
$ rpki-client -vvf rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.mft
File: hm540aRej9EmgIr_fOpPwI59kqg.mft (raw, json)
Hash identifier: afTb41R8e+Q7Mq4tccbT4Nqxy7CLmQYpkX2GhRxOajQ=
Subject key identifier: 85:2F:12:22:FD:60:8E:6D:0D:41:61:A4:F4:6C:31:7A:AD:F8:CE:7F
Authority key identifier: 86:6E:78:D1:A4:5E:8F:D1:26:80:8A:FF:7C:EA:4F:C0:8E:7D:92:A8
Certificate issuer: /CN=A911CFCE/serialNumber=866E78D1A45E8FD126808AFF7CEA4FC08E7D92A8
Certificate serial: 016C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hm540aRej9EmgIr_fOpPwI59kqg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.mft
Manifest number: 0163
Signing time: Sun 01 Mar 2026 06:00:03 +0000
Manifest this update: Sun 01 Mar 2026 06:00:03 +0000
Manifest next update: Sun 08 Mar 2026 06:00:03 +0000
Files and hashes: 1: hm540aRej9EmgIr_fOpPwI59kqg.crl (hash: EN7wG7AhcP64YVvpijYEfTtUWDc4F+skVYWr3WYUjPI=)
2: 35274C3080AF11F0BAFC1E65C4F9AE02.roa (hash: 7HONP22Ru+ZwbPqR0qZD9dpRS6n+36hJIPSSh9b77BI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.crl
rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hm540aRej9EmgIr_fOpPwI59kqg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 364 (0x16c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CFCE, serialNumber=866E78D1A45E8FD126808AFF7CEA4FC08E7D92A8
Validity
Not Before: Mar 1 06:00:03 2026 GMT
Not After : Mar 8 06:00:03 2026 GMT
Subject: CN=69a3d5e3-a212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:60:a7:57:cc:3a:e7:a8:bd:74:af:13:92:e7:
be:72:5c:62:6d:f0:db:a6:47:1b:a4:b9:6d:a7:16:
e8:af:7e:17:45:1d:a9:6d:15:26:de:55:3e:fa:ad:
d1:88:c0:bd:39:01:41:06:10:11:e3:3b:c9:03:de:
b7:26:53:c5:df:8d:e1:ec:1d:a3:cf:fb:e7:37:ad:
3a:36:88:bf:87:ae:a9:ff:13:d9:8b:0e:5e:76:96:
46:cc:7d:8e:7d:a7:f5:08:d2:74:89:f5:bf:c3:4b:
01:4b:b8:1c:91:a1:25:c2:bc:35:60:81:53:6d:40:
6b:96:f4:d3:d3:ad:ef:7f:76:93:72:17:0d:61:41:
25:52:b6:b3:e7:e4:0f:a0:9e:21:68:42:54:ce:82:
de:41:71:fd:c8:6f:ef:44:c2:5e:8e:17:50:a0:9a:
75:ff:1a:7a:a3:56:48:e5:2a:e9:d9:4b:c3:3a:0a:
69:90:71:c6:0f:87:46:c4:d5:3a:06:ee:30:48:35:
11:fc:81:e4:5c:de:86:35:81:8f:01:5d:fa:6d:8f:
0c:a1:57:82:66:26:e2:9a:7d:4c:e4:6d:6a:e4:03:
5b:56:53:ab:2d:c6:ec:d9:0b:f6:eb:22:dc:11:63:
6c:32:63:56:49:34:3d:a7:05:99:f9:fe:f1:4e:da:
bb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:2F:12:22:FD:60:8E:6D:0D:41:61:A4:F4:6C:31:7A:AD:F8:CE:7F
X509v3 Authority Key Identifier:
keyid:86:6E:78:D1:A4:5E:8F:D1:26:80:8A:FF:7C:EA:4F:C0:8E:7D:92:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hm540aRej9EmgIr_fOpPwI59kqg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:cb:dd:6c:04:88:4e:ca:e8:b5:76:04:3e:c4:c7:e6:4b:7d:
07:00:76:d6:7f:c1:a4:b3:4d:61:14:7f:f4:41:cc:01:6f:a9:
b6:ea:df:7e:c0:a8:16:7e:a6:f9:3e:1d:2e:ee:96:91:1d:b5:
cb:96:30:34:f5:3c:36:da:d4:de:75:47:69:86:2a:b4:4b:57:
b4:10:78:8d:b8:c2:12:ba:5f:5f:7c:c0:ca:d7:22:3e:93:87:
81:a9:e7:cf:01:f3:5c:ca:44:e0:73:5b:ec:77:a0:8b:c6:63:
a9:11:57:44:b5:1b:79:77:81:54:65:39:be:45:42:0f:c7:7e:
0f:88:49:ec:9b:eb:b9:c6:ed:ba:70:55:ed:07:b5:27:e5:ed:
11:ec:73:1c:1a:34:2e:61:49:9b:1a:34:21:be:b6:6b:02:99:
3f:77:4b:78:f0:e6:5f:8d:0a:28:1d:12:e6:b9:8c:47:42:38:
cc:1e:a5:75:1d:a6:6d:85:85:fa:8d:aa:ac:54:7c:ba:a9:f6:
ce:c0:00:3d:06:05:c9:1a:ad:8c:a2:c1:08:f0:dc:8a:29:8f:
42:ba:0f:a8:76:ad:bd:f6:c8:6d:79:b4:03:19:70:32:ab:fe:
7e:9e:57:40:43:04:c2:62:39:f6:f9:09:30:e7:32:c7:84:42:
84:bc:a6:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:34:42 2026 by rpki-client