
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft
File: fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft (raw, json)
Hash identifier: CHw7Hfnn8zriL9c2edEyYZ+G4OwwhWblwSVrVUm6kTE=
Subject key identifier: 95:07:44:A0:90:00:7B:60:99:62:3E:A9:71:2C:A6:89:04:C6:F2:9D
Authority key identifier: 7C:72:8B:97:04:29:D4:70:09:79:78:A1:6E:76:7B:21:DC:6E:3B:1F
Certificate issuer: /CN=A914B610/serialNumber=7C728B970429D470097978A16E767B21DC6E3B1F
Certificate serial: 352A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft
Manifest number: 3529
Signing time: Thu 16 Apr 2026 15:10:58 +0000
Manifest this update: Thu 16 Apr 2026 15:10:58 +0000
Manifest next update: Thu 23 Apr 2026 15:10:58 +0000
Files and hashes: 1: fHKLlwQp1HAJeXihbnZ7IdxuOx8.crl (hash: BRqAfI7XKHLAQJuSYEdx6RFRcAoc8cCnrR73RiyQavM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.crl
rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:10:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13610 (0x352a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B610, serialNumber=7C728B970429D470097978A16E767B21DC6E3B1F
Validity
Not Before: Apr 16 15:10:58 2026 GMT
Not After : Apr 23 15:10:58 2026 GMT
Subject: CN=69e0fc02-7dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b6:f3:8c:59:16:8c:b5:c2:cb:52:98:9b:df:
94:0a:f4:98:7c:3b:31:de:2d:26:90:f1:37:d5:3e:
dc:eb:e5:d2:99:9e:20:c4:b8:21:c1:41:a6:a0:64:
b6:8a:d4:1e:2c:fe:84:dd:ec:f8:be:91:61:f8:42:
b8:82:36:6c:67:d3:02:5e:8f:0e:2d:ab:22:01:d8:
9e:32:53:91:4b:e4:e6:7e:da:3f:f3:e6:23:d5:82:
5e:36:c5:d8:8e:9e:8c:23:37:89:9b:fd:72:71:b2:
7c:97:35:5b:b9:3e:20:84:11:af:a5:ca:95:13:fd:
b6:1b:04:0c:4e:8c:38:c5:d9:1b:e4:90:ac:e5:53:
2b:1d:b8:e4:28:6f:d5:43:c5:3d:d1:62:4b:06:a9:
13:f7:6e:d6:85:b3:48:c3:80:0b:8d:3d:7e:5a:a0:
6b:37:1a:98:b4:5b:5a:92:4a:be:a3:b4:ad:5b:d0:
c9:3d:32:19:7f:77:36:f9:cf:78:4a:4b:40:f3:bb:
cb:ac:65:a2:80:48:e9:55:82:15:c6:63:b0:3a:9e:
f7:c4:43:43:d8:df:45:f5:cc:2f:93:1b:ce:25:4e:
a4:26:2f:47:2a:92:45:d8:a4:fc:10:d3:66:70:b5:
86:2a:7f:cb:76:4f:4f:09:02:6a:b6:37:94:a6:6d:
e2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:07:44:A0:90:00:7B:60:99:62:3E:A9:71:2C:A6:89:04:C6:F2:9D
X509v3 Authority Key Identifier:
keyid:7C:72:8B:97:04:29:D4:70:09:79:78:A1:6E:76:7B:21:DC:6E:3B:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:cd:49:cb:bb:64:e7:ea:14:a0:9a:2b:26:71:48:37:e7:91:
c5:1d:06:2d:cb:44:0f:5b:4d:b6:d9:00:a8:0d:e4:ac:99:28:
4f:18:68:31:59:fe:f1:4a:d7:ce:3d:39:1c:f7:7d:36:d4:2b:
31:0d:c2:6e:43:dd:22:64:17:30:51:a5:e8:f7:a0:ba:2a:fb:
b8:d1:1e:52:1b:a0:6d:aa:d0:90:cc:a9:d2:35:23:4d:bc:38:
89:0c:96:01:88:67:60:f4:74:be:3b:88:5b:eb:db:87:e8:38:
e0:fb:ef:ff:42:c6:87:de:ed:4f:bc:55:25:0e:ca:b3:d7:e0:
c0:1d:19:1b:74:74:24:2e:f9:e1:5d:28:14:04:87:8e:00:59:
4a:fc:76:f1:05:d8:00:ce:4a:0b:19:75:7f:a4:17:e6:34:8c:
87:57:14:1b:88:87:aa:10:d7:5e:ba:20:49:ac:d9:aa:72:5c:
77:60:c9:c0:ec:64:91:b3:22:89:16:58:23:ef:60:5a:3d:39:
0e:ad:fe:76:24:73:59:52:21:d6:15:7f:5d:a9:e5:61:13:0b:
9a:ed:46:be:2e:c9:57:e2:8c:d8:30:2b:23:6b:b3:0b:60:f6:
be:f6:e2:1f:3e:ec:f9:eb:33:05:d7:1b:97:19:17:53:8c:23:
61:1d:23:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:23:59 2026 by rpki-client