
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft
File: rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft (raw, json)
Hash identifier: SFfkFv8byLNK3uXyBhPtBfm1BrtqnIFSlaPiC6ZadCI=
Subject key identifier: 49:27:D0:53:FE:A1:74:BA:5D:95:0D:37:90:81:70:DA:AB:16:41:B5
Authority key identifier: AE:10:7F:3C:29:77:71:7A:1C:D3:57:1D:18:37:48:FD:07:D9:FC:5F
Certificate issuer: /CN=A9117E4D/serialNumber=AE107F3C2977717A1CD3571D183748FD07D9FC5F
Certificate serial: 3560
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft
Manifest number: 3548
Signing time: Sat 18 Apr 2026 14:26:21 +0000
Manifest this update: Sat 18 Apr 2026 14:26:20 +0000
Manifest next update: Sat 25 Apr 2026 14:26:20 +0000
Files and hashes: 1: rhB_PCl3cXoc01cdGDdI_QfZ_F8.crl (hash: udvkg4FB6BM/i12cHVniKKaOgn+KEAf71U0i0Hymvvg=)
2: 2FA57B9A97B611EDAE9D4381C4F9AE02.roa (hash: FVSbWN+txOfkWkBvMLmDBeYriGUMAw+teOvv0Ix7L2U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.crl
rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 14:26:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13664 (0x3560)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117E4D, serialNumber=AE107F3C2977717A1CD3571D183748FD07D9FC5F
Validity
Not Before: Apr 18 14:26:20 2026 GMT
Not After : Apr 25 14:26:20 2026 GMT
Subject: CN=69e3948c-04e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e4:77:c4:47:0c:d3:a2:17:b6:f8:a9:ba:8b:
63:cc:cd:81:74:47:2d:4e:c1:cb:d7:dd:48:9a:8e:
54:20:94:44:67:43:09:c7:ea:b3:e3:c1:95:48:0b:
11:07:8c:77:17:97:54:8e:1f:be:1e:ab:43:04:07:
ec:6a:44:94:b0:bf:a6:aa:07:e1:6e:96:74:ce:5d:
20:4a:20:98:42:fc:a5:98:47:9d:36:0e:8c:bd:cd:
09:fe:bb:86:61:29:22:4d:99:ff:cd:57:ed:e7:28:
5d:5b:c0:4f:a1:58:ad:47:e8:c0:17:03:11:29:da:
72:ea:09:82:fa:db:85:87:ad:48:ca:13:2b:66:58:
a8:4c:ef:a1:db:c6:be:68:06:71:24:ea:39:7e:4d:
9e:27:21:08:dc:54:34:35:bb:63:e2:8f:96:3f:33:
c2:27:ca:7d:02:40:7d:5b:64:68:dd:86:85:41:33:
25:7e:43:91:31:6a:6e:32:a2:0a:0c:0e:8a:0b:1c:
f1:f2:7c:5d:ed:ae:e2:a1:26:65:dd:8f:c4:1b:3c:
ee:ff:b7:5e:02:ca:4f:fb:34:05:aa:40:6b:48:47:
5a:b0:6a:95:cb:9d:d5:5a:49:2c:c0:94:44:de:9d:
d6:cb:f6:b9:4a:8e:c4:eb:bd:af:ea:08:d2:02:e7:
20:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:27:D0:53:FE:A1:74:BA:5D:95:0D:37:90:81:70:DA:AB:16:41:B5
X509v3 Authority Key Identifier:
keyid:AE:10:7F:3C:29:77:71:7A:1C:D3:57:1D:18:37:48:FD:07:D9:FC:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:3c:01:26:f9:5c:91:02:4f:47:df:c3:e9:c2:4c:78:fe:b1:
d1:59:a4:6a:58:50:50:09:01:d5:93:a9:87:1b:fd:d4:1d:49:
1d:9d:aa:37:0d:dc:80:41:7e:4c:67:1b:57:c5:41:a5:ab:97:
27:19:00:1c:d2:59:48:09:49:e5:e0:32:db:b0:8e:b5:f0:a2:
f3:f0:20:aa:59:14:ef:47:65:c9:17:5c:d2:29:2c:86:d3:31:
d1:ff:55:a0:19:92:b3:18:45:f1:17:a8:01:58:08:e8:b4:57:
8c:ba:bf:4f:25:08:2d:43:33:5e:44:67:37:08:36:6f:b2:6c:
92:f7:29:d1:9c:66:85:d9:ee:3f:6a:30:33:f5:ea:7b:db:b2:
b6:8d:c8:18:57:8b:df:16:f5:a7:45:df:d3:f3:28:05:83:01:
fb:fc:a1:40:a8:b0:02:36:de:d8:c3:d5:a8:a0:ae:c6:1f:56:
54:8a:8f:cf:82:54:46:b6:09:2f:1d:ee:11:ae:56:9b:74:fe:
36:28:72:2b:4a:c8:4d:43:e8:c4:e7:d8:95:99:5d:55:06:11:
4d:e5:42:95:d3:20:74:7d:f0:4c:42:5b:11:15:e1:24:af:3b:
dd:89:a1:b1:5c:2f:8e:29:65:ea:4f:3d:55:6d:67:00:fd:64:
cc:64:8f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:30:29 2026 by rpki-client