
$ rpki-client -vvf rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft
File: sHoKQBnouCACE78tzPxocPheBGY.mft (raw, json)
Hash identifier: +N3/gaY5YuvhF7suRMpy/TL8McVAmk6oXJSrFVJxQl8=
Subject key identifier: FB:7E:BE:CE:A0:B8:03:36:49:1A:3E:0F:76:9E:B9:D6:4F:6E:97:38
Authority key identifier: B0:7A:0A:40:19:E8:B8:20:02:13:BF:2D:CC:FC:68:70:F8:5E:04:66
Certificate issuer: /CN=A916E5FB/serialNumber=B07A0A4019E8B8200213BF2DCCFC6870F85E0466
Certificate serial: 0CE4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sHoKQBnouCACE78tzPxocPheBGY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft
Manifest number: 0CCA
Signing time: Tue 24 Mar 2026 18:13:39 +0000
Manifest this update: Tue 24 Mar 2026 18:13:38 +0000
Manifest next update: Tue 31 Mar 2026 18:13:38 +0000
Files and hashes: 1: sHoKQBnouCACE78tzPxocPheBGY.crl (hash: rBI/YsISjOqzYh+q7s6WRpZYSSvh3a9RHgh6BrM2R7Q=)
2: 6ED5481209DF11EAA6052433C4F9AE02.roa (hash: HrmVnXUGJt8jw2Un+GAxOWQzRcn/YFzs1aPIkDSrkXs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.crl
rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sHoKQBnouCACE78tzPxocPheBGY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:13:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3300 (0xce4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916E5FB, serialNumber=B07A0A4019E8B8200213BF2DCCFC6870F85E0466
Validity
Not Before: Mar 24 18:13:38 2026 GMT
Not After : Mar 31 18:13:38 2026 GMT
Subject: CN=69c2d453-11ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b8:5e:67:f6:4b:a6:da:25:0f:1b:bc:c5:5f:
16:e6:af:86:d0:91:3d:59:7f:dd:a9:84:fe:44:27:
7f:02:b3:2a:42:52:ce:f4:e3:42:1c:0d:d7:53:c6:
f8:80:0c:ed:1e:09:99:29:c0:09:85:c4:0a:1b:ff:
5c:cd:1e:56:e3:5a:02:db:ea:13:0c:ab:88:6b:bc:
cf:ac:01:d9:fb:61:d5:b6:a1:4d:ff:24:d6:c8:86:
d8:57:9f:c1:43:27:9c:b7:9e:9c:4c:e1:5c:c8:f9:
44:b8:97:0d:d0:09:e9:e8:6f:09:3f:62:28:71:88:
37:c5:79:c2:25:7b:78:b9:48:f3:1b:bf:e6:3b:06:
28:65:23:e7:81:bb:a9:8b:af:c1:bd:b4:c4:14:7c:
46:d0:04:86:24:fe:36:16:a1:a8:1e:f4:50:8a:e2:
e2:bc:59:37:cb:fe:32:9d:58:ce:53:59:45:04:3b:
d1:cb:cb:03:6b:43:39:d8:af:d0:78:89:6c:ae:46:
38:54:f4:d1:a2:b4:cd:5b:e7:8e:39:00:5b:f3:35:
d5:2e:d4:b4:6f:c6:82:b3:40:92:1a:59:75:3c:62:
57:43:54:42:f0:02:16:a9:ee:16:33:b1:42:7c:0f:
36:d1:1a:b6:81:19:de:aa:8f:d7:08:85:72:ca:de:
6c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:7E:BE:CE:A0:B8:03:36:49:1A:3E:0F:76:9E:B9:D6:4F:6E:97:38
X509v3 Authority Key Identifier:
keyid:B0:7A:0A:40:19:E8:B8:20:02:13:BF:2D:CC:FC:68:70:F8:5E:04:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sHoKQBnouCACE78tzPxocPheBGY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:e0:bd:42:72:52:60:f0:02:a1:f5:e4:3e:a7:f2:89:06:b7:
49:b6:e0:a1:87:47:7b:2d:6b:0e:39:55:22:41:4e:79:f3:40:
d2:dc:c6:e0:6e:39:1c:33:f8:f1:0b:6d:10:6c:d4:5b:0b:e0:
de:f1:18:54:04:1e:c6:48:9b:b3:b3:41:45:80:ea:97:f6:31:
74:ec:14:e0:96:e9:ce:8b:65:36:96:f7:2f:d6:66:88:2b:69:
11:43:27:44:19:b7:ad:04:53:41:fa:bd:22:03:e3:b6:cb:9f:
b3:9f:49:2c:af:b9:92:12:82:5e:1f:3e:ee:cd:a7:19:a3:08:
65:3d:ee:98:f4:b7:b5:bd:a3:1b:94:43:a9:aa:ff:a4:90:7a:
60:93:ed:1a:9d:7f:0c:45:84:dc:3d:94:b9:23:d6:e7:b2:3d:
fb:18:08:e5:7b:43:a4:92:65:1e:c4:97:3f:e5:13:f7:22:f8:
ec:61:01:5e:95:7a:fd:17:64:b8:cd:60:3b:38:b9:6a:25:00:
13:60:2e:df:af:a9:ef:29:04:cf:8c:d4:8e:cf:ef:60:9a:40:
60:82:46:72:1c:26:48:40:e8:a8:2b:07:48:25:91:29:30:b3:
98:39:27:bf:1e:5f:ad:21:d6:c3:f1:d0:5d:d2:f8:f1:2d:de:
84:90:f9:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:06 2026 by rpki-client