
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft
File: rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft (raw, json)
Hash identifier: l71aqmo9PUFeOAHuqV2BZeB0z0S7tmis88l1P4VZj1k=
Subject key identifier: 8E:0D:AC:C3:08:FD:36:02:78:E7:D4:A5:27:6F:92:E7:26:72:E1:1B
Authority key identifier: AE:16:04:58:72:DD:DA:C3:DC:F1:2F:07:95:CA:D7:0E:4C:09:D9:6C
Certificate issuer: /CN=A912D2CE/serialNumber=AE16045872DDDAC3DCF12F0795CAD70E4C09D96C
Certificate serial: 0D6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft
Manifest number: 0D5D
Signing time: Thu 24 Sep 2026 18:02:01 +0000
Manifest this update: Thu 24 Sep 2026 18:02:00 +0000
Manifest next update: Thu 01 Oct 2026 18:02:00 +0000
Files and hashes: 1: rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.crl (hash: R7DthjjW1z4HgG2ySrwNztmGMs8MJrhSS34SmeN05Ck=)
2: 25234272DF4311EDA83C7074C4F9AE02.roa (hash: GvywSj55EV1yzQml0fqNzXzPDZF0ADJSCDwlr5eZm/s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.crl
rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 18:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3434 (0xd6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D2CE, serialNumber=AE16045872DDDAC3DCF12F0795CAD70E4C09D96C
Validity
Not Before: Sep 24 18:02:00 2026 GMT
Not After : Oct 1 18:02:00 2026 GMT
Subject: CN=6ab56599-3e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:77:44:79:e7:16:d4:86:56:d7:39:27:f0:23:
89:bd:ce:1e:72:24:c5:9e:4c:38:b3:dc:12:6a:89:
33:87:70:bd:06:15:80:5f:b8:20:8f:aa:0e:ef:a8:
2b:e8:44:fd:57:04:c3:2a:63:0b:f8:c5:f6:8a:b5:
61:6e:cc:f5:74:d6:59:cd:9c:76:77:94:59:2d:68:
e6:0a:0b:ac:25:6b:ce:3b:1e:0a:90:6a:c3:82:ec:
7a:8e:6b:b7:5f:18:b5:42:53:fc:03:89:fa:4d:ba:
3f:85:b9:ce:19:49:44:0d:4f:53:e0:84:65:2c:0a:
98:3a:78:0a:26:0b:87:7c:a9:78:f2:c5:54:4b:b3:
5c:1e:26:df:8a:af:76:8a:43:3d:66:e6:ec:ae:bd:
d0:21:38:d5:8f:fd:17:0e:c8:51:3d:cc:f1:9e:67:
0a:47:49:c6:54:eb:5a:18:0b:30:84:0c:59:e0:65:
a6:8b:74:8d:8d:49:43:2b:bc:04:be:8d:fc:17:16:
96:b5:81:d7:c0:ec:fd:05:4f:96:51:dd:0c:66:b0:
70:28:65:00:7b:ef:2c:a6:9c:3e:f6:37:77:ad:ed:
b7:f9:51:6c:a9:e3:ab:78:d9:2a:98:23:fe:1d:df:
36:6d:90:79:58:08:47:12:89:02:82:0a:d2:45:f0:
5c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:0D:AC:C3:08:FD:36:02:78:E7:D4:A5:27:6F:92:E7:26:72:E1:1B
X509v3 Authority Key Identifier:
keyid:AE:16:04:58:72:DD:DA:C3:DC:F1:2F:07:95:CA:D7:0E:4C:09:D9:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:3c:ee:3b:1e:e4:f2:5e:f2:f8:b7:50:f2:68:35:ef:31:23:
16:93:a6:08:a5:fe:75:5e:7e:9b:91:d1:09:df:4c:32:81:f1:
4c:f5:a5:c7:38:17:4c:71:3b:95:24:d8:92:f5:6c:30:8e:9c:
30:38:40:4c:a7:20:0a:e0:5e:92:6b:f7:55:92:ef:5d:16:d1:
fc:93:89:16:45:8c:b5:32:05:56:87:58:b8:42:81:5f:91:8b:
12:c3:f6:cb:ba:79:af:74:c9:4c:58:3f:4c:4f:69:41:06:aa:
94:1e:3b:f8:90:11:5e:8c:3e:82:95:21:2b:f2:f0:22:c2:a5:
74:9a:d7:7d:7e:2a:47:58:d5:2a:57:ca:f7:44:85:62:77:d6:
28:76:e7:ee:0a:89:90:bb:16:24:30:40:4b:c9:46:6c:ea:45:
af:80:23:ab:ff:be:f3:95:c8:85:5b:b9:93:a9:08:53:88:7c:
e8:be:ad:6e:bf:59:28:37:05:47:43:28:d5:77:80:ac:42:d7:
13:95:87:c8:54:94:ab:ad:92:e2:d1:cc:6c:6c:59:b6:ba:a1:
b9:40:dc:e1:4b:d8:bf:ec:ce:9f:b0:79:4a:f6:f8:4b:49:55:
af:a9:f4:b3:5b:9b:45:ec:2b:47:13:80:c5:66:b5:80:37:98:
a6:ca:36:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:33:03 2026 by rpki-client