
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.mft
File: hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.mft (raw, json)
Hash identifier: ftx6pvxiqBiXvjuD6aAUcM9UGuKLWhy4M21c5EcLea4=
Subject key identifier: F1:1B:43:93:65:32:9A:40:C2:3F:BE:4F:BB:D7:1E:37:B7:9A:5C:E3
Authority key identifier: 84:8A:79:AB:50:41:E7:1C:E6:22:50:B5:7F:C1:E0:F5:49:78:C9:3A
Certificate issuer: /CN=A918EC78/serialNumber=848A79AB5041E71CE62250B57FC1E0F54978C93A
Certificate serial: 0B3E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.mft
Manifest number: 0B31
Signing time: Tue 12 May 2026 19:19:06 +0000
Manifest this update: Tue 12 May 2026 19:19:06 +0000
Manifest next update: Tue 19 May 2026 19:19:06 +0000
Files and hashes: 1: hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.crl (hash: 7lR8uMlIAl6jOy/peDMCgv+/SGrsuxiTnfdFoflKp7g=)
2: BF77D1785DCB11EA880A7643C4F9AE02.roa (hash: A0fYtG6N2BexE9W0qntrNVFN6Gcpgpfkbf4hLPy3YFQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.crl
rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:19:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2878 (0xb3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EC78, serialNumber=848A79AB5041E71CE62250B57FC1E0F54978C93A
Validity
Not Before: May 12 19:19:06 2026 GMT
Not After : May 19 19:19:06 2026 GMT
Subject: CN=6a037d2a-a9c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6a:b4:66:a8:44:43:bf:51:e4:de:ff:63:1d:
c6:af:5a:08:cb:b5:bc:c8:ba:24:34:a4:d7:a5:02:
11:cd:d8:84:ff:71:ad:d5:00:87:a2:bc:90:73:e1:
af:02:f3:01:30:b6:b2:f4:85:dd:65:89:37:32:68:
ce:92:73:63:17:62:7f:fa:05:1b:d5:64:0c:91:09:
8f:63:eb:fe:6e:f6:b4:3a:47:02:18:c0:f9:6d:44:
1b:01:03:b8:46:13:ef:18:3d:51:a9:ce:73:29:88:
0b:8b:4d:3e:88:c1:20:6d:13:eb:9c:7a:9d:8d:09:
b5:03:c9:e3:29:90:20:3a:5d:4a:3b:e1:ec:68:5b:
59:93:13:2d:96:af:f5:fa:d0:0f:98:44:02:21:71:
18:ad:d2:bd:3c:58:bc:a4:52:49:c2:04:6c:9a:77:
ea:c0:5a:2e:ec:9a:f7:63:a9:d2:0e:94:be:9f:d4:
b2:30:aa:17:ef:4e:03:1d:b8:2a:8a:16:bf:3e:fb:
bc:7f:f3:5e:57:b8:d5:62:aa:98:7a:91:7d:92:52:
15:2d:5d:6c:66:31:5b:ac:b6:5f:1a:52:1d:ed:df:
02:2e:bc:03:1a:b9:01:aa:eb:74:b1:69:63:fb:e2:
75:54:60:23:2e:fa:fb:47:ee:19:70:ee:f6:0b:f3:
62:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:1B:43:93:65:32:9A:40:C2:3F:BE:4F:BB:D7:1E:37:B7:9A:5C:E3
X509v3 Authority Key Identifier:
keyid:84:8A:79:AB:50:41:E7:1C:E6:22:50:B5:7F:C1:E0:F5:49:78:C9:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:1d:0b:74:ca:61:e6:4f:2e:6e:d0:42:51:d9:e9:b4:ef:8d:
c9:fd:31:b7:8d:66:53:63:43:86:4d:ad:cf:64:5d:36:63:7a:
bc:75:19:0b:4b:af:ec:d6:0c:e8:6c:c5:1c:30:c7:24:2e:22:
6f:9a:d3:fe:0e:c6:8d:41:a6:55:fd:9c:61:a5:4e:46:91:48:
8f:fe:a6:be:37:4b:50:3a:48:14:29:eb:58:b8:74:2a:35:33:
85:0c:c6:d2:23:01:73:ba:0c:ba:e5:b8:00:1d:53:60:18:56:
38:8d:2b:f1:4a:26:86:47:61:c9:b2:1a:f8:a7:ff:a4:83:05:
b3:1d:96:9e:a5:d6:90:9d:12:95:6e:4c:5b:66:68:83:f6:55:
48:6f:4d:68:a6:a5:0c:d9:a8:f6:d9:7e:5b:19:25:e7:04:bd:
7f:a6:3b:2f:99:1e:e9:20:84:e5:8d:60:85:dc:3e:1f:81:f5:
d1:14:1f:25:0d:38:a7:a3:8b:3e:3d:a6:c2:19:d6:44:35:e9:
6b:54:e3:f2:77:8e:64:67:e2:2d:76:3b:bf:6d:1c:80:47:67:
83:b4:69:d6:5d:33:37:6f:ba:cf:a6:30:ca:e8:38:cc:26:11:
f1:7d:0f:06:89:0b:6f:70:d5:51:9b:cc:72:4a:dd:57:a3:73:
98:3a:68:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:19:49 2026 by rpki-client