
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft
File: H5ogKJzpMW5ls9tyToxzYGyPhks.mft (raw, json)
Hash identifier: LXYR0bNXaKWL3A6iUW7aui3up0CidgrvEY6FwyZyK5U=
Subject key identifier: C1:E3:30:95:83:A7:E8:9A:B9:8A:09:21:91:6C:6E:AB:DA:C1:67:52
Authority key identifier: 1F:9A:20:28:9C:E9:31:6E:65:B3:DB:72:4E:8C:73:60:6C:8F:86:4B
Certificate issuer: /CN=A914BF33/serialNumber=1F9A20289CE9316E65B3DB724E8C73606C8F864B
Certificate serial: 0CCC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft
Manifest number: 0CB5
Signing time: Mon 02 Mar 2026 00:25:23 +0000
Manifest this update: Mon 02 Mar 2026 00:25:21 +0000
Manifest next update: Mon 09 Mar 2026 00:25:21 +0000
Files and hashes: 1: H5ogKJzpMW5ls9tyToxzYGyPhks.crl (hash: UvyJaMYL1aKk2JJrAe5H05OLod79nP5YTj34F8X4Nbg=)
2: 67827BDC0B8511EA97C80D52C4F9AE02.roa (hash: tcDVHJrWSVmqtE3KfMdxpE8eti6SUsQc8cAfExl/fX0=)
3: 172E487A416911ECB6B11742C4F9AE02.roa (hash: Ipc6oIv3wAFztOTtoYsux+k4MR+JL3rDy/edFa4+Y34=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.crl
rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:25:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3276 (0xccc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BF33, serialNumber=1F9A20289CE9316E65B3DB724E8C73606C8F864B
Validity
Not Before: Mar 2 00:25:21 2026 GMT
Not After : Mar 9 00:25:21 2026 GMT
Subject: CN=69a4d8f3-d1e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:62:d2:45:7a:12:ac:63:c0:96:e2:42:34:e7:
c1:52:46:ea:3c:46:c1:46:ba:29:f4:68:d9:4b:4e:
f3:16:41:ac:bd:40:60:a6:2b:79:cf:c0:69:1a:ee:
ca:05:87:10:f6:e3:92:59:bc:cf:12:98:3d:58:25:
b3:89:4f:4e:b2:e2:73:eb:27:fe:b0:86:fd:2c:80:
a6:e6:9b:64:bc:b6:ff:fc:17:2d:19:5c:13:63:7f:
d3:74:10:ab:10:e5:18:dc:51:1b:79:a5:eb:ae:7a:
54:a4:15:17:fe:b5:52:bb:54:15:9e:a9:ad:83:3c:
d9:34:f8:1c:f6:1d:aa:11:8e:b1:14:03:c7:70:47:
05:45:74:d5:70:1d:c4:ad:df:16:33:7d:98:26:ae:
be:a1:d9:ff:a9:1c:eb:c7:d8:f1:e4:e8:8f:77:92:
b5:6d:a1:6e:89:1f:48:5f:ef:da:60:46:bd:e6:ab:
0c:b8:56:db:f4:b0:c1:23:4d:d3:9f:47:e4:5f:73:
fa:03:1f:4f:11:fc:20:94:ab:fc:f9:57:ee:b5:25:
eb:f4:39:48:bb:b0:31:3e:3a:eb:3a:ab:20:18:81:
f6:ca:6c:7c:de:23:c3:0e:14:f2:8b:c3:3d:fc:2e:
51:da:6a:a5:bb:f2:47:e1:24:85:77:8b:e5:59:bd:
5b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E3:30:95:83:A7:E8:9A:B9:8A:09:21:91:6C:6E:AB:DA:C1:67:52
X509v3 Authority Key Identifier:
keyid:1F:9A:20:28:9C:E9:31:6E:65:B3:DB:72:4E:8C:73:60:6C:8F:86:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:55:db:19:63:71:36:b7:fc:98:b5:7f:b4:05:5a:2e:f9:85:
68:53:3f:82:ed:d6:75:4d:a0:f5:f5:62:49:09:3b:6f:e6:39:
47:0f:65:e3:c8:69:bf:6d:76:26:af:47:1b:23:c1:b1:95:ed:
6c:9c:f5:aa:01:cc:0b:d2:ce:5b:73:b2:f4:55:e7:01:ea:90:
1e:f2:b0:a3:8d:8a:e3:09:ed:0d:d0:8d:85:06:1a:a1:ff:95:
40:5d:58:7f:a8:3d:df:1c:43:b1:f9:00:44:4f:0a:7d:d3:94:
0b:27:96:74:2d:ce:44:6d:1c:b1:fc:9e:c1:63:a5:9c:89:3f:
11:0a:89:12:bc:a5:18:a8:62:ea:97:83:f5:cb:1b:89:c5:7c:
8f:98:26:e0:b8:56:be:3a:80:71:2c:0e:52:76:7f:1d:b1:bf:
6e:06:cb:59:8a:6e:1d:61:1e:1e:a6:0b:f8:58:37:96:79:06:
fc:40:49:25:b4:f6:9d:d3:d5:8b:69:0a:9d:3e:42:de:ea:89:
f4:0b:79:b8:ab:ab:fb:3a:1f:81:5b:eb:73:22:41:5f:e9:e1:
61:21:5f:3c:7a:55:0e:e5:66:28:1b:8e:d8:f6:f0:f7:6f:ec:
6e:8b:31:82:f1:16:6f:ae:36:52:2f:d3:4b:ef:89:f6:37:67:
8c:b2:94:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:01:09 2026 by rpki-client