
$ rpki-client -vvf rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.mft
File: H_jK4i0tckq70cLRJft9t7T4Sv8.mft (raw, json)
Hash identifier: Y4PprISLZZepokIORjcbv8PLtX0JueeFyN97Uo+mgN8=
Subject key identifier: EC:1A:FF:90:B6:3A:14:88:A0:3B:7E:57:26:5B:23:C1:B4:20:08:F0
Authority key identifier: 1F:F8:CA:E2:2D:2D:72:4A:BB:D1:C2:D1:25:FB:7D:B7:B4:F8:4A:FF
Certificate issuer: /CN=A915670F/serialNumber=1FF8CAE22D2D724ABBD1C2D125FB7DB7B4F84AFF
Certificate serial: 30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_jK4i0tckq70cLRJft9t7T4Sv8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.mft
Manifest number: 2E
Signing time: Fri 17 Apr 2026 08:23:54 +0000
Manifest this update: Fri 17 Apr 2026 08:23:54 +0000
Manifest next update: Fri 24 Apr 2026 08:23:54 +0000
Files and hashes: 1: H_jK4i0tckq70cLRJft9t7T4Sv8.crl (hash: pTQvcYjx+nOU9QJpAq85kyrGzasSMdfjUwxMw3vBF5k=)
2: E342A7D0F9D911F0908C8513676F56BC.roa (hash: rFk76m5fW9CYOpE5VZsRNzUgbtpqshwPbQBMeshiV/E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.crl
rsync://rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_jK4i0tckq70cLRJft9t7T4Sv8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 08:23:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48 (0x30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915670F, serialNumber=1FF8CAE22D2D724ABBD1C2D125FB7DB7B4F84AFF
Validity
Not Before: Apr 17 08:23:54 2026 GMT
Not After : Apr 24 08:23:54 2026 GMT
Subject: CN=69e1ee1a-5d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:90:26:d8:46:55:a2:b3:21:99:47:40:ec:a3:
cf:88:f2:3f:3e:d4:05:7c:e5:87:d3:2e:2c:42:ee:
ae:01:f2:8d:66:98:ea:80:cf:7a:fa:b4:4e:3e:70:
41:d5:3a:75:88:42:43:b1:71:76:4c:e1:c2:a9:62:
88:2c:0d:30:02:8f:b3:32:03:00:ad:31:44:a5:e4:
72:e9:d1:3f:c7:2b:fa:c1:06:68:ba:2c:ff:05:c8:
0c:34:1b:69:3b:fd:bc:e9:4a:9e:b4:44:85:96:97:
68:f7:79:3e:b6:30:a3:4c:9d:a9:c7:98:f6:30:13:
15:10:c0:45:37:5e:62:9e:ff:10:f2:1b:d3:77:96:
11:a5:93:ab:1b:fe:e1:b8:79:71:f9:6d:20:bd:02:
6e:db:6e:60:99:b1:e0:b5:4c:04:9e:b5:fc:3a:b9:
2c:e2:24:94:7c:cb:45:64:bb:8f:5a:81:85:2c:6f:
65:1b:22:3e:1b:57:af:25:11:78:37:0d:ee:8f:5a:
92:27:b2:b0:d1:41:9e:34:3a:87:1b:23:95:73:cb:
0a:8a:3c:57:d4:82:5c:54:74:4a:1c:e1:69:9e:5b:
bf:1e:99:96:53:3a:92:a7:44:d8:13:83:5c:a9:d8:
76:a2:cf:1b:1d:ef:e6:89:63:dc:ae:0c:48:da:7c:
fe:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:1A:FF:90:B6:3A:14:88:A0:3B:7E:57:26:5B:23:C1:B4:20:08:F0
X509v3 Authority Key Identifier:
keyid:1F:F8:CA:E2:2D:2D:72:4A:BB:D1:C2:D1:25:FB:7D:B7:B4:F8:4A:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_jK4i0tckq70cLRJft9t7T4Sv8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:f9:93:15:3e:7b:cb:0e:46:d7:9e:af:cc:0e:a6:9e:24:98:
9d:46:e4:66:a6:db:f8:9a:79:41:09:8c:5a:98:55:71:d3:2c:
81:0f:dd:97:e6:55:0b:71:9f:8b:4f:5d:7b:e6:99:9d:17:2f:
85:6d:82:c2:46:9a:5a:f1:7f:34:79:3a:0c:5a:c8:f4:86:ed:
f2:d6:a6:29:b0:46:c0:09:0e:7d:a1:ad:c6:b8:25:52:95:63:
e8:33:71:d8:e9:4e:4d:05:46:56:7d:21:8b:7b:ae:e7:dc:ff:
35:cd:5b:69:fb:69:18:87:a6:68:fe:0d:8e:43:0f:78:d9:bf:
08:40:71:f5:e1:78:5e:80:6c:83:98:b3:75:26:1a:60:b7:5b:
f8:e0:8c:ee:53:80:12:d6:2f:61:1b:09:0e:a7:ea:0f:f0:45:
a8:04:f7:91:78:c6:6c:5b:98:67:bc:d2:14:37:14:e2:c9:82:
c7:d2:59:c8:88:99:10:0c:90:82:54:0c:40:98:39:2a:c0:9b:
65:ac:0b:d4:fe:26:d4:d8:72:13:cf:5a:5a:2f:ce:0f:ce:b9:
ef:18:8f:29:30:a2:ad:65:84:26:3c:a9:57:88:0e:97:32:a4:
f2:a4:5e:53:ca:ce:b2:61:11:28:30:0b:f7:08:5d:f5:39:4f:
d0:27:a2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:36:46 2026 by rpki-client