
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft
File: h57Jr836J6POe11DeHoviQOFWG4.mft (raw, json)
Hash identifier: oQ4iJ4LjC7dNYVszr/hLthbELf+ViOZGuI3C1bRXVi8=
Subject key identifier: 3B:93:D0:F0:AD:32:12:23:C6:F2:47:9A:7C:5C:52:6D:05:B2:61:8C
Authority key identifier: 87:9E:C9:AF:CD:FA:27:A3:CE:7B:5D:43:78:7A:2F:89:03:85:58:6E
Certificate issuer: /CN=A914E556/serialNumber=879EC9AFCDFA27A3CE7B5D43787A2F890385586E
Certificate serial: 0826
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h57Jr836J6POe11DeHoviQOFWG4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft
Manifest number: 081E
Signing time: Sat 28 Feb 2026 21:23:01 +0000
Manifest this update: Sat 28 Feb 2026 21:23:00 +0000
Manifest next update: Sat 07 Mar 2026 21:23:00 +0000
Files and hashes: 1: h57Jr836J6POe11DeHoviQOFWG4.crl (hash: kV+mTIlWGeCoB7QSCeCcMnbNmbZOEuA7K9x4NplGgl0=)
2: 375F7DAA0C3911EB828BDC25C4F9AE02.roa (hash: BK8JW2Wj4etRuysdxWiOktynoZCEWJ2xeDWHB4Oo8iI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.crl
rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h57Jr836J6POe11DeHoviQOFWG4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 21:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2086 (0x826)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E556, serialNumber=879EC9AFCDFA27A3CE7B5D43787A2F890385586E
Validity
Not Before: Feb 28 21:23:00 2026 GMT
Not After : Mar 7 21:23:00 2026 GMT
Subject: CN=69a35cb4-cd87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:35:17:e6:48:5d:3f:fe:f9:65:e8:42:8a:32:
5d:d8:66:a5:d8:d9:49:ce:83:e1:13:d7:f6:9e:05:
e2:0e:cc:e0:fa:3d:cf:ea:7a:96:69:76:eb:af:3a:
bb:68:f6:50:09:86:5e:0f:f3:71:e5:16:8e:1e:0f:
69:da:6b:ba:06:df:52:4b:74:02:cb:dc:c5:11:ed:
9f:0d:4f:62:18:f1:0c:91:02:89:45:89:ce:24:a1:
30:73:06:31:db:a6:96:14:c3:53:34:3e:77:51:79:
bb:66:75:d7:06:f7:14:96:5a:4e:4d:8b:6a:cd:c8:
24:0d:03:74:bb:36:e0:f5:74:1d:f2:6c:e9:4d:61:
68:a0:bb:8d:25:8d:d1:40:b3:3d:48:2a:2b:2d:ca:
8c:61:4a:e9:8b:16:53:10:50:8e:07:a6:da:d3:95:
42:41:fb:7d:ab:d5:42:13:78:6d:3e:3f:2c:77:24:
d8:61:82:18:f5:f4:ff:41:27:51:22:0f:35:e9:c6:
3c:61:29:07:9d:62:06:aa:e7:88:14:43:87:2f:d6:
48:0b:b0:42:c3:fa:57:0a:af:b8:1c:e5:43:6b:a1:
bb:06:30:74:37:52:c5:6b:06:9e:87:a3:94:35:54:
d1:ff:2e:28:99:c5:7d:99:1e:d3:e3:61:1f:b6:65:
01:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:93:D0:F0:AD:32:12:23:C6:F2:47:9A:7C:5C:52:6D:05:B2:61:8C
X509v3 Authority Key Identifier:
keyid:87:9E:C9:AF:CD:FA:27:A3:CE:7B:5D:43:78:7A:2F:89:03:85:58:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h57Jr836J6POe11DeHoviQOFWG4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:11:87:8a:aa:7b:cd:6f:5a:96:39:81:6d:f5:7f:02:f3:46:
18:c3:5c:ad:88:49:83:e1:db:11:39:4d:76:84:5b:18:4c:f2:
be:66:ef:8d:40:b9:1b:c6:8d:24:97:ba:84:7e:46:e8:0d:42:
fe:56:82:d0:b4:d3:58:68:a8:61:1f:d6:23:51:f0:b2:9d:f2:
9c:a2:70:20:3d:7b:ce:cf:92:1d:de:48:6d:62:9d:33:30:89:
29:22:6d:98:f9:03:04:26:ce:ba:d5:53:78:ea:21:ba:13:83:
0e:db:d0:4f:95:d8:8c:44:68:ac:d9:35:62:70:5c:28:01:28:
a6:70:f3:e8:a2:86:21:b7:4a:a4:4f:b3:bc:07:81:02:5c:75:
5c:88:70:24:ed:7c:cc:d1:4c:34:62:b4:bb:c3:1d:0b:c2:87:
61:25:b2:e1:02:79:03:0b:96:74:0a:82:d8:9f:3b:04:2c:8c:
1b:01:ec:21:79:4b:2e:2b:44:41:cb:64:dd:49:71:8d:c2:73:
f7:6c:5b:9f:8c:e3:0d:56:85:47:5a:2a:fc:25:17:07:5c:cd:
3f:84:b3:ec:dc:19:4b:0b:fe:70:7d:9d:21:59:c4:8d:0f:9d:
75:8d:14:cd:6f:c0:46:9e:e7:ca:a4:f6:68:06:b1:72:80:bd:
56:98:cb:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:54:47 2026 by rpki-client