
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.mft
File: hEd6PPADq7y8hU4_QMh8vPKhWN8.mft (raw, json)
Hash identifier: HU12BhrSvVvxFKx0FqbJLEuegC1fz7QcyOnjdm3FWLo=
Subject key identifier: 67:2A:52:F1:95:44:98:D3:A3:80:91:F7:EC:D1:1C:B2:CD:83:B3:8E
Authority key identifier: 84:47:7A:3C:F0:03:AB:BC:BC:85:4E:3F:40:C8:7C:BC:F2:A1:58:DF
Certificate issuer: /CN=A916A505/serialNumber=84477A3CF003ABBCBC854E3F40C87CBCF2A158DF
Certificate serial: 0593
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEd6PPADq7y8hU4_QMh8vPKhWN8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.mft
Manifest number: 0577
Signing time: Sun 01 Mar 2026 22:58:14 +0000
Manifest this update: Sun 01 Mar 2026 22:58:13 +0000
Manifest next update: Sun 08 Mar 2026 22:58:13 +0000
Files and hashes: 1: hEd6PPADq7y8hU4_QMh8vPKhWN8.crl (hash: mM/1s+2nXVgbqBLoIu3ANQPqeqiT+7ndg4NdWa1n8Ck=)
2: 8DC3F57A093D11F18DEFD893023D8C67.roa (hash: qvopjIrTWgH5X5t4JmlQUR/xI62bgnHlH5D+8Giwsug=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.crl
rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEd6PPADq7y8hU4_QMh8vPKhWN8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:58:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1427 (0x593)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A505, serialNumber=84477A3CF003ABBCBC854E3F40C87CBCF2A158DF
Validity
Not Before: Mar 1 22:58:13 2026 GMT
Not After : Mar 8 22:58:13 2026 GMT
Subject: CN=69a4c485-f11a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c8:98:27:0a:95:a2:fd:58:b5:5e:1b:49:bd:
dd:c1:85:f3:bf:66:69:33:74:bb:df:c6:49:90:0b:
21:aa:cb:21:ff:b4:7a:be:5a:81:3f:e9:e5:04:24:
0b:87:b3:ec:b6:25:69:23:1e:47:1b:f8:36:c2:c7:
28:08:44:cb:35:b4:86:ae:df:c5:4e:f9:42:f5:76:
ea:af:ee:f2:15:5a:19:ce:f6:f0:e4:2a:c4:8e:1e:
a3:2d:23:c7:ef:09:a0:3a:bd:7c:55:5f:ea:c3:41:
d2:da:99:b9:26:d9:18:3d:21:76:38:eb:6f:c6:47:
28:b4:e1:c1:b7:e7:15:24:79:c5:49:71:1f:12:7e:
da:35:64:1d:6c:d8:39:ef:05:71:d4:fb:39:d2:17:
c3:c9:0f:45:3b:94:09:bd:ac:3e:9f:6e:43:3a:8e:
ad:53:f4:9b:1f:7c:db:0a:b8:42:01:72:e7:f4:4e:
bd:eb:d0:2a:ff:b3:1a:af:18:02:35:22:15:87:90:
f7:69:49:9a:b3:62:15:10:48:8b:52:b7:47:67:d7:
07:23:d2:ec:93:ee:21:f7:d8:95:60:b4:da:c8:72:
be:f6:77:d2:b8:9e:92:83:e7:58:8c:51:79:63:4b:
bd:f8:c9:63:a2:aa:4c:e3:17:c4:6f:b0:b2:43:f1:
4a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:2A:52:F1:95:44:98:D3:A3:80:91:F7:EC:D1:1C:B2:CD:83:B3:8E
X509v3 Authority Key Identifier:
keyid:84:47:7A:3C:F0:03:AB:BC:BC:85:4E:3F:40:C8:7C:BC:F2:A1:58:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEd6PPADq7y8hU4_QMh8vPKhWN8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:9b:de:36:59:f1:0d:b3:0c:80:40:9c:2c:8d:bd:58:93:06:
70:71:64:54:94:9f:ff:2f:14:b7:34:6c:b0:e4:98:d0:71:76:
ee:ec:c7:ff:00:ac:1d:4e:77:49:c1:09:e3:75:5f:39:c2:92:
70:ae:04:46:8f:8d:34:d2:e7:1f:aa:d0:fe:02:65:4c:ff:22:
15:cd:e0:9d:cb:c3:30:a5:92:f8:24:9c:1c:0f:a5:e5:20:95:
6d:56:c7:0d:13:df:e4:aa:f2:2c:6f:31:bd:03:f6:84:7f:ba:
24:db:e1:7e:87:3a:03:98:bf:13:25:55:47:36:fe:7f:b0:0d:
1f:c8:f1:43:4a:91:6a:81:2e:63:2f:68:7a:59:1e:bf:33:fc:
33:de:1e:70:b8:e1:3f:55:d5:e9:4a:23:2a:7f:6a:ca:68:48:
1d:39:2c:fc:39:61:95:f7:70:87:87:90:bb:de:9f:d0:2f:30:
f5:f2:ba:01:fb:86:aa:f4:d1:94:4a:2f:6c:a3:d2:03:b8:0d:
6c:68:1a:51:ce:2c:00:75:70:cb:95:ca:01:f4:22:2c:d8:09:
71:b7:9a:93:8e:9e:84:99:5d:77:ea:d2:37:04:ab:fb:0b:d4:
27:2b:1a:65:33:83:83:13:8c:62:50:28:25:b9:30:4b:38:28:
0c:dc:d5:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:19:00 2026 by rpki-client