
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D0CA/B78873A245B811F084F36C5FC4F9AE02/pHTwjH8_SI1bkOEpmjSf8lHd4R8.mft
File: pHTwjH8_SI1bkOEpmjSf8lHd4R8.mft (raw, json)
Hash identifier: U44UM5qtL9omvXjynEoAJ5TCuDfvJ/XmTyZkqhaiTY8=
Subject key identifier: F0:36:5C:EE:D6:93:91:20:B6:DB:CF:A5:55:97:92:5E:75:80:DC:52
Authority key identifier: A4:74:F0:8C:7F:3F:48:8D:5B:90:E1:29:9A:34:9F:F2:51:DD:E1:1F
Certificate issuer: /CN=A913D0CA/serialNumber=A474F08C7F3F488D5B90E1299A349FF251DDE11F
Certificate serial: A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pHTwjH8_SI1bkOEpmjSf8lHd4R8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D0CA/B78873A245B811F084F36C5FC4F9AE02/pHTwjH8_SI1bkOEpmjSf8lHd4R8.mft
Manifest number: A4
Signing time: Fri 17 Apr 2026 07:00:31 +0000
Manifest this update: Fri 17 Apr 2026 07:00:30 +0000
Manifest next update: Fri 24 Apr 2026 07:00:30 +0000
Files and hashes: 1: pHTwjH8_SI1bkOEpmjSf8lHd4R8.crl (hash: lBn64ApGRTzJcSv4OjadVIqNeUbayKKZAzB6O2ymI/M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913D0CA/B78873A245B811F084F36C5FC4F9AE02/pHTwjH8_SI1bkOEpmjSf8lHd4R8.crl
rsync://rpki.apnic.net/member_repository/A913D0CA/B78873A245B811F084F36C5FC4F9AE02/pHTwjH8_SI1bkOEpmjSf8lHd4R8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pHTwjH8_SI1bkOEpmjSf8lHd4R8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164 (0xa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D0CA, serialNumber=A474F08C7F3F488D5B90E1299A349FF251DDE11F
Validity
Not Before: Apr 17 07:00:30 2026 GMT
Not After : Apr 24 07:00:30 2026 GMT
Subject: CN=69e1da8f-02a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:08:26:d9:dc:fa:04:88:aa:2c:16:9d:87:06:
a0:9c:b0:73:e5:aa:20:5d:00:6f:3e:db:53:d5:f8:
65:87:24:00:81:d6:ca:4d:b0:bf:0a:7a:2d:0b:bc:
e7:94:64:03:68:92:5b:df:dc:6c:97:c0:eb:8a:2c:
e0:f4:2e:ad:ab:be:0e:ee:52:32:4a:8b:dc:cc:6e:
47:20:1a:a9:7e:0f:96:aa:22:b6:dc:f1:d8:88:f9:
48:9e:22:90:ce:32:5f:aa:f7:71:73:ef:1b:97:62:
c8:90:eb:97:4c:30:1c:22:cb:78:86:d1:3e:94:fc:
2f:c0:d8:2c:aa:bd:fc:f1:8f:47:02:4e:62:93:62:
27:e4:54:8d:a4:1d:07:57:31:b1:48:f4:6b:a0:36:
a5:b3:1f:e2:57:94:81:92:21:63:0f:a9:c6:fb:1e:
73:b7:28:cc:7c:1b:fb:38:01:8a:2d:60:6f:14:74:
9d:8f:4e:80:3b:9d:28:6c:f4:b7:0a:13:08:b8:d4:
2b:30:78:3e:0c:81:1f:b0:35:47:e0:3e:92:de:cb:
6a:87:d2:33:ff:ca:06:eb:80:80:ff:75:dd:6a:54:
86:6c:b4:7f:e1:2e:3d:e4:f6:5a:04:12:3c:9b:cb:
f4:c6:ab:d3:0e:4e:e8:4e:bb:cc:4f:06:fc:be:03:
54:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:36:5C:EE:D6:93:91:20:B6:DB:CF:A5:55:97:92:5E:75:80:DC:52
X509v3 Authority Key Identifier:
keyid:A4:74:F0:8C:7F:3F:48:8D:5B:90:E1:29:9A:34:9F:F2:51:DD:E1:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D0CA/B78873A245B811F084F36C5FC4F9AE02/pHTwjH8_SI1bkOEpmjSf8lHd4R8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pHTwjH8_SI1bkOEpmjSf8lHd4R8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D0CA/B78873A245B811F084F36C5FC4F9AE02/pHTwjH8_SI1bkOEpmjSf8lHd4R8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:58:33:0e:c1:79:1e:0f:5c:c9:d5:1e:e0:91:bf:ab:a7:b2:
25:61:ad:82:16:2d:3c:38:95:87:9b:d7:91:db:c6:38:a6:e6:
58:16:e4:49:02:0d:3b:44:b2:b0:b7:ce:58:b8:af:b2:03:94:
3b:6e:ff:5e:1b:22:50:b4:81:ee:a6:0b:65:bb:c8:61:aa:95:
72:32:30:64:cf:f5:85:e3:f4:f2:38:b1:2c:67:df:0f:81:95:
14:1e:9c:8d:64:4d:2a:e0:4d:1b:c9:d2:82:5d:d2:f4:0b:ef:
aa:81:1c:26:e6:c7:06:71:2c:50:54:91:ee:7b:24:22:0d:cf:
f1:e4:c1:a7:fd:f0:a0:ba:17:3f:9b:93:f6:ac:9a:a0:da:f4:
07:c1:aa:29:87:22:28:68:c0:a4:42:9e:cc:e0:0a:55:f9:35:
1d:41:e4:41:21:1d:82:86:db:4f:e9:0f:c6:7d:2e:e6:1f:b2:
0a:12:12:c7:ae:47:30:52:49:ee:3b:e1:6d:9b:a5:60:db:0d:
59:41:74:a8:71:2c:64:8c:df:b5:2f:d5:e4:e2:6b:3a:c4:0e:
a6:1f:3c:c4:00:15:5f:d8:40:c0:55:11:b3:e1:8b:7c:74:81:
e6:54:fb:57:73:7a:b4:95:35:3a:47:f7:af:cb:1f:9f:57:68:
59:e4:63:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:21:19 2026 by rpki-client