
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.mft
File: hEIqhfpOTNTW7plGMaPQ8OboLTo.mft (raw, json)
Hash identifier: 3IYqqdPyoJ4+b25CT44kmVwZYH8pe6x0cFGbMYtlR38=
Subject key identifier: A8:30:B6:9C:AB:57:43:CF:0F:6E:A4:E9:88:AB:0F:CF:37:15:05:64
Authority key identifier: 84:42:2A:85:FA:4E:4C:D4:D6:EE:99:46:31:A3:D0:F0:E6:E8:2D:3A
Certificate issuer: /CN=A911C61C/serialNumber=84422A85FA4E4CD4D6EE994631A3D0F0E6E82D3A
Certificate serial: 040A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEIqhfpOTNTW7plGMaPQ8OboLTo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.mft
Manifest number: 0402
Signing time: Sun 19 Apr 2026 00:21:50 +0000
Manifest this update: Sun 19 Apr 2026 00:21:49 +0000
Manifest next update: Sun 26 Apr 2026 00:21:49 +0000
Files and hashes: 1: hEIqhfpOTNTW7plGMaPQ8OboLTo.crl (hash: mxwdiyw8u6Cfs6duR5D9viAYtJGiRz9y6EvB5zdMyAs=)
2: 214E0454B58A11ECAF32FE29C4F9AE02.roa (hash: DeN5+WLuYB95EX5XxNOKqEvwckp++ai7lfprhRYcj3g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.crl
rsync://rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEIqhfpOTNTW7plGMaPQ8OboLTo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 00:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1034 (0x40a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C61C, serialNumber=84422A85FA4E4CD4D6EE994631A3D0F0E6E82D3A
Validity
Not Before: Apr 19 00:21:49 2026 GMT
Not After : Apr 26 00:21:49 2026 GMT
Subject: CN=69e4201d-c23e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:07:3c:f5:9c:39:67:28:4d:71:9a:5b:4f:ea:
51:7d:77:00:d4:eb:1a:18:f8:d1:d8:c6:72:7c:24:
39:4e:e1:fb:1e:78:50:2d:2e:3d:00:ac:be:fa:76:
d0:1a:c3:c9:8d:20:8b:0f:bf:45:81:30:7e:07:50:
8f:b1:af:47:c5:43:26:4a:c6:5d:94:41:39:0c:15:
0c:d3:a6:7f:82:5e:be:ee:a3:3d:44:bb:f2:d3:e2:
b0:c8:6d:bd:39:19:33:28:6e:23:bf:02:2b:f3:8d:
36:a4:59:ef:a8:f7:8e:61:96:ed:d5:dc:ac:9e:10:
9b:6b:fc:48:b1:ff:38:16:01:68:e0:69:5e:f6:11:
24:e4:a3:d2:bb:a2:f5:07:56:32:9a:b0:cf:1a:78:
b1:76:2f:f4:12:14:04:67:0e:96:55:b4:57:60:5e:
2c:e3:36:a8:37:1e:a9:09:37:0b:99:51:28:9f:b4:
36:c4:10:e7:0a:ea:8a:44:ab:86:b7:da:b0:d6:98:
db:42:e4:83:57:aa:16:a2:42:1b:e2:37:98:97:a8:
39:6d:9f:50:73:0c:5d:c0:20:8b:ee:40:40:74:aa:
21:5f:d3:af:eb:02:68:e2:fb:cf:8d:07:83:d5:bb:
15:94:c8:6a:98:c4:14:4d:c7:98:db:a2:07:5e:33:
77:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:30:B6:9C:AB:57:43:CF:0F:6E:A4:E9:88:AB:0F:CF:37:15:05:64
X509v3 Authority Key Identifier:
keyid:84:42:2A:85:FA:4E:4C:D4:D6:EE:99:46:31:A3:D0:F0:E6:E8:2D:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEIqhfpOTNTW7plGMaPQ8OboLTo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:3c:3b:4e:cf:4c:fd:f1:fb:de:a2:27:0f:c7:77:95:7a:01:
8d:c4:f6:95:ef:c3:8d:af:12:05:2e:d2:fa:80:c2:fd:74:df:
c3:db:5c:b5:35:9a:0c:9f:b5:a4:af:b6:fe:db:37:c6:f5:8d:
db:23:1a:83:8e:56:1b:d7:f1:71:70:c3:73:a7:2d:7b:64:08:
c0:87:cf:7a:9e:bc:a6:2c:c5:eb:aa:98:b4:b0:9a:3f:94:ca:
81:e6:91:1b:76:c5:08:af:36:04:3e:c1:cd:71:61:6b:fe:35:
d4:70:32:6f:b2:d9:94:2e:3c:d3:fa:12:a3:fb:ae:fc:98:99:
c6:80:c6:c4:ff:5e:08:7c:c7:55:b9:cf:67:54:16:a3:33:6c:
f7:f5:6a:0c:fe:a3:f5:7b:ef:64:74:61:86:8d:26:42:9c:3f:
27:f4:53:da:2a:0a:b5:c3:02:25:07:d9:03:e8:a2:17:58:63:
66:25:24:13:6b:48:e3:2a:a8:94:bb:b5:f3:2d:60:08:4d:f2:
72:51:36:9b:f1:03:83:df:59:83:46:70:03:70:cd:ed:e9:95:
d6:38:6f:2e:27:4a:15:48:df:c0:b8:1b:14:a9:43:e1:f6:62:
75:4a:9e:6a:a3:97:00:92:d9:db:43:0e:03:eb:91:c5:81:fa:
b3:67:f4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:22:34 2026 by rpki-client