
$ rpki-client -vvf rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft
File: h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft (raw, json)
Hash identifier: N97B1T0rClK+bOOylQM5CyQwzgHdKzqlLXYkI58lTEY=
Subject key identifier: 3E:F7:A3:40:C1:EA:41:D0:C9:2D:68:CA:0E:B2:F7:FB:B7:AB:17:B1
Authority key identifier: 87:92:DE:39:9C:F6:31:93:DD:C2:9D:30:FB:F0:A5:81:E0:24:F0:03
Certificate issuer: /CN=A911A4F7/serialNumber=8792DE399CF63193DDC29D30FBF0A581E024F003
Certificate serial: 011F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h5LeOZz2MZPdwp0w-_ClgeAk8AM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft
Manifest number: 011F
Signing time: Sun 19 Apr 2026 05:21:47 +0000
Manifest this update: Sun 19 Apr 2026 05:21:47 +0000
Manifest next update: Sun 26 Apr 2026 05:21:47 +0000
Files and hashes: 1: h5LeOZz2MZPdwp0w-_ClgeAk8AM.crl (hash: gV02DoUX2+44Qt85M67rCvwvSiXpCgowZiEX/hPOxy0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.crl
rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h5LeOZz2MZPdwp0w-_ClgeAk8AM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 287 (0x11f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911A4F7, serialNumber=8792DE399CF63193DDC29D30FBF0A581E024F003
Validity
Not Before: Apr 19 05:21:47 2026 GMT
Not After : Apr 26 05:21:47 2026 GMT
Subject: CN=69e4666b-592e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3b:95:7b:2c:65:d2:a7:11:c5:74:d6:3a:0b:
ba:60:56:33:f6:09:54:b9:e0:e8:7f:55:58:c8:5b:
5b:f7:9b:9e:35:49:f8:c4:ef:fa:d9:c2:36:1f:fa:
7d:b6:72:1a:ae:b0:1c:e6:a2:0d:81:aa:11:a7:9e:
ee:e0:47:47:51:01:a1:20:b9:c5:da:20:1f:0c:64:
07:65:cd:4d:94:70:a8:dc:d6:b6:b1:a2:31:4c:ee:
8a:38:ab:03:a5:20:70:6e:f6:04:a5:43:09:4d:1a:
fa:5b:a6:c7:18:17:82:72:0d:94:55:84:bb:c0:9a:
59:7b:ee:a0:0c:2b:93:28:6c:cf:d6:8b:f8:97:3b:
81:28:b5:1f:3f:dc:d4:3c:eb:f9:69:53:7e:39:f0:
88:81:fe:6f:40:04:aa:94:96:1e:8b:07:95:8c:fe:
49:f4:b4:d8:f3:6d:dd:3c:0e:bf:c6:a6:83:7a:c3:
e4:1f:06:1b:e1:1b:4a:12:77:5b:6d:2a:9a:a9:c0:
ab:37:80:ef:81:0d:57:d5:a5:bf:ad:4b:c5:3c:38:
e4:4d:38:22:6e:25:66:80:5a:92:0d:ed:f8:94:87:
01:61:04:36:e0:9c:bc:dc:82:0d:fa:7c:ce:04:49:
15:f4:c8:a8:84:53:e8:7c:cd:7d:cd:37:28:4b:16:
11:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F7:A3:40:C1:EA:41:D0:C9:2D:68:CA:0E:B2:F7:FB:B7:AB:17:B1
X509v3 Authority Key Identifier:
keyid:87:92:DE:39:9C:F6:31:93:DD:C2:9D:30:FB:F0:A5:81:E0:24:F0:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h5LeOZz2MZPdwp0w-_ClgeAk8AM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:d7:26:0a:fc:ec:93:21:ac:d8:64:a9:f6:a7:a4:6d:eb:16:
d0:ce:cc:81:fd:c0:b4:07:74:9a:fb:94:de:84:be:96:c6:ca:
81:a3:7f:44:34:ff:ca:8e:d5:9b:d6:ad:a1:59:ec:5e:51:de:
3e:eb:73:b7:13:26:5d:24:a9:dc:4d:5a:93:ac:2a:53:52:02:
5c:56:81:c7:8b:28:4a:c9:f3:5b:73:83:ae:2e:4d:20:47:51:
a4:52:cc:3f:f8:ab:2a:d9:21:95:0e:35:c5:cc:a7:9b:96:89:
e5:4c:76:6c:27:1a:fd:16:34:07:3a:f8:ea:90:01:fb:e9:f2:
de:0a:56:38:aa:22:3f:24:c2:92:32:05:b8:70:1b:d6:69:0b:
a9:dd:32:89:65:28:7a:5a:22:88:25:94:ff:2a:7f:92:98:75:
2e:a7:ad:fa:23:19:12:fd:21:1c:74:cf:92:2d:fb:8b:27:f8:
60:21:e6:b8:e2:04:27:5a:40:70:da:d4:6a:20:94:91:5e:3d:
ae:bf:9f:ad:ad:97:d0:1c:68:1f:25:2c:be:a3:3c:40:84:ad:
f9:c2:5d:99:88:57:94:f5:0d:8f:c1:f2:e1:ff:ef:df:0c:8b:
19:a8:ab:eb:f5:27:d8:be:61:a6:8c:5d:86:fa:81:4a:16:6a:
5e:ae:7a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:40:38 2026 by rpki-client