
$ rpki-client -vvf rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft
File: H8daraClG-4avm9zNZ95tqNG9qQ.mft (raw, json)
Hash identifier: q8CdktCdxsBSmu+XYqYOSFk3ECFkxi1ESaBdrTuP7a8=
Subject key identifier: 75:37:52:E7:93:F7:4C:C9:38:8A:8B:66:6C:5F:FF:86:B5:BC:AC:B7
Authority key identifier: 1F:C7:5A:AD:A0:A5:1B:EE:1A:BE:6F:73:35:9F:79:B6:A3:46:F6:A4
Certificate issuer: /CN=A912372F/serialNumber=1FC75AADA0A51BEE1ABE6F73359F79B6A346F6A4
Certificate serial: 04C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8daraClG-4avm9zNZ95tqNG9qQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft
Manifest number: 04BE
Signing time: Fri 12 Jun 2026 23:53:43 +0000
Manifest this update: Fri 12 Jun 2026 23:53:42 +0000
Manifest next update: Fri 19 Jun 2026 23:53:42 +0000
Files and hashes: 1: H8daraClG-4avm9zNZ95tqNG9qQ.crl (hash: cEIeiaJPPp53Q6YKL3kbSlR3gIg0Dt9wAfK4eeOSKAE=)
2: FD8409A09C2611EC89DFBD46C4F9AE02.roa (hash: JLSpD4WP21I45YnxCYPUZKiI0CXdyL9PtVi/LHX9mJA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.crl
rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8daraClG-4avm9zNZ95tqNG9qQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 23:53:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1222 (0x4c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912372F, serialNumber=1FC75AADA0A51BEE1ABE6F73359F79B6A346F6A4
Validity
Not Before: Jun 12 23:53:42 2026 GMT
Not After : Jun 19 23:53:42 2026 GMT
Subject: CN=6a2c9c07-ef88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:23:a5:33:e6:3e:bc:39:0b:c0:58:65:84:d7:
ca:77:fd:98:72:b3:f8:e7:19:70:f5:3b:16:d7:7c:
4a:3e:0e:58:21:5c:6c:13:3d:72:0d:86:1c:49:b6:
be:2e:66:f5:26:bb:fa:eb:de:72:48:60:38:7b:43:
8b:d0:e9:93:03:a9:6a:92:25:66:d9:ab:fd:f8:ec:
e9:b4:33:fb:c3:ec:c3:ad:4b:eb:d5:39:1a:2d:0b:
b4:15:cd:fe:b6:80:3d:f1:14:11:a8:54:e4:0f:9e:
80:3b:22:60:df:1b:b5:2e:26:64:25:e4:b4:e7:ac:
3e:ae:e7:69:6f:c3:95:c6:38:b1:3e:57:a3:46:2f:
fd:81:0d:cc:cf:17:6d:a0:2d:f3:19:3e:f1:c1:60:
68:60:42:48:aa:7f:5f:ff:14:e0:d3:fa:2d:58:39:
ce:f2:c9:3d:70:28:ec:9f:d6:ee:92:94:e2:f2:80:
c6:b0:b6:65:d2:02:13:d0:dd:03:88:79:d4:f6:ae:
1e:f3:9c:36:f2:4a:20:d6:28:43:90:80:98:cc:6e:
9a:dd:0d:5b:92:11:ff:0e:96:dc:48:8a:9a:d2:ec:
65:fe:03:d5:4a:e3:e2:ee:21:20:f6:23:a8:07:80:
d6:b2:59:10:6c:27:19:31:10:ab:f1:32:cd:93:25:
14:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:37:52:E7:93:F7:4C:C9:38:8A:8B:66:6C:5F:FF:86:B5:BC:AC:B7
X509v3 Authority Key Identifier:
keyid:1F:C7:5A:AD:A0:A5:1B:EE:1A:BE:6F:73:35:9F:79:B6:A3:46:F6:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8daraClG-4avm9zNZ95tqNG9qQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:ab:24:12:cf:58:f9:e3:bf:2b:f5:95:d0:aa:a9:a8:c3:6f:
35:7b:cb:13:be:61:6a:46:b3:1f:c0:bc:89:f3:4b:3a:eb:26:
35:21:f0:fb:91:8a:1c:4c:e6:1e:03:0b:05:13:2d:d1:b5:4e:
72:d0:6f:65:c7:f2:d0:82:00:56:ad:81:6a:28:b1:b9:7a:b2:
81:a5:db:66:64:f6:96:98:9a:01:2d:e9:0f:d2:45:3a:e4:91:
6a:27:a6:a4:f0:c5:1e:8c:b6:1c:85:60:2a:49:36:4e:72:d6:
77:19:7e:ed:70:56:ae:3c:1a:55:8a:71:2f:77:d3:ce:2f:5c:
b1:15:55:3f:ab:32:41:aa:d1:e8:f5:f4:5f:f3:a7:dc:58:b9:
c8:e1:92:cb:5e:eb:8d:b6:27:99:3d:f1:f8:83:18:86:20:cf:
74:c7:51:b4:e1:25:d4:f2:1f:26:7a:37:8b:7d:fb:a8:68:3c:
20:cb:4d:21:e5:bf:33:05:f6:ce:53:6f:78:62:cd:4b:4f:b8:
ec:26:87:25:8a:bd:1a:a4:40:6e:03:61:27:a9:76:64:fb:08:
d4:dd:02:c5:1a:4a:1b:f7:2b:64:9c:b8:f3:80:3a:b1:88:26:
25:c8:ab:50:4d:16:ce:5b:7c:01:e1:fc:39:21:14:b4:23:95:
50:91:03:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:32:59 2026 by rpki-client