
$ rpki-client -vvf rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.mft
File: H_jK4i0tckq70cLRJft9t7T4Sv8.mft (raw, json)
Hash identifier: RF3WJtcrgCLyZELK1mrUTtHM1pfwWAfTQ0dikqQzI64=
Subject key identifier: 7C:41:6A:AE:52:57:DB:9C:62:F4:C7:E9:DB:51:9C:5F:15:5D:B4:79
Authority key identifier: 1F:F8:CA:E2:2D:2D:72:4A:BB:D1:C2:D1:25:FB:7D:B7:B4:F8:4A:FF
Certificate issuer: /CN=A915670F/serialNumber=1FF8CAE22D2D724ABBD1C2D125FB7DB7B4F84AFF
Certificate serial: 18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_jK4i0tckq70cLRJft9t7T4Sv8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.mft
Manifest number: 16
Signing time: Sun 01 Mar 2026 10:29:11 +0000
Manifest this update: Sun 01 Mar 2026 10:29:10 +0000
Manifest next update: Sun 08 Mar 2026 10:29:10 +0000
Files and hashes: 1: H_jK4i0tckq70cLRJft9t7T4Sv8.crl (hash: Vzia21gFOQWjvpcHGGFi7oXoD9Xqh6897Zb8C6e2SUw=)
2: E342A7D0F9D911F0908C8513676F56BC.roa (hash: rFk76m5fW9CYOpE5VZsRNzUgbtpqshwPbQBMeshiV/E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.crl
rsync://rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_jK4i0tckq70cLRJft9t7T4Sv8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24 (0x18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915670F, serialNumber=1FF8CAE22D2D724ABBD1C2D125FB7DB7B4F84AFF
Validity
Not Before: Mar 1 10:29:10 2026 GMT
Not After : Mar 8 10:29:10 2026 GMT
Subject: CN=69a414f7-3155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2a:3c:7e:ba:b0:9d:f4:41:03:9b:18:e4:61:
65:14:f8:a3:99:93:27:7c:09:26:44:74:7a:8d:99:
21:61:2b:36:dc:62:03:31:7f:73:a8:22:ef:28:21:
d7:b1:24:0e:7c:72:34:c7:59:07:34:d7:90:78:c8:
39:dc:6e:be:f0:70:2c:77:c0:2e:bb:c2:e5:8b:3d:
a8:a3:15:41:7a:91:46:2c:16:f8:40:b6:76:bc:bf:
d4:29:59:bb:08:24:75:99:0b:14:36:5c:e3:29:30:
65:0e:a5:9e:e7:13:a3:c3:1a:fa:37:26:1b:19:94:
67:21:0a:a0:40:7b:6d:d5:3d:87:47:97:3f:2a:a3:
de:1b:60:94:bd:8b:e0:a3:34:c1:f7:95:7d:16:d2:
03:da:56:77:f5:1e:47:58:ec:41:85:47:16:7d:e3:
fa:7f:56:fa:95:10:ad:11:15:20:dc:bc:49:88:fe:
07:c6:cc:76:bd:88:f5:1a:b1:da:73:70:c6:e4:41:
06:3c:1e:a6:5b:0c:30:b1:6d:1c:a4:18:cc:83:b7:
f8:49:fd:c1:f9:d8:1d:f3:c2:13:16:f0:71:f5:4f:
7e:24:b5:a2:6a:d1:cb:8e:30:49:3b:71:6a:af:5a:
2f:a7:2a:ba:9a:09:39:7c:15:d3:0e:ad:70:3c:f5:
80:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:41:6A:AE:52:57:DB:9C:62:F4:C7:E9:DB:51:9C:5F:15:5D:B4:79
X509v3 Authority Key Identifier:
keyid:1F:F8:CA:E2:2D:2D:72:4A:BB:D1:C2:D1:25:FB:7D:B7:B4:F8:4A:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_jK4i0tckq70cLRJft9t7T4Sv8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:88:eb:0d:f6:8e:b0:5c:80:25:d0:f0:19:8a:58:28:1c:04:
5c:bc:3d:7d:05:6f:fc:25:0d:2a:3f:86:ad:85:f4:0e:6e:8d:
66:ad:3c:9b:af:25:b5:0f:0a:d5:67:9a:54:85:1e:c7:bf:6c:
a5:17:d7:1a:32:cd:08:13:31:bd:2f:29:50:2c:a6:b0:81:2e:
43:91:ec:c7:e7:b5:4e:d4:42:49:af:f3:60:b4:db:c7:7c:46:
ce:2b:48:e3:f6:3c:2e:11:f4:9a:d8:7b:2c:07:86:10:b7:df:
ce:a2:4c:8a:d7:8a:ab:f5:02:be:bf:77:04:5f:90:1e:42:7d:
52:2e:b7:ff:fb:88:38:3c:fe:b7:9e:8a:d4:e9:05:d0:dd:5a:
dc:74:50:ff:51:a7:13:80:17:10:d3:d7:f2:44:a8:c9:4d:18:
ed:cd:ef:c8:66:5a:27:8c:20:d1:9f:62:2f:79:dd:69:ac:24:
9c:52:18:06:75:2b:36:e2:48:fe:b9:b1:3f:c7:e7:36:e5:5f:
27:eb:f8:5f:87:4b:92:3d:f2:59:82:8a:41:37:1d:b3:3c:b9:
04:71:7a:92:57:df:c2:f5:05:c5:6b:03:7d:2e:62:78:77:a5:
04:5d:03:22:6d:c5:6b:1e:8b:7e:0e:78:9f:e1:40:71:97:c9:
99:da:1f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:07:11 2026 by rpki-client