
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.mft
File: h-gMDkYzEKnTA4zgE88YU3SlxyI.mft (raw, json)
Hash identifier: YzaMADe/JiPnvDe/1sD4XQu1WNvgywGE9qLSLGU8p5w=
Subject key identifier: 66:5E:95:C1:D4:89:AD:F4:C1:49:C4:8F:77:20:9E:A0:F3:E6:CD:F8
Authority key identifier: 87:E8:0C:0E:46:33:10:A9:D3:03:8C:E0:13:CF:18:53:74:A5:C7:22
Certificate issuer: /CN=A918524B/serialNumber=87E80C0E463310A9D3038CE013CF185374A5C722
Certificate serial: 06E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h-gMDkYzEKnTA4zgE88YU3SlxyI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.mft
Manifest number: 06D0
Signing time: Fri 02 Oct 2026 22:38:25 +0000
Manifest this update: Fri 02 Oct 2026 22:38:25 +0000
Manifest next update: Fri 09 Oct 2026 22:38:25 +0000
Files and hashes: 1: h-gMDkYzEKnTA4zgE88YU3SlxyI.crl (hash: 9D9KMOK9igWRBqxVOTl9dif8hzK4MdIWCA3UKi6kj2U=)
2: C49CE482BEA411EB85828650C4F9AE02.roa (hash: YRVF06vQab+9NFZ7dGOQFnvASdYRW+VxNdESL/wwkLo=)
3: C850F3BA89A511EEB6692E43C4F9AE02.roa (hash: 9/omkIpCPqIeBe3uMYLBYEVI2CH4WNDcld2XzAT23Mc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.crl
rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h-gMDkYzEKnTA4zgE88YU3SlxyI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 22:38:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1760 (0x6e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918524B, serialNumber=87E80C0E463310A9D3038CE013CF185374A5C722
Validity
Not Before: Oct 2 22:38:25 2026 GMT
Not After : Oct 9 22:38:25 2026 GMT
Subject: CN=6ac03261-17a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:53:37:d5:7d:50:2c:6b:43:50:4c:ac:ae:ab:
e4:dc:50:32:f5:6a:e6:4b:e8:4c:14:62:c2:ef:62:
03:f1:37:46:8c:37:84:d4:2d:4a:75:aa:1c:9d:0c:
73:09:ad:a2:40:14:40:dd:f0:01:a8:89:94:bc:e8:
6a:8b:36:f2:b7:8c:63:d7:9c:6a:39:59:f2:27:9e:
09:da:47:45:af:82:3e:0e:8d:ac:57:5c:fe:35:00:
60:90:fc:d7:63:7b:46:19:48:29:fe:55:b8:2a:83:
3c:06:10:6b:54:37:2b:2f:d5:15:1e:30:55:00:0d:
12:07:c0:1b:71:21:89:32:f8:6e:bf:ce:8b:be:63:
67:fb:29:1e:cd:3f:81:1e:6e:bf:63:68:6e:88:aa:
7b:7d:ba:67:78:b3:e4:db:00:58:d5:53:91:e6:57:
07:07:69:f3:d2:a0:14:48:bb:20:50:57:b5:5b:22:
49:bf:e0:cf:ab:d8:80:7f:88:bf:96:ed:53:7f:0b:
70:ca:c0:50:cc:02:41:80:d7:3d:f8:2a:92:2d:bd:
86:86:75:3d:10:7d:88:2d:ef:df:43:65:95:c3:68:
16:56:7f:d4:dc:22:2d:f8:17:ba:d3:ad:cc:d2:59:
3e:6a:28:ed:c5:72:28:a1:d8:ee:8f:53:70:f2:b8:
13:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:5E:95:C1:D4:89:AD:F4:C1:49:C4:8F:77:20:9E:A0:F3:E6:CD:F8
X509v3 Authority Key Identifier:
keyid:87:E8:0C:0E:46:33:10:A9:D3:03:8C:E0:13:CF:18:53:74:A5:C7:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h-gMDkYzEKnTA4zgE88YU3SlxyI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:60:6f:f4:69:be:99:be:3c:d0:50:d3:57:fb:68:9d:28:4f:
25:ec:ba:34:d7:77:58:95:52:6a:86:ac:b7:c9:7d:df:dd:0e:
cb:0c:51:39:1a:f5:c4:17:9c:19:33:28:2f:f2:0a:0e:61:8b:
97:52:43:1c:5a:47:0d:4b:0b:c4:01:9d:0b:14:16:9a:8c:68:
5b:97:bb:0d:53:b5:e3:90:e7:6a:aa:7f:c7:cf:0c:58:2a:99:
06:37:00:24:fe:6e:83:f3:3e:09:83:bb:8b:96:a4:df:88:ff:
9b:51:8c:b2:e3:f2:66:fa:7c:db:87:fc:8e:d1:bc:65:09:4e:
8f:49:6a:90:8a:f8:e9:d7:c2:b7:e3:54:e1:2c:88:8a:4a:9d:
4e:68:e5:a7:bc:41:f6:db:47:84:de:42:83:1c:fd:70:2c:72:
99:7a:37:20:25:c3:84:ad:c3:6b:2f:b1:a5:2c:59:bc:be:53:
0a:41:63:9a:29:f3:3a:58:8a:19:26:ee:66:94:ed:90:92:5b:
a2:4c:01:54:78:19:27:db:24:96:4a:5a:47:05:31:b5:f0:26:
25:3b:46:bc:7b:b0:3c:5a:0a:d3:18:3a:7a:5b:5f:da:fe:ba:
4d:60:96:01:94:a7:10:92:a7:61:1f:27:6e:9e:71:04:9b:f1:
b2:b4:c0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 15:21:00 2026 by rpki-client