7:af:74:97:b2:74:67:
c0:f2:b0:ec:e7:c2:08:db:38:ca:cc:e4:0b:dd:f6:
fe:ed:66:65:09:7c:a0:6a:b4:aa:57:7d:16:f5:f2:
bb:7f:cb:a2:68:d3:8a:85:61:c2:d2:3b:82:74:4a:
d1:a6:9a:4b:4e:88:21:49:0d:39:ab:0a:ea:27:95:
fe:2b:ea:53:e7:1d:c6:7c:88:75:3e:cb:5d:88:b2:
0e:e2:9b:f0:59:e9:0a:a3:b8:78:9e:11:d4:df:c1:
33:60:45:35:91:6a:b5:58:3a:78:74:23:b3:c9:fa:
56:89:11:d4:65:0e:c4:50:e0:98:8a:10:b1:3b:5a:
e7:aa:8c:56:c1:5e:b0:c6:d3:be:e0:f4:42:cb:f9:
35:9d:d8:7c:f2:a0:54:53:c9:66:8e:93:5a:05:f9:
42:20:36:28:42:4e:0d:84:0a:24:c5:b6:39:49:ba:
20:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:AC:C2:17:F9:C0:5C:8D:CC:0F:E2:40:61:89:68:9C:D2:4D:26:9C
X509v3 Authority Key Identifier:
keyid:87:95:4C:02:31:CA:AC:B2:BE:2D:FD:B5:67:C7:4A:F5:EC:B7:5B:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:39:b4:50:ac:9e:5d:e4:73:62:01:d0:c5:6a:09:92:a7:84:
85:aa:99:b1:16:e6:9b:f8:6c:50:41:69:89:d5:86:df:68:3e:
f5:12:bf:a8:52:85:b0:94:43:66:a9:81:5c:2c:c3:0e:65:32:
dd:23:16:3c:de:09:e6:43:12:72:33:a8:0f:5a:bd:3f:7e:8a:
3c:02:6e:59:58:af:75:89:35:85:6a:5b:48:9d:bd:6c:48:f6:
fa:3c:4a:6e:2f:e5:00:5f:6b:d5:69:00:f7:bd:d2:f2:9f:24:
06:c1:93:cb:15:9e:c8:24:b2:f4:c5:7c:5c:f6:f8:a9:d9:b9:
4e:5c:21:16:35:1e:a2:a0:0b:fd:d1:72:b9:74:77:24:f2:20:
a3:37:3d:45:2a:21:f2:08:1d:d6:0f:d7:80:35:11:83:45:c2:
b0:e6:a3:0d:c3:03:62:0f:cd:ff:60:a2:cb:8d:24:36:4a:50:
f2:e0:fe:fc:09:c8:6d:51:6d:b5:13:d9:a4:5b:0e:27:89:64:
0e:d1:ab:75:0a:0e:db:ab:2c:cd:b0:a8:b2:97:27:8b:f2:ce:
aa:c4:8e:af:fe:84:d1:1b:d6:0f:45:36:44:a1:2a:4e:b5:eb:
e7:07:8c:c3:72:ec:fc:ea:a2:f6:0e:94:b8:f1:92:84:0e:72:
21:71:6a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:55:24 2026 by rpki-client