
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft
File: Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft (raw, json)
Hash identifier: dtkcKSexbr2JFWRQowSgxMHMByXunb8iZQuv5SqwLmo=
Subject key identifier: 3F:51:CD:7B:C3:CD:D7:02:7E:50:2B:03:31:D2:55:2C:38:79:1E:AF
Authority key identifier: 1F:3E:8B:01:D8:41:CB:E6:22:0D:02:D2:CD:11:13:54:F1:9C:47:B2
Certificate issuer: /CN=A912F17E/serialNumber=1F3E8B01D841CBE6220D02D2CD111354F19C47B2
Certificate serial: 3520
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft
Manifest number: 3516
Signing time: Mon 02 Mar 2026 02:42:46 +0000
Manifest this update: Mon 02 Mar 2026 02:42:45 +0000
Manifest next update: Mon 09 Mar 2026 02:42:45 +0000
Files and hashes: 1: Hz6LAdhBy-YiDQLSzRETVPGcR7I.crl (hash: vAXEorfbV6InrR18vO37jCVpO+SW6GMUE7Mz+bIudcQ=)
2: FFCDED80FFE111EFB1C18E52C4F9AE02.roa (hash: iPhOjlBD3f7GvwAVSRYP0vVFYxPQo14yXS2WkJSFj28=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.crl
rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:42:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13600 (0x3520)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F17E, serialNumber=1F3E8B01D841CBE6220D02D2CD111354F19C47B2
Validity
Not Before: Mar 2 02:42:45 2026 GMT
Not After : Mar 9 02:42:45 2026 GMT
Subject: CN=69a4f926-ba07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8d:6f:d2:b7:79:27:11:da:96:d2:ac:5b:9d:
f1:ca:4e:f2:88:6b:c5:5c:72:02:05:85:f6:a9:70:
78:7e:cb:26:bc:0f:79:20:89:a9:c5:bd:06:de:17:
2c:12:58:98:00:65:de:1c:4a:90:99:f4:57:aa:e7:
1b:68:05:88:a9:ce:3f:5f:23:13:20:24:81:0c:4d:
c3:46:db:81:e2:71:c7:6c:44:b4:4c:63:f6:c2:04:
62:91:a0:6b:b1:0e:9b:1b:dc:f9:d4:8b:72:f8:fc:
5b:63:7a:1a:5d:6c:35:ba:f2:2d:c2:09:49:c8:21:
66:59:4b:92:be:ac:7f:e7:6f:7a:95:64:4c:88:eb:
eb:e4:e3:cb:cd:1b:40:70:26:74:33:2c:72:83:e3:
28:be:34:7e:b3:ae:54:57:f9:2f:39:8f:bd:80:34:
a9:1e:24:e7:77:a6:bd:19:6f:32:6c:d0:84:8f:a0:
d2:bd:6b:97:52:09:13:88:14:23:ba:5f:e1:46:62:
3c:d8:b5:6f:7e:4b:17:58:bf:39:9d:39:71:8e:ed:
a5:7d:c1:74:16:b9:1c:35:f4:66:71:91:e8:70:2f:
e8:ad:53:a7:37:da:8c:84:3c:89:88:6c:69:75:c7:
c3:e8:c9:40:5f:9c:bd:0d:f9:11:14:01:03:ea:dc:
d2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:51:CD:7B:C3:CD:D7:02:7E:50:2B:03:31:D2:55:2C:38:79:1E:AF
X509v3 Authority Key Identifier:
keyid:1F:3E:8B:01:D8:41:CB:E6:22:0D:02:D2:CD:11:13:54:F1:9C:47:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
be:08:cb:1c:41:9c:93:24:35:c0:8a:b9:92:d9:b3:46:a8:36:
6a:30:3a:75:36:a8:17:35:13:50:98:67:7b:bc:54:e7:de:ac:
a8:c9:c8:9f:76:d3:9e:7a:f6:93:45:56:75:fc:ce:0b:34:bf:
3f:8a:0b:31:45:2a:6e:97:26:9a:3d:ee:3c:25:da:7d:4f:a8:
37:4c:d0:43:0d:85:69:09:94:d1:99:be:45:d8:ca:4b:f2:79:
2e:8f:b0:1f:c7:14:cb:3e:87:c9:77:6d:b9:69:01:69:28:9d:
1e:5f:d0:6f:c0:7f:9b:51:41:8d:61:bf:b2:5e:3f:f6:94:53:
c8:41:31:0b:29:9a:66:8d:69:0f:31:c8:10:19:c5:c4:d4:3c:
4f:37:19:c3:ab:d3:e8:4a:3a:6f:0f:b1:43:d8:4f:55:be:d8:
ff:63:21:1e:70:83:9e:97:b8:82:eb:5d:19:d0:5b:8a:b7:10:
a0:63:2b:e1:b2:c4:26:82:db:2e:4d:7b:02:a4:13:e3:d2:cd:
9d:60:c7:62:9a:53:7a:9b:f9:ef:a2:a7:9f:28:8d:4d:2e:53:
55:95:9d:2a:14:3f:d7:59:db:f2:5f:fe:07:e0:e8:ca:22:f0:
37:f1:9a:c6:11:49:63:fa:79:1f:0d:41:56:b1:0f:5a:05:f9:
c0:8e:c7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:43:51 2026 by rpki-client