
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft
File: hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft (raw, json)
Hash identifier: DElf9reCWAf04/u94YkSOsUbFPRzllBAez8odEvjqUg=
Subject key identifier: 3A:35:93:B3:74:10:E7:EC:DE:3E:24:1B:48:FF:CA:C5:BC:8C:5A:7C
Authority key identifier: 84:7F:2E:12:EA:B5:06:A5:01:09:94:42:07:B1:D7:02:66:77:F0:9B
Certificate issuer: /CN=A916CDAC/serialNumber=847F2E12EAB506A50109944207B1D7026677F09B
Certificate serial: C8
Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft
Manifest number: C3
Signing time: Mon 21 Sep 2026 06:50:13 +0000
Manifest this update: Mon 21 Sep 2026 06:50:12 +0000
Manifest next update: Mon 28 Sep 2026 06:50:12 +0000
Files and hashes: 1: hH8uEuq1BqUBCZRCB7HXAmZ38Js.crl (hash: BzoX9naUSyXIcgdqJRc78cz5jxug74W9V2gzXOvmRDk=)
2: 33C3BDD69AA111F0944EF628C4F9AE02.roa (hash: pV6RrpL0HFiSkSQ3Egen1lL8OO4gLgRAAJv9sHZbodQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.crl
rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 06:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 200 (0xc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916CDAC, serialNumber=847F2E12EAB506A50109944207B1D7026677F09B
Validity
Not Before: Sep 21 06:50:12 2026 GMT
Not After : Sep 28 06:50:12 2026 GMT
Subject: CN=6ab0d3a5-9e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:57:56:93:c9:92:b4:36:87:80:07:58:16:11:
a7:ed:e9:c3:bb:a6:f3:3f:7b:23:fa:a1:28:50:ee:
b8:71:20:66:d4:a9:98:45:ca:47:ff:83:b2:1c:21:
91:de:a4:f6:32:b6:5a:b8:d7:e4:eb:08:37:fb:a9:
f0:4c:ac:91:8b:0c:97:2d:ff:fd:8b:b6:1e:db:d7:
b8:03:fe:c9:47:f6:20:f9:24:4a:c4:aa:0c:a6:9b:
38:e3:20:c1:df:cb:09:44:59:5e:7b:82:35:9c:9d:
ac:bf:e3:f6:be:94:d6:80:3a:07:c2:8d:90:45:ab:
ed:99:68:52:cd:1f:9a:08:15:57:19:ee:83:19:79:
b0:5c:8a:5c:39:98:79:11:0f:b3:e3:21:6f:6c:07:
75:e3:9d:98:f4:bd:7b:9c:61:bf:23:ef:69:17:37:
55:7b:26:32:13:59:76:c9:a3:65:47:e9:d5:70:c5:
79:f3:b3:ca:c2:f8:6b:12:90:c7:a6:6f:09:76:80:
8c:87:10:96:15:23:e7:c7:1d:19:86:bf:b3:d1:e5:
90:4b:4a:15:73:f3:7f:0d:78:69:ee:54:e5:ac:1a:
ba:a5:a9:e9:1a:fd:c2:3e:62:6b:ee:61:1b:83:e1:
0c:9b:8a:02:1c:d3:c2:2e:07:48:78:a8:01:b9:91:
72:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:35:93:B3:74:10:E7:EC:DE:3E:24:1B:48:FF:CA:C5:BC:8C:5A:7C
X509v3 Authority Key Identifier:
keyid:84:7F:2E:12:EA:B5:06:A5:01:09:94:42:07:B1:D7:02:66:77:F0:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:99:42:67:43:01:3a:7a:b6:c4:84:7d:af:e8:2a:50:52:b8:
6c:d7:43:45:27:62:f1:9b:9d:41:b0:7e:f4:f9:96:34:bc:28:
4d:f4:96:20:b8:87:b0:94:79:d2:e0:70:8d:cd:65:0d:99:b1:
e8:ab:5b:ac:7c:fd:ac:6a:f1:7c:f4:30:75:ac:90:89:6e:5b:
fb:f9:b4:92:fc:8b:9c:fe:70:12:28:8f:b6:58:10:65:60:07:
ea:e7:a9:e5:29:67:02:4c:47:26:2e:e5:9c:29:c0:77:95:61:
57:72:b3:73:65:31:bb:fa:73:7f:99:fb:ec:d4:cc:d8:48:ca:
78:6a:03:e5:15:5c:04:22:0e:90:28:74:81:d7:98:80:3f:77:
0d:cf:fd:ab:de:99:38:a7:67:8f:61:fb:c9:e5:a7:d3:54:e2:
f4:5a:79:9c:14:d0:bc:d8:30:3a:df:2a:52:17:79:c9:34:b4:
d7:37:eb:93:a7:a2:f1:0c:fa:ad:49:32:b1:49:bd:f1:1e:c6:
79:ae:ad:ea:8b:2f:5d:63:df:d4:0f:17:51:f0:32:30:64:72:
3c:e1:91:e3:13:51:65:5d:45:fc:76:cd:9a:6f:21:91:dc:27:
80:78:a8:30:fc:70:56:21:f2:79:ca:c5:e7:71:70:a5:c4:e8:
7b:e8:83:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:30:53 2026 by rpki-client