
$ rpki-client -vvf rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft
File: rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft (raw, json)
Hash identifier: sT17OpJ3NZCJ8RwjM2ej0/cJGfmXPU1DHi5Zf5BndVQ=
Subject key identifier: 79:A2:B9:E5:58:50:D1:40:8B:1D:FB:E1:C8:96:DE:48:35:12:FA:71
Authority key identifier: AE:59:C7:1F:D6:3B:D2:6B:46:30:26:E0:74:90:46:97:04:A8:FB:9B
Certificate issuer: /CN=A914530B/serialNumber=AE59C71FD63BD26B463026E07490469704A8FB9B
Certificate serial: E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rlnHH9Y70mtGMCbgdJBGlwSo-5s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft
Manifest number: E8
Signing time: Sun 01 Mar 2026 22:35:49 +0000
Manifest this update: Sun 01 Mar 2026 22:35:47 +0000
Manifest next update: Sun 08 Mar 2026 22:35:47 +0000
Files and hashes: 1: rlnHH9Y70mtGMCbgdJBGlwSo-5s.crl (hash: Opvpi+YN0n4eGWhrD9WWcSTE/IcENG1rvbTxsyrLKRg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.crl
rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rlnHH9Y70mtGMCbgdJBGlwSo-5s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:35:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 232 (0xe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914530B, serialNumber=AE59C71FD63BD26B463026E07490469704A8FB9B
Validity
Not Before: Mar 1 22:35:47 2026 GMT
Not After : Mar 8 22:35:47 2026 GMT
Subject: CN=69a4bf44-5434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8f:09:a4:ed:40:c6:3a:89:e9:ba:6e:91:99:
3e:30:94:d0:02:d7:c6:17:5c:c6:d2:5e:60:a9:8b:
73:95:57:c7:aa:21:63:85:26:48:48:a3:9c:11:8d:
a6:65:0c:60:76:96:26:14:74:50:ec:68:ce:a3:2f:
c9:de:4a:eb:a8:4f:a3:dc:e9:ba:91:59:bf:f4:b6:
66:d5:11:bb:de:16:c8:4d:92:18:b2:84:56:d2:19:
0a:3a:e7:76:52:ed:03:c7:fd:2a:d9:8c:2d:55:a5:
1f:cf:29:a2:04:6d:7c:ff:94:6c:57:27:a1:24:35:
b4:69:02:55:cf:47:3c:72:c9:e3:dc:20:82:a9:4c:
2e:84:78:60:27:52:40:b4:ab:87:f5:54:b9:e8:07:
02:69:90:17:37:fc:03:1f:28:c6:a4:88:ed:77:29:
6e:64:8e:92:cf:65:af:3c:0c:44:09:21:3e:11:f4:
f9:d5:a0:5e:40:9f:a0:29:41:ce:b8:61:2f:e3:90:
26:c0:58:53:0f:9a:5c:56:c1:ad:55:f4:01:1d:6d:
18:df:13:6c:64:17:11:6e:b6:21:3b:7d:a6:46:f7:
a4:0e:96:1b:41:af:cb:63:b3:14:5d:87:76:94:22:
c2:54:f3:6f:b0:2b:6a:c6:33:f7:8d:74:ac:ed:e2:
8a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A2:B9:E5:58:50:D1:40:8B:1D:FB:E1:C8:96:DE:48:35:12:FA:71
X509v3 Authority Key Identifier:
keyid:AE:59:C7:1F:D6:3B:D2:6B:46:30:26:E0:74:90:46:97:04:A8:FB:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rlnHH9Y70mtGMCbgdJBGlwSo-5s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:17:5a:32:82:f0:fb:81:66:26:73:91:b8:b3:20:cc:35:4e:
34:a3:ed:31:cb:d8:c4:e7:4b:a0:aa:86:2f:ae:9c:5c:f8:5c:
43:b7:9a:45:0d:9c:4b:59:79:2b:fe:b9:51:57:f8:a8:23:fa:
6c:e2:c3:2a:89:2e:94:a1:da:69:fc:f4:07:cc:22:fc:51:94:
31:3e:0b:43:57:cf:a5:d2:10:ce:42:8c:ab:49:98:32:38:75:
bc:01:ce:f5:5a:5b:ba:b1:c3:a4:50:51:c1:4d:1b:de:d0:ee:
29:7e:f9:2e:48:91:af:2e:1c:0a:4c:91:93:ed:55:1d:97:50:
2d:16:ca:91:48:d5:9c:3b:53:dc:e9:f7:db:83:dc:83:69:09:
d0:2b:5a:03:b6:65:aa:31:28:6f:e0:e1:89:ac:f8:eb:97:ee:
52:ed:9c:09:69:69:45:14:9e:6a:24:65:13:a2:f6:f2:e9:ad:
20:89:ab:97:15:05:dd:0f:fe:f6:5b:83:e8:62:60:de:cb:30:
6c:38:e7:93:fd:09:cd:30:9c:9e:1f:2c:11:d3:d3:d5:24:15:
b8:58:c4:78:39:55:2d:6b:f8:dc:ce:38:06:d3:1c:fb:89:86:
03:2e:03:2a:07:d2:f5:10:ab:98:cf:e7:21:ff:3d:ea:5e:70:
bc:1f:62:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:21:35 2026 by rpki-client