
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.mft
File: hHItvUIme93Vm4hBUpklNTHgY2Q.mft (raw, json)
Hash identifier: o+xakykWMFcfYZHeDN1iL95sz6kUPdRtEuxnOO45+sI=
Subject key identifier: 3A:5F:96:CE:65:2B:89:CA:39:DE:27:10:00:C2:C0:44:22:F5:79:ED
Authority key identifier: 84:72:2D:BD:42:26:7B:DD:D5:9B:88:41:52:99:25:35:31:E0:63:64
Certificate issuer: /CN=A918FEF3/serialNumber=84722DBD42267BDDD59B88415299253531E06364
Certificate serial: 188D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHItvUIme93Vm4hBUpklNTHgY2Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.mft
Manifest number: 188D
Signing time: Tue 12 May 2026 16:29:35 +0000
Manifest this update: Tue 12 May 2026 16:29:34 +0000
Manifest next update: Tue 19 May 2026 16:29:34 +0000
Files and hashes: 1: hHItvUIme93Vm4hBUpklNTHgY2Q.crl (hash: Z6ijsDt2FOOf1zs5VuUFHxj8PrxogZMQukkHB3007XA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.crl
rsync://rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHItvUIme93Vm4hBUpklNTHgY2Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6285 (0x188d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FEF3, serialNumber=84722DBD42267BDDD59B88415299253531E06364
Validity
Not Before: May 12 16:29:34 2026 GMT
Not After : May 19 16:29:34 2026 GMT
Subject: CN=6a03556f-71d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:88:02:0c:f8:08:8d:5e:a3:f1:f0:94:a7:c4:
d7:b1:79:ea:cc:35:69:45:da:89:03:f4:81:20:d2:
75:9b:db:47:67:00:0b:fa:ae:5c:63:52:7e:3a:21:
87:99:fc:1e:55:a5:60:ad:8d:70:6e:58:a2:a8:7d:
73:99:f7:1b:00:e4:f9:d8:a8:63:d4:1a:aa:88:34:
3e:8d:68:7a:c4:73:e2:c6:06:13:01:b6:d0:e1:5b:
98:b6:76:31:09:47:ac:03:b5:b0:ee:e5:43:43:47:
53:e0:cf:ab:20:15:7c:7b:ed:68:88:6f:ef:46:34:
30:85:d6:f3:d4:df:44:c9:fb:8b:7b:be:7a:5e:e5:
21:04:ae:57:a5:c3:72:46:47:49:c4:59:7c:13:28:
04:22:be:78:cf:7a:be:1d:80:8a:18:ac:01:6d:73:
da:7e:83:bc:fe:f2:9f:7c:2e:99:88:bc:0c:98:93:
22:02:13:6b:c1:c6:bf:4c:80:98:64:e0:67:c5:15:
71:11:19:b5:04:6a:75:9b:9e:5f:12:b5:c2:d0:d1:
11:ba:04:fd:ab:7a:37:3c:aa:fd:cf:0e:7c:e7:cc:
1e:37:2a:05:92:b7:07:7a:3c:f7:c7:ba:c0:df:f0:
67:96:db:a3:9f:e5:ef:37:35:d4:30:07:5b:cb:5d:
ce:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:5F:96:CE:65:2B:89:CA:39:DE:27:10:00:C2:C0:44:22:F5:79:ED
X509v3 Authority Key Identifier:
keyid:84:72:2D:BD:42:26:7B:DD:D5:9B:88:41:52:99:25:35:31:E0:63:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHItvUIme93Vm4hBUpklNTHgY2Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:e6:1c:85:f6:12:d7:d0:ae:8b:b1:43:33:c2:ea:0c:23:4f:
5c:18:d4:9a:31:2d:97:13:ec:c4:0c:41:17:9c:96:36:5a:e2:
5d:8c:57:3b:6f:59:10:9a:4e:84:bd:2e:7a:af:cc:1e:96:a6:
56:d6:59:84:4b:ac:19:49:45:9c:2b:07:13:e4:f1:c3:a2:f7:
26:12:fb:9b:7b:8e:25:1e:ab:6a:de:a1:0c:8c:c7:16:af:ca:
3d:d3:f1:21:d1:72:13:b9:c5:d4:b9:e3:ec:66:45:32:b7:45:
1b:17:e5:4b:b9:fe:71:bd:56:1b:26:6b:cb:02:25:2f:c2:fd:
df:36:62:98:cc:50:c2:71:c1:26:c0:b7:3d:10:f4:a2:e9:bc:
42:53:f0:41:e1:ad:1b:b8:e6:b1:5f:e7:05:77:18:3d:aa:22:
c8:c2:18:f8:a8:56:aa:34:ff:cc:81:1e:16:f0:1f:2e:f6:e2:
3c:ed:f3:c0:38:8c:2d:c5:bf:90:f5:06:b4:1a:2c:52:cc:b3:
8a:17:21:af:15:c1:3b:f2:34:ea:0f:ef:79:8a:87:c8:d7:d3:
a5:94:7f:d3:54:35:33:99:85:ce:d0:2e:c4:32:8d:50:ad:8d:
ae:00:b3:a6:69:5d:c6:5f:05:b7:4e:85:8b:f5:9e:38:35:ac:
c3:4d:c5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:43:46 2026 by rpki-client