
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft
File: h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft (raw, json)
Hash identifier: +yUFGQx/TEfpTpX1hF+AsC8P7Q/KPYtA1TOsRxh2pNA=
Subject key identifier: 72:F7:7C:1D:06:A1:C7:34:78:B6:50:FE:5D:63:27:EB:A4:1A:64:9A
Authority key identifier: 87:F3:1B:20:1B:DD:18:75:81:54:0C:5B:8B:86:44:38:C2:99:90:B9
Certificate issuer: /CN=A916B02F/serialNumber=87F31B201BDD187581540C5B8B864438C29990B9
Certificate serial: 01D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft
Manifest number: 01CB
Signing time: Fri 17 Apr 2026 03:26:11 +0000
Manifest this update: Fri 17 Apr 2026 03:26:10 +0000
Manifest next update: Fri 24 Apr 2026 03:26:10 +0000
Files and hashes: 1: h_MbIBvdGHWBVAxbi4ZEOMKZkLk.crl (hash: UdjCSDHuLLMID4AaxlpUwSSQlwc4oU5fcuTjCpAUSqA=)
2: 27178D9E7FBC11EEAF80B825C4F9AE02.roa (hash: sVfM9UcBSAxUn8++eCgurkk9Zg1ANJCcYtd5vbh1oJM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.crl
rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 465 (0x1d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B02F, serialNumber=87F31B201BDD187581540C5B8B864438C29990B9
Validity
Not Before: Apr 17 03:26:10 2026 GMT
Not After : Apr 24 03:26:10 2026 GMT
Subject: CN=69e1a853-69f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:57:8a:0b:ed:d3:3e:3c:bb:86:c6:36:a8:89:
44:06:16:04:47:63:b9:4f:8d:97:26:56:c8:29:aa:
69:36:07:e1:af:da:fb:79:99:65:fa:c3:89:13:8e:
78:a7:a4:37:0e:a0:ce:4c:8d:6a:2b:d1:87:b5:39:
09:b0:56:3f:36:20:cb:e9:04:b0:2d:af:b5:50:18:
18:fe:34:ac:ff:2d:fc:ef:24:85:de:3b:ec:12:ba:
82:ff:04:83:68:73:0d:f0:54:bd:b4:79:31:d9:58:
ff:9a:c5:cc:6b:94:2a:22:10:a1:b7:5d:00:7c:92:
72:30:65:2b:bd:db:46:13:51:5a:4b:64:60:22:15:
ab:0b:9a:72:24:b7:73:e6:71:95:f4:0e:5f:c8:4a:
d5:c1:35:c7:ae:45:99:ca:a1:7d:a3:78:73:f3:a5:
05:bc:0b:5a:3a:7e:4b:d2:d2:11:31:59:38:59:2e:
47:86:69:43:ba:a0:2b:c2:e9:0a:21:de:6a:37:0e:
9b:f9:c7:92:a1:c3:bb:b0:06:2e:a9:36:1b:ff:82:
35:80:64:96:30:58:6c:36:b3:fb:64:1c:b6:d9:88:
e9:56:bf:98:bb:2e:bf:12:1e:89:44:f3:4f:ce:15:
61:1c:d2:c8:25:db:61:77:bd:1a:da:1a:ae:9a:b6:
be:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F7:7C:1D:06:A1:C7:34:78:B6:50:FE:5D:63:27:EB:A4:1A:64:9A
X509v3 Authority Key Identifier:
keyid:87:F3:1B:20:1B:DD:18:75:81:54:0C:5B:8B:86:44:38:C2:99:90:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:68:32:99:21:a0:ad:92:f4:d1:77:af:85:31:99:e1:a0:65:
5c:e5:41:ee:a1:bb:7f:5d:2e:65:62:aa:7b:5b:ca:0f:77:56:
f1:82:4a:b9:00:a5:91:6c:c7:ad:ad:02:15:32:73:11:c4:9b:
fa:66:e9:4e:c2:2c:f4:f1:f5:13:3c:3b:77:43:40:47:a1:85:
74:f4:90:25:17:56:b9:5e:cd:e2:7d:71:f1:62:09:44:ca:30:
a8:5a:60:26:4e:cb:59:31:a6:00:04:87:1d:ea:b8:75:ac:6e:
e6:e4:3b:61:85:5c:e8:14:db:e8:b0:4b:b6:98:86:04:d7:17:
8a:3b:61:8a:da:e3:77:5e:3b:f9:a3:88:b8:0f:66:a1:f0:05:
61:7b:54:3d:81:9f:c3:4a:36:c6:b4:00:a6:c2:81:e7:cc:33:
16:79:93:04:5c:aa:7b:81:73:c1:02:de:32:a9:5c:82:d8:ce:
8b:8a:ad:9a:5c:41:c7:38:08:9c:e2:47:cf:22:d4:47:aa:e9:
9d:ed:79:05:2b:17:97:7a:9f:e5:25:9b:6e:ac:17:d9:df:21:
68:75:df:00:8e:85:0f:9f:03:19:d9:ed:74:11:0f:0f:94:6f:
c9:2e:cf:a1:38:63:f6:60:7e:4f:53:fe:f6:21:a2:cf:1d:3c:
29:69:ef:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:03:48 2026 by rpki-client