
$ rpki-client -vvf rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft
File: sHoKQBnouCACE78tzPxocPheBGY.mft (raw, json)
Hash identifier: YhxpxT13NsDg/+nKnUh5v1YSolHbLOYcJ1XQYariZEE=
Subject key identifier: A6:A1:7E:94:B3:74:B1:5A:BA:5A:AC:3F:F5:E5:99:B5:46:46:3F:8F
Authority key identifier: B0:7A:0A:40:19:E8:B8:20:02:13:BF:2D:CC:FC:68:70:F8:5E:04:66
Certificate issuer: /CN=A916E5FB/serialNumber=B07A0A4019E8B8200213BF2DCCFC6870F85E0466
Certificate serial: 0D22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sHoKQBnouCACE78tzPxocPheBGY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft
Manifest number: 0D08
Signing time: Fri 24 Jul 2026 18:36:47 +0000
Manifest this update: Fri 24 Jul 2026 18:36:46 +0000
Manifest next update: Fri 31 Jul 2026 18:36:46 +0000
Files and hashes: 1: sHoKQBnouCACE78tzPxocPheBGY.crl (hash: BT38vuT/iz9ckaTLmj6T35Q2A4owbyYUB1gfZHqPYIQ=)
2: 6ED5481209DF11EAA6052433C4F9AE02.roa (hash: HrmVnXUGJt8jw2Un+GAxOWQzRcn/YFzs1aPIkDSrkXs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.crl
rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sHoKQBnouCACE78tzPxocPheBGY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 18:36:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3362 (0xd22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916E5FB, serialNumber=B07A0A4019E8B8200213BF2DCCFC6870F85E0466
Validity
Not Before: Jul 24 18:36:46 2026 GMT
Not After : Jul 31 18:36:46 2026 GMT
Subject: CN=6a63b0bf-19f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:71:f1:b8:ea:29:da:f6:3f:cb:01:a3:e5:da:
3f:8a:33:3c:04:27:86:b9:bc:26:28:1c:3e:f2:7f:
36:e6:d4:d3:e9:31:fc:79:e0:86:0e:6c:39:b6:31:
6a:2f:be:ca:cd:01:16:17:f0:35:08:eb:be:22:3b:
4b:33:44:73:8c:97:db:b4:3c:2d:e9:e2:d6:44:63:
dd:8a:3f:ba:86:3a:4a:7e:d7:51:6c:d3:64:d0:5f:
86:8c:a7:76:67:b5:f9:71:47:b8:46:93:00:74:36:
c9:85:97:7d:bd:43:21:2f:e8:a1:99:38:30:d2:69:
f7:b3:c5:a0:9c:06:76:9a:86:60:5e:80:e4:cb:ce:
ba:41:3d:10:45:23:92:88:f1:06:d8:25:c8:b7:95:
19:00:52:2b:5e:09:de:e8:8c:b5:47:0c:1a:a5:37:
5a:6b:5e:8d:b4:4e:33:14:08:b3:4c:80:38:47:ea:
39:48:24:fe:24:7e:01:0c:9f:20:65:8e:67:ee:99:
59:44:60:9a:b7:22:1f:a9:fe:57:2d:0e:06:67:30:
c0:00:b5:50:e3:5f:fe:4f:7d:06:dc:11:b6:1a:b7:
08:78:98:43:d4:51:1c:8e:28:dc:e8:c1:8a:33:07:
91:fc:06:53:e8:f6:5a:50:f8:27:03:1e:67:3f:a5:
ba:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A1:7E:94:B3:74:B1:5A:BA:5A:AC:3F:F5:E5:99:B5:46:46:3F:8F
X509v3 Authority Key Identifier:
keyid:B0:7A:0A:40:19:E8:B8:20:02:13:BF:2D:CC:FC:68:70:F8:5E:04:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sHoKQBnouCACE78tzPxocPheBGY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:56:48:8b:03:78:07:00:b7:15:c1:2a:23:d0:2a:20:4c:5c:
26:ad:e6:b9:f9:04:55:09:3d:f3:13:af:9c:6f:ca:d3:2f:64:
a0:77:d9:de:f3:df:78:12:7c:95:64:3f:f0:bd:2b:b3:b0:3a:
91:ec:c5:a9:58:ed:dc:2e:e6:e8:89:9f:26:ff:6e:23:00:11:
e0:36:96:94:b9:97:6c:70:d4:c0:0b:47:d0:77:61:80:6e:55:
26:2c:f6:35:9f:31:e3:6e:ce:64:2b:41:b8:0f:00:99:0e:ac:
79:2b:3d:46:da:ed:7a:34:84:b0:8a:97:9d:da:f4:f3:f7:ba:
86:5d:20:63:2c:7b:2c:ab:4d:79:0e:96:40:85:d6:67:0f:17:
6e:21:35:95:5b:93:cc:e4:f4:b0:61:55:f4:7f:f5:40:b4:50:
94:6d:4b:65:b0:61:4b:88:31:22:44:02:96:10:85:57:d1:68:
31:0e:b7:80:4f:d0:92:83:8f:68:d3:d8:d1:0b:2c:5d:7e:5c:
72:4c:1a:72:84:47:aa:b8:cb:ec:19:37:ee:96:8c:28:56:ac:
37:37:40:03:de:14:11:4f:c9:49:c1:ed:83:2f:1c:c5:51:59:
8f:0b:e2:78:d3:fa:48:8c:99:f3:14:a2:a4:51:5f:cc:2a:b4:
6d:cc:77:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 08:54:23 2026 by rpki-client