
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.mft
File: hHItvUIme93Vm4hBUpklNTHgY2Q.mft (raw, json)
Hash identifier: 9NKRZvxlC/ruKUMSTzAc9ZgBfqRek4FurbynKuD94yg=
Subject key identifier: C5:5E:92:69:58:62:AF:D5:0A:E4:B8:61:5D:6F:DB:E9:FA:8A:42:49
Authority key identifier: 84:72:2D:BD:42:26:7B:DD:D5:9B:88:41:52:99:25:35:31:E0:63:64
Certificate issuer: /CN=A918FEF3/serialNumber=84722DBD42267BDDD59B88415299253531E06364
Certificate serial: 18D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHItvUIme93Vm4hBUpklNTHgY2Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.mft
Manifest number: 18D2
Signing time: Thu 24 Sep 2026 16:26:12 +0000
Manifest this update: Thu 24 Sep 2026 16:26:11 +0000
Manifest next update: Thu 01 Oct 2026 16:26:11 +0000
Files and hashes: 1: hHItvUIme93Vm4hBUpklNTHgY2Q.crl (hash: bvsjSulVD126Hz9SNkFF3flYcWoUpEJMxV8tv801Iac=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.crl
rsync://rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHItvUIme93Vm4hBUpklNTHgY2Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 16:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6354 (0x18d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FEF3, serialNumber=84722DBD42267BDDD59B88415299253531E06364
Validity
Not Before: Sep 24 16:26:11 2026 GMT
Not After : Oct 1 16:26:11 2026 GMT
Subject: CN=6ab54f24-a398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:84:a3:36:18:98:34:98:ac:33:04:76:9e:f5:
f9:20:b0:79:1a:89:f4:01:17:e8:63:bd:2f:00:61:
ab:23:5f:6c:ae:8b:bc:37:c2:42:04:e5:cb:e8:1c:
54:a3:b5:e5:09:cd:f4:e4:ea:5e:bd:63:ed:56:02:
86:1a:2c:e4:64:bb:e7:88:90:b7:ef:c4:55:c5:f3:
33:02:a8:f0:2c:87:4b:34:94:1c:2f:03:19:f4:41:
26:f4:77:4c:36:be:a7:d8:4e:b3:97:53:66:59:a2:
7b:cf:6d:b9:0d:2b:68:eb:30:19:6c:5f:a5:76:07:
e1:80:ef:2e:59:fb:33:6b:ef:5f:8c:83:b6:42:ee:
fb:f4:1f:25:65:13:13:3b:96:d1:49:aa:94:d0:43:
ad:23:ac:0a:dd:fe:ca:44:17:db:bb:1d:0d:88:78:
57:2d:84:0c:dd:f8:48:4c:09:ac:bc:1d:8b:25:43:
d6:b6:18:66:eb:e1:2b:d9:35:99:e6:9f:98:d8:5e:
05:c9:b3:6f:11:92:7a:4c:74:de:ff:47:78:90:23:
f2:4d:a3:f8:c4:7d:93:11:33:98:9a:53:45:6f:19:
90:61:e6:01:3d:c5:59:62:82:7f:1c:08:23:38:83:
72:de:6c:9b:44:c9:61:1d:b6:32:fa:31:ab:d8:47:
52:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:5E:92:69:58:62:AF:D5:0A:E4:B8:61:5D:6F:DB:E9:FA:8A:42:49
X509v3 Authority Key Identifier:
keyid:84:72:2D:BD:42:26:7B:DD:D5:9B:88:41:52:99:25:35:31:E0:63:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHItvUIme93Vm4hBUpklNTHgY2Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:5e:b4:ad:a3:f6:3d:66:68:85:03:43:dc:bf:0d:25:96:df:
56:ae:b2:1c:ef:4a:7f:c1:75:0f:0c:d7:27:74:0e:86:7d:de:
33:a0:94:83:83:ac:54:85:ee:b6:ad:77:46:46:5e:c4:2e:a7:
33:6b:2c:91:2f:2f:a0:5a:08:7c:eb:e6:52:40:66:0b:c4:af:
0c:5d:4c:f1:e4:89:2f:43:e9:cd:0a:28:aa:36:1c:64:df:19:
b0:96:f3:8a:02:cb:5b:aa:fd:b2:c3:d8:8d:02:ed:53:51:7d:
ce:81:b5:bc:e2:e1:34:4f:0d:67:ad:f5:83:c0:fb:17:43:dd:
77:97:04:28:4f:63:dc:e9:68:e4:58:08:bf:f4:85:c3:d5:30:
df:7a:61:91:be:8a:99:36:2f:93:4c:20:10:fd:12:18:59:61:
c4:83:e0:e9:fb:0a:8c:23:32:07:72:dd:22:4f:48:46:97:a3:
bf:5b:43:48:60:a4:c7:50:ca:50:26:b8:80:8b:33:e1:6a:5f:
b9:65:8c:29:fa:e4:17:db:53:91:fe:8b:01:0d:1c:d7:08:e0:
df:e5:18:db:2e:3b:4f:59:59:b5:0d:9e:65:6a:d9:3a:f4:fa:
99:e5:7b:f8:80:7a:4f:72:6e:af:ac:f1:28:e1:cb:87:55:73:
ed:b9:0c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:27:46 2026 by rpki-client