
$ rpki-client -vvf rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.mft
File: HdHLvF31vfq7s62vErACVrfxjRI.mft (raw, json)
Hash identifier: Pgigr5IF/pV7iZAVLMXhi7DRUj+Dw+nnwA4sAfHkpu8=
Subject key identifier: F6:84:F7:EC:8D:65:9B:72:03:17:E7:75:E1:FB:09:AA:03:CA:39:8F
Authority key identifier: 1D:D1:CB:BC:5D:F5:BD:FA:BB:B3:AD:AF:12:B0:02:56:B7:F1:8D:12
Certificate issuer: /CN=A915ADC4/serialNumber=1DD1CBBC5DF5BDFABBB3ADAF12B00256B7F18D12
Certificate serial: 01CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdHLvF31vfq7s62vErACVrfxjRI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.mft
Manifest number: 01B7
Signing time: Sun 01 Mar 2026 05:11:03 +0000
Manifest this update: Sun 01 Mar 2026 05:11:03 +0000
Manifest next update: Sun 08 Mar 2026 05:11:03 +0000
Files and hashes: 1: HdHLvF31vfq7s62vErACVrfxjRI.crl (hash: YPU4uIOAb+m16RkDIF4ImOEdz40eziU7W/PWJ4m4+Yw=)
2: AFC9F5324A0F11EF9E51BD7CC4F9AE02.roa (hash: YC1hPH8mghnTJjDQYho998bjw91B3zrCEFjA4fVmKFk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.crl
rsync://rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdHLvF31vfq7s62vErACVrfxjRI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 05:11:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 458 (0x1ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915ADC4, serialNumber=1DD1CBBC5DF5BDFABBB3ADAF12B00256B7F18D12
Validity
Not Before: Mar 1 05:11:03 2026 GMT
Not After : Mar 8 05:11:03 2026 GMT
Subject: CN=69a3ca67-f0a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cc:86:02:7a:c1:60:1e:3b:85:c5:5e:6a:f1:
47:00:ad:cd:0b:cb:93:2d:15:13:db:c7:c8:06:00:
2b:a9:0f:eb:d8:39:12:32:04:06:e7:a5:5d:1b:a3:
c1:ea:ca:b8:b8:df:4b:d9:a4:ee:ce:d6:fe:22:e1:
38:50:f7:a1:e9:b3:5c:cd:38:00:14:e0:9d:49:f3:
86:07:db:fd:fd:53:d3:73:4b:50:3c:24:f0:c7:49:
d1:2b:4b:3d:77:a5:22:fb:ee:f9:87:e5:0c:c3:6f:
4e:4f:7e:de:cf:42:9c:ec:6e:d7:37:b6:56:28:5a:
c2:69:bb:5f:d7:33:de:52:23:fb:67:e8:67:21:5d:
6e:79:c2:66:21:dc:76:2c:3c:16:62:f6:7f:5e:a8:
3c:26:98:e4:9b:98:03:a0:9d:71:8c:4b:ad:fc:e6:
07:55:86:9d:f4:a6:70:2a:58:7c:6e:e5:a8:9a:e9:
5a:3b:67:26:ad:18:1a:03:f3:e8:87:73:0f:0c:03:
01:3c:fc:19:b8:32:71:ba:d4:fc:ef:29:62:11:67:
4e:e3:10:ce:49:e1:cf:90:a5:73:9b:89:b2:3e:6c:
a4:2d:df:16:02:9d:66:b2:ea:28:80:0a:95:04:9f:
dc:b7:04:d3:8f:9e:af:f1:9a:3e:dc:fe:65:54:5e:
af:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:84:F7:EC:8D:65:9B:72:03:17:E7:75:E1:FB:09:AA:03:CA:39:8F
X509v3 Authority Key Identifier:
keyid:1D:D1:CB:BC:5D:F5:BD:FA:BB:B3:AD:AF:12:B0:02:56:B7:F1:8D:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdHLvF31vfq7s62vErACVrfxjRI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:cb:5a:8c:90:a2:44:8e:c4:ed:d2:08:d3:3b:c6:49:cd:ad:
94:c5:0d:2e:b0:a2:de:57:17:3e:bc:e2:d3:c0:5d:ac:12:d1:
7a:a5:dd:3e:ac:92:23:c1:38:74:f6:66:a2:fb:48:39:04:7b:
e6:c3:f5:c1:a4:72:15:ee:96:c2:e5:aa:09:ee:f6:5c:4d:48:
21:62:1e:33:b5:1c:6c:ba:6f:63:d9:87:2a:da:08:41:c0:7f:
b4:11:fc:07:de:ba:7d:a2:c4:4f:54:26:0c:0f:f3:91:4c:85:
ea:f5:c5:0d:88:8f:4b:86:55:3e:85:f7:db:73:4a:10:24:a6:
2b:f8:28:65:54:0a:1c:cc:97:71:b0:61:f4:9a:7a:e5:bb:6a:
da:e8:ec:54:ca:0e:d4:c8:26:4a:c4:52:6a:6b:49:d3:ab:1b:
a0:1c:35:40:f3:a5:1f:c8:6e:6a:d2:c8:e1:28:91:3f:c7:3d:
9d:ff:a4:44:ad:45:d2:b8:b2:cc:5b:ed:26:e8:da:5a:11:86:
24:10:6e:29:55:46:86:97:b3:df:ff:dc:11:5f:52:06:cb:96:
5e:67:be:f7:7a:2a:0a:48:8f:13:59:5f:4e:cd:e4:29:87:49:
3c:ce:fd:a4:05:03:ce:87:69:79:97:b8:01:7f:4f:ff:33:2f:
8a:ef:cb:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:24:43 2026 by rpki-client