
$ rpki-client -vvf rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft
File: Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft (raw, json)
Hash identifier: dKEukYKspbSsubYgh+vtcTRRYOzNCPC+NYdKZ1mBRcg=
Subject key identifier: 9E:E1:42:2E:06:27:49:A7:C0:73:40:9A:67:86:44:F8:89:2B:11:63
Authority key identifier: 1E:DE:5C:6E:00:80:28:BC:D2:AE:33:65:13:81:BD:E1:FD:07:C5:D4
Certificate issuer: /CN=A919BEDB/serialNumber=1EDE5C6E008028BCD2AE33651381BDE1FD07C5D4
Certificate serial: 1C05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft
Manifest number: 1BBB
Signing time: Thu 26 Mar 2026 16:13:49 +0000
Manifest this update: Thu 26 Mar 2026 16:13:49 +0000
Manifest next update: Thu 02 Apr 2026 16:13:49 +0000
Files and hashes: 1: Ht5cbgCAKLzSrjNlE4G94f0HxdQ.crl (hash: y2KR7AYPx7CmSXL0BWuKit8sCnmBXRykZbH+vV9jnek=)
2: AA54657A880E11ED9BE52B17C4F9AE02.roa (hash: d64wjm9gxbiMp8OVy71nexJK/cOMcYjRyvHzyINqLwQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.crl
rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7173 (0x1c05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919BEDB, serialNumber=1EDE5C6E008028BCD2AE33651381BDE1FD07C5D4
Validity
Not Before: Mar 26 16:13:49 2026 GMT
Not After : Apr 2 16:13:49 2026 GMT
Subject: CN=69c55b3d-dcb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e8:46:d7:0f:b8:0d:2b:c9:f0:e8:61:67:00:
aa:74:a3:6b:20:e8:f8:5c:f0:92:af:82:2f:37:a4:
a6:ae:d9:61:2a:b0:dc:32:00:91:83:bb:4c:83:3f:
21:bf:8d:08:05:cb:f5:c0:ae:87:06:9a:67:8f:75:
be:83:fd:48:2c:13:47:d2:e1:56:13:3f:b5:54:e8:
78:b7:c9:39:3c:0e:32:c5:04:3e:c6:b2:33:a9:0d:
b8:74:48:3b:2c:0e:ef:af:64:06:52:77:8d:df:5a:
66:15:5e:f7:23:80:3f:3f:77:66:35:56:fd:d9:70:
42:51:1b:54:6d:ce:7c:9a:0c:18:c5:19:ae:0c:e2:
3e:53:b0:eb:fd:4f:84:27:d3:3c:46:94:19:07:dd:
0b:26:1c:e6:6b:fd:a0:e8:0f:bb:39:40:c2:83:75:
36:b7:54:c1:4d:57:3d:3b:7e:54:99:6d:71:19:65:
9a:47:18:30:9a:23:94:53:bb:4a:25:19:3f:ef:ef:
b4:0d:a4:c7:3f:b2:3f:56:72:4d:d5:f3:e1:cc:e8:
e3:f4:43:de:32:29:16:2e:2f:32:f2:03:73:64:8f:
b6:ed:71:16:a5:3e:bb:4e:d3:1e:4a:a2:39:ad:7c:
3c:dd:47:e9:65:94:07:cd:f6:c0:fb:75:a0:e5:32:
05:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E1:42:2E:06:27:49:A7:C0:73:40:9A:67:86:44:F8:89:2B:11:63
X509v3 Authority Key Identifier:
keyid:1E:DE:5C:6E:00:80:28:BC:D2:AE:33:65:13:81:BD:E1:FD:07:C5:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:28:4e:83:31:25:38:a7:ac:c0:b8:69:18:a8:67:24:0f:5a:
6d:3e:26:95:df:9f:d0:8b:1c:85:c8:52:c4:13:ec:e2:5a:2b:
85:7b:b1:66:e6:1e:4b:35:0e:ac:bc:e7:54:ed:bc:75:d4:61:
72:20:c9:23:e6:df:ce:0b:87:c0:d2:e8:37:0f:07:e2:0e:24:
3b:59:38:6d:03:f1:30:13:78:fa:ee:a0:a1:ca:6a:71:86:93:
bd:64:71:3d:91:1f:fd:b4:ec:3d:47:71:04:aa:45:05:0b:c1:
9d:9c:69:b3:a8:2e:dc:9c:3b:1c:3b:e6:1c:eb:2b:db:f2:7f:
ee:db:48:cf:1b:0f:17:ab:74:18:57:8c:a3:d2:52:84:44:a1:
17:82:21:90:f6:5a:db:9a:cd:16:20:58:5f:17:19:0a:f2:ea:
47:35:6d:f1:6b:7a:5f:e6:f6:e3:ee:09:ef:9d:6b:85:e0:63:
34:fa:81:6d:cf:2d:23:ef:0c:72:de:2d:4e:ea:cb:48:0d:78:
cd:5e:2a:0a:c3:6c:6d:51:91:c2:87:4a:0f:74:be:c8:fc:38:
e2:27:cd:49:10:d0:e3:35:25:3d:8a:99:78:b3:5b:73:78:4e:
2e:80:51:81:d8:7b:84:80:aa:5f:5f:e7:5b:4d:ee:ea:8d:ac:
bc:b7:6c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:42:14 2026 by rpki-client