
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.mft
File: h7LA6ClUHS71JmOF6zlGuNUpBgg.mft (raw, json)
Hash identifier: PjE0erRKypn9Vnmb7oIUr96Y7NxrIHIBFwJjWnGUAIo=
Subject key identifier: B1:02:4E:A6:A7:3E:75:73:5C:25:0F:35:32:6F:36:BE:34:CC:73:F3
Authority key identifier: 87:B2:C0:E8:29:54:1D:2E:F5:26:63:85:EB:39:46:B8:D5:29:06:08
Certificate issuer: /CN=A911B5B0/serialNumber=87B2C0E829541D2EF5266385EB3946B8D5290608
Certificate serial: 08E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7LA6ClUHS71JmOF6zlGuNUpBgg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.mft
Manifest number: 08BD
Signing time: Mon 02 Mar 2026 00:46:13 +0000
Manifest this update: Mon 02 Mar 2026 00:46:12 +0000
Manifest next update: Mon 09 Mar 2026 00:46:12 +0000
Files and hashes: 1: h7LA6ClUHS71JmOF6zlGuNUpBgg.crl (hash: 2MBX59Che86gwZaCagp1qDQEPHCjP5FGTTAmNWMfRfA=)
2: 3619A9DA67B411F097A2770AC4F9AE02.roa (hash: Ksazfrc5OUb/nHj9nFm4bn/1eleiaahIlrj8EXouk8c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.crl
rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7LA6ClUHS71JmOF6zlGuNUpBgg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:46:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2278 (0x8e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B5B0, serialNumber=87B2C0E829541D2EF5266385EB3946B8D5290608
Validity
Not Before: Mar 2 00:46:12 2026 GMT
Not After : Mar 9 00:46:12 2026 GMT
Subject: CN=69a4ddd5-36a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8d:9a:9b:3f:ff:a3:e7:71:ab:79:0d:fa:0f:
4e:57:2d:d1:1d:2b:b7:35:cb:60:66:1a:2a:b9:eb:
5a:be:ac:90:52:d7:5b:4d:bd:83:c8:7d:f6:a5:11:
8e:a2:68:3d:1c:c3:99:13:a6:2c:cc:50:b8:1e:42:
36:1c:a3:29:b5:f3:41:9a:d7:b9:7f:83:c7:42:83:
9c:0f:e0:b6:ee:be:93:ae:5a:87:7b:cf:ac:24:30:
e0:48:18:fc:ca:bd:13:11:a8:d5:ec:2a:10:60:ab:
c5:b4:1d:cc:56:a2:85:95:69:46:db:48:d1:73:16:
74:f0:9d:01:d1:ed:88:27:db:c1:83:0c:03:c5:24:
d3:6e:91:7a:92:e8:ca:3b:e7:c4:d3:f0:60:26:8e:
55:d9:10:13:ec:4d:f8:45:93:75:8c:bd:a4:e8:44:
93:c6:8e:92:57:35:5b:1d:46:56:98:57:c4:85:94:
4f:78:16:e7:be:b9:3f:ec:5e:81:ba:84:9b:91:db:
8c:9e:d8:41:71:03:cb:1f:c3:86:65:a7:f1:83:e6:
5e:23:dc:b4:2c:db:bc:71:c6:15:6d:03:f1:cd:47:
11:75:11:20:f1:4a:8b:45:11:8e:d0:fa:c9:54:5c:
ce:fa:8f:c1:83:6b:6b:68:a7:a2:c0:17:48:08:0e:
de:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:02:4E:A6:A7:3E:75:73:5C:25:0F:35:32:6F:36:BE:34:CC:73:F3
X509v3 Authority Key Identifier:
keyid:87:B2:C0:E8:29:54:1D:2E:F5:26:63:85:EB:39:46:B8:D5:29:06:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7LA6ClUHS71JmOF6zlGuNUpBgg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:99:79:91:aa:63:9b:f7:10:cc:28:a0:6a:74:5d:ee:cc:31:
5c:20:7d:61:a2:c8:d7:06:9b:90:bd:29:79:41:d9:70:40:34:
e6:e0:32:fd:06:d4:16:68:65:9f:c4:9f:29:c4:22:0e:3e:5a:
33:9b:cd:af:37:62:18:33:02:46:88:6e:dd:38:a8:36:48:a2:
de:eb:2d:a9:7e:bc:33:42:e1:78:7d:5f:46:8b:7d:43:8c:aa:
e2:b7:05:85:f7:9d:14:fd:41:77:c0:d7:8d:52:5e:62:80:2c:
5e:6e:51:aa:e7:f8:57:16:90:86:cf:49:5d:07:2e:bf:80:d3:
49:e1:98:81:ca:e1:0b:64:ee:86:c4:6d:b1:53:6c:70:5e:88:
18:2f:49:8d:85:cd:03:3a:0d:2c:6e:69:88:f3:3e:de:e2:8d:
13:02:ad:d9:ad:90:ad:32:64:ba:4f:54:01:a5:a1:1e:51:3d:
eb:e4:c4:51:d4:27:64:d5:f2:68:c0:45:cf:8a:6e:7a:93:b7:
fd:c2:07:c1:a2:db:eb:5b:28:63:5c:50:b9:91:5d:7c:6f:8c:
c2:3f:df:43:76:f6:1c:fc:b6:5b:56:d8:c9:f4:84:0d:59:21:
7a:58:5c:72:ae:7f:e2:42:55:cf:6d:d2:a7:f0:d4:1e:f1:69:
02:76:47:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:15:28 2026 by rpki-client