
$ rpki-client -vvf rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft
File: h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft (raw, json)
Hash identifier: RLlqqyxjQwlu9YRke8msE8xyo4SmKtN3YtwQRngj79c=
Subject key identifier: 1F:E9:80:54:A8:88:F0:56:2D:69:2F:BB:E3:7C:E3:AD:0F:5F:97:6B
Authority key identifier: 87:95:4C:02:31:CA:AC:B2:BE:2D:FD:B5:67:C7:4A:F5:EC:B7:5B:0C
Certificate issuer: /CN=A916BCDF/serialNumber=87954C0231CAACB2BE2DFDB567C74AF5ECB75B0C
Certificate serial: 12DB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft
Manifest number: 12B7
Signing time: Thu 26 Mar 2026 17:02:13 +0000
Manifest this update: Thu 26 Mar 2026 17:02:13 +0000
Manifest next update: Thu 02 Apr 2026 17:02:13 +0000
Files and hashes: 1: h5VMAjHKrLK-Lf21Z8dK9ey3Www.crl (hash: TMMg+oSWnDYQwbqa8pg3418iI2XcK//94HwfCQ6b4S0=)
2: 3BA64F0AF22611F094D5D2AE526F56BC.roa (hash: gjQ8EjTh4YTn2TSGcxeqBGmNj2WHRb5bDlBbyu/0FTk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.crl
rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 17:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4827 (0x12db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916BCDF, serialNumber=87954C0231CAACB2BE2DFDB567C74AF5ECB75B0C
Validity
Not Before: Mar 26 17:02:13 2026 GMT
Not After : Apr 2 17:02:13 2026 GMT
Subject: CN=69c56695-8ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:79:cf:78:7b:73:19:ce:9b:8c:a4:ff:66:82:
48:7e:30:ec:22:93:90:27:5a:92:2c:2b:83:f5:56:
f1:df:84:05:2a:13:3a:42:cf:df:bb:a9:36:eb:08:
0c:a3:8e:48:91:8e:ac:d3:ef:a2:89:75:43:19:34:
ae:70:2d:2e:fd:60:8b:a6:15:25:f0:f6:0d:e6:80:
5e:e3:7a:dd:5b:1d:af:dd:a0:f7:da:4a:92:e8:5b:
68:ed:93:09:b0:e9:26:ea:22:62:80:2b:c8:27:9d:
be:d1:08:b1:90:ec:82:80:f5:e2:52:40:38:41:c7:
e4:13:ba:19:45:ab:8a:f6:41:94:74:bb:f7:03:f4:
16:49:e2:73:81:42:c9:60:74:85:2a:6f:e5:39:91:
a3:3a:6e:3a:54:bb:c7:c4:50:34:ef:36:19:cf:2a:
b4:d5:46:ec:48:f4:91:fc:82:6d:cb:91:b4:77:07:
28:d5:63:e7:63:cd:fe:a8:65:c7:12:74:b6:80:28:
5b:29:3d:5c:4f:01:4e:a0:49:99:f9:98:f1:d5:1c:
0f:27:13:9f:16:65:74:71:f7:f3:f4:88:a3:92:b7:
29:8c:5a:30:ab:dc:6a:22:c2:a4:48:d4:c3:b4:a3:
ce:58:8a:88:d2:46:f5:9a:63:5e:93:4d:96:b4:83:
82:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:E9:80:54:A8:88:F0:56:2D:69:2F:BB:E3:7C:E3:AD:0F:5F:97:6B
X509v3 Authority Key Identifier:
keyid:87:95:4C:02:31:CA:AC:B2:BE:2D:FD:B5:67:C7:4A:F5:EC:B7:5B:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:0a:75:af:45:35:7f:2d:f1:6f:be:26:52:61:cc:c7:5f:99:
78:23:69:f8:c7:43:c5:7a:80:97:10:73:b0:97:65:8d:7c:84:
54:a0:4b:b0:81:04:90:28:f1:fc:28:45:1f:f0:59:e2:ec:62:
7f:86:01:cb:a2:a2:2f:53:02:0b:1f:f9:2c:f3:52:93:c7:56:
51:ac:eb:88:15:1d:03:2f:3c:72:85:97:fd:27:b0:bc:14:84:
18:39:ed:32:86:7f:4a:fe:32:a7:bb:1e:69:45:d0:ac:ac:84:
1e:b3:8e:5a:38:56:f1:e6:b7:ce:24:58:05:8c:32:93:74:7e:
0b:3e:3d:60:4e:3b:2c:a4:ce:85:7f:5c:5a:dd:35:77:b0:94:
96:b4:72:1b:d7:b8:cb:35:57:29:12:c7:2d:6f:c4:a4:4b:0a:
34:cd:f4:58:bc:08:4f:9c:82:b2:79:2f:6e:41:41:b5:e0:ad:
60:64:f4:4b:2e:c3:e1:fd:ca:cf:5e:35:87:9b:23:ab:8b:f5:
00:81:d7:ea:f3:8f:41:1f:16:e6:07:59:36:ca:69:7b:16:53:
23:b4:5c:8f:c7:bc:8d:bf:6d:71:a9:87:a0:74:e1:f7:14:0d:
99:b2:6b:23:f3:28:f1:ab:14:17:f8:5e:60:c6:e9:35:d0:80:
fc:d0:5e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:50:16 2026 by rpki-client