
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft
File: h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft (raw, json)
Hash identifier: hZt8AaIokpcY0wiFseBn9IN+IsAbsa/8RZoV6RW+FVI=
Subject key identifier: E3:02:FC:0B:FE:23:B2:F3:39:9B:8E:E6:40:3B:77:95:50:2C:4E:81
Authority key identifier: 87:8B:86:86:95:FC:45:C9:C6:3B:6F:BC:54:CC:B3:50:9C:4B:9F:4B
Certificate issuer: /CN=A918A35C/serialNumber=878B868695FC45C9C63B6FBC54CCB3509C4B9F4B
Certificate serial: 0C54
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft
Manifest number: 0C4C
Signing time: Tue 12 May 2026 18:46:14 +0000
Manifest this update: Tue 12 May 2026 18:46:13 +0000
Manifest next update: Tue 19 May 2026 18:46:13 +0000
Files and hashes: 1: h4uGhpX8RcnGO2-8VMyzUJxLn0s.crl (hash: DoAEjklhqiEbZOXi0c324R1UZ7sidqMECb5xWsMsUmE=)
2: 0D22F748261A11EA83CE8D17C4F9AE02.roa (hash: AGJ3imo4fnyGAnxscjmKEoYw6azyeSOHkHTLOF2MKsQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.crl
rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:46:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3156 (0xc54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A35C, serialNumber=878B868695FC45C9C63B6FBC54CCB3509C4B9F4B
Validity
Not Before: May 12 18:46:13 2026 GMT
Not After : May 19 18:46:13 2026 GMT
Subject: CN=6a037575-1935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f3:b7:46:c3:ed:36:c7:7b:f5:de:04:fd:96:
6f:5c:d7:f1:9f:03:ae:64:1f:54:32:d7:42:52:fd:
4b:c5:49:9f:06:5b:ef:4c:c3:8c:28:41:bd:48:9b:
0f:37:71:c2:d4:3c:cc:c1:c1:e1:af:36:19:fc:d0:
ff:f4:fb:65:a7:cc:72:22:11:4f:dc:d0:ca:d0:32:
52:bb:6e:85:e9:56:cf:6e:4b:f1:b3:90:15:5a:56:
8f:9c:38:89:26:ef:d2:5d:89:db:72:b5:9f:0a:f3:
a4:16:92:c2:75:04:9d:31:63:87:51:b6:0e:0e:ac:
0c:fc:53:bf:c6:fa:88:b9:39:8c:69:bc:b0:52:b1:
b5:32:93:8f:d2:ee:ec:48:2e:e1:6e:5e:e4:8f:d0:
f1:2d:89:10:c8:09:c8:7f:6d:b1:06:cf:1c:80:46:
82:85:9c:77:27:93:91:f7:4c:20:33:30:fa:bf:7b:
63:ee:02:29:91:b9:8d:90:3f:c3:f6:02:5a:d1:dc:
1c:62:f3:d1:f5:aa:8e:3e:14:16:92:78:d4:68:d5:
f1:83:ea:f1:53:c8:e6:15:e0:31:0b:c0:4a:49:75:
c7:40:a4:0e:4d:5f:65:6f:7f:9c:72:14:fc:08:6b:
08:72:0a:97:cc:90:ea:d4:9c:1b:89:b7:14:23:6a:
47:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:02:FC:0B:FE:23:B2:F3:39:9B:8E:E6:40:3B:77:95:50:2C:4E:81
X509v3 Authority Key Identifier:
keyid:87:8B:86:86:95:FC:45:C9:C6:3B:6F:BC:54:CC:B3:50:9C:4B:9F:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:3e:3d:0b:cf:97:d1:bf:36:cc:6d:8d:1e:58:53:f8:8c:2b:
5a:19:d4:6e:7c:13:cc:dc:2e:9e:a0:e2:1b:0f:4a:6a:49:e2:
fd:38:78:3b:45:af:c5:4a:ab:2f:86:53:3d:6e:2d:0a:47:2c:
70:9a:7b:f9:a8:87:44:be:df:68:64:38:d4:cb:d0:ea:dc:65:
0e:7a:03:0d:30:bc:83:1d:9a:fe:63:7a:8e:1b:11:fd:23:34:
19:81:91:21:d8:19:88:f8:bd:e0:89:aa:91:f2:c4:66:08:d6:
1f:74:89:76:68:19:64:92:22:d2:bc:72:3b:57:d0:f7:10:8f:
17:32:85:38:7c:18:0b:a6:e2:9a:76:f8:ae:22:69:25:02:0c:
38:b7:b5:b2:89:b1:56:b6:b9:0e:bb:42:ae:74:eb:8c:55:cc:
81:65:b4:09:35:c0:71:ed:fc:ec:c9:67:0d:61:80:72:d5:3f:
4d:88:11:99:23:46:70:70:bf:15:d7:e7:c7:de:7a:9f:ad:fa:
05:90:22:3e:82:89:48:fa:a9:ce:a5:87:0f:94:68:86:c0:8c:
c0:b9:4b:61:e6:d6:aa:f7:c3:28:bf:c8:fa:b5:ce:ae:ee:9e:
0e:2e:05:3d:13:ac:4e:e5:85:d6:6b:88:8e:04:ad:a6:ef:b6:
e7:ee:af:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:42:58 2026 by rpki-client