
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft
File: HsQsG2nhb183xz2Bv5-rH0ukIyk.mft (raw, json)
Hash identifier: kGkKuiYDBo8bcBdafQFyORKuikz2xlKBi7FrfL3Pu58=
Subject key identifier: CB:FF:50:20:92:B5:8A:74:C5:0F:CD:EB:6A:56:CC:20:F5:92:C2:FB
Authority key identifier: 1E:C4:2C:1B:69:E1:6F:5F:37:C7:3D:81:BF:9F:AB:1F:4B:A4:23:29
Certificate issuer: /CN=A918C661/serialNumber=1EC42C1B69E16F5F37C73D81BF9FAB1F4BA42329
Certificate serial: 0B4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft
Manifest number: 0AD6
Signing time: Tue 12 May 2026 19:39:33 +0000
Manifest this update: Tue 12 May 2026 19:39:33 +0000
Manifest next update: Tue 19 May 2026 19:39:33 +0000
Files and hashes: 1: HsQsG2nhb183xz2Bv5-rH0ukIyk.crl (hash: adaJHkwCCk+zZzfFmXLixh6LnhRj0Qu9RaZNEY5yjsQ=)
2: FC2C48DA1D1711F193C53B4D0E3D8C67.roa (hash: t5GO0KVpRO0vMtyXCfhbCMuVtePS8oymCsUiik5fkqM=)
3: A81364AC4B0611EF91534014C4F9AE02.roa (hash: 7nc0FQIuWt5iAf4cd70KYSyea0Ow8OKJ3jyzk3RRDos=)
4: 73DC26744B0611EF8698EB13C4F9AE02.roa (hash: QbjBpA8yO+Th7aJxPrDQfS3hz6qzzWk2P0LycOFlE0A=)
5: A7A72BF24B0611EF91534014C4F9AE02.roa (hash: RMfV3v+YMKrEsv4J/X9BeNndnRE9fJpMKXXZWqx+jrk=)
6: 6C68485C5A1D11EFA9989052C4F9AE02.roa (hash: gKdZCMFVp9SI3rESOVHwnsGLBaaJOZqgNabpfZNzfAY=)
7: D9AFDBC2400111EFBB30C475C4F9AE02.roa (hash: HrZGFhV7ij/MniPPdnAUj9aXz0QqgUpU7Kf1yG1SMQ0=)
8: D42F0D06B51611EEADC7924BC4F9AE02.roa (hash: kqyC7MEnLT1Hy4mgRDx5xjtCxGf3dNpztnPLrCKEqKY=)
9: B8D18508EDE011EF88407251C4F9AE02.roa (hash: NdZ92kK8LP+A4ucoxj2Mn/YHm/Cj8wuqKbvHDIwNWi0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.crl
rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:39:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2895 (0xb4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C661, serialNumber=1EC42C1B69E16F5F37C73D81BF9FAB1F4BA42329
Validity
Not Before: May 12 19:39:33 2026 GMT
Not After : May 19 19:39:33 2026 GMT
Subject: CN=6a0381f5-76ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:db:b0:d5:e0:52:9d:c1:e2:28:91:a7:ca:aa:
fe:63:b9:82:63:f4:ca:21:3e:70:ed:8f:a9:b0:6d:
1c:44:1d:aa:51:51:a6:7a:39:81:c1:8e:64:a2:29:
4a:84:0b:25:96:23:72:b8:1a:01:ae:57:2e:d4:5b:
36:5f:31:87:6d:95:94:e5:25:27:80:f3:45:26:ac:
11:4a:82:ae:6a:a9:45:51:a4:6b:ef:53:e7:7d:61:
14:4c:35:57:9a:c8:32:48:45:ae:0f:e1:4b:a6:c7:
42:d6:47:45:8d:e8:7c:3a:0e:55:ab:4d:f7:9a:71:
85:49:0e:1c:1a:fd:f7:14:e9:c9:9d:f7:27:08:0e:
04:f2:7e:40:7e:96:52:21:6c:16:1f:97:71:c5:9f:
c9:16:b7:6e:ed:f0:1d:c3:a0:76:b3:4f:35:ae:a9:
ed:0b:c7:3b:81:5a:b8:e4:96:88:9b:fe:a6:d1:20:
14:db:00:df:4f:b6:78:dd:ab:9d:d7:6d:f7:d4:4a:
c1:8f:fd:03:c4:0f:e5:a8:d0:33:65:2c:cc:b2:89:
21:c6:e2:56:f3:9d:bb:6c:2f:1c:3a:e2:75:bd:9e:
61:99:21:49:65:7b:6c:ea:c0:a9:2f:5d:f5:62:fe:
24:49:e2:4c:eb:b5:d4:f7:55:d1:b4:c2:51:09:54:
00:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:FF:50:20:92:B5:8A:74:C5:0F:CD:EB:6A:56:CC:20:F5:92:C2:FB
X509v3 Authority Key Identifier:
keyid:1E:C4:2C:1B:69:E1:6F:5F:37:C7:3D:81:BF:9F:AB:1F:4B:A4:23:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:a3:c2:20:c8:6b:bc:1c:2c:d5:74:4a:00:de:62:18:57:86:
79:7e:62:05:3e:d6:e0:c1:de:7a:ac:75:e1:cf:78:96:ca:57:
82:86:a0:a4:0b:e1:15:1d:9f:aa:b9:d5:e6:e7:8d:82:2b:db:
21:f4:3a:84:16:4d:cd:0a:a8:94:e5:87:da:ae:8d:d2:22:17:
1a:15:5b:a4:67:20:9f:8c:2f:cf:47:9a:66:bc:a0:68:f4:ad:
9a:3c:d3:ab:5a:60:b8:84:ca:05:da:ed:6b:b1:9c:38:25:21:
70:b1:3c:30:57:91:90:e5:4c:3f:3e:ec:d4:4b:fd:ae:fb:48:
8a:0e:2b:8c:4e:39:53:75:e6:ca:a0:d1:40:c7:20:90:26:85:
4b:cd:06:5c:06:9a:3e:32:23:90:4e:a5:5c:36:a4:e9:28:ee:
5d:e0:42:a7:dd:7d:c4:f4:34:2e:81:c0:b1:b2:8d:08:d7:e7:
bf:2a:f9:aa:51:db:a9:45:1e:a0:95:0a:5b:9a:f9:8d:47:29:
0d:7b:93:56:5d:b8:6c:78:7a:bd:af:38:7a:d8:12:4a:89:82:
32:15:c1:6e:cd:00:1b:72:a4:3c:73:e9:08:68:f6:fa:7a:9e:
62:a4:39:e1:9b:61:35:78:5e:d6:a5:05:55:6a:60:20:d5:82:
32:fc:fa:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:35:54 2026 by rpki-client