
$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft
File: hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft (raw, json)
Hash identifier: WSsep2vR6A1Nx79pFc/br8TqUcpF5SGDi/dnRiP8yPk=
Subject key identifier: DB:E6:BB:60:F8:40:AA:F6:CA:6E:79:E2:43:8C:C4:94:E2:73:4E:B7
Authority key identifier: 84:7F:2E:12:EA:B5:06:A5:01:09:94:42:07:B1:D7:02:66:77:F0:9B
Certificate issuer: /CN=A916CDAC/serialNumber=847F2E12EAB506A50109944207B1D7026677F09B
Certificate serial: 5B
Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft
Manifest number: 59
Signing time: Sun 01 Mar 2026 09:32:29 +0000
Manifest this update: Sun 01 Mar 2026 09:32:28 +0000
Manifest next update: Sun 08 Mar 2026 09:32:28 +0000
Files and hashes: 1: hH8uEuq1BqUBCZRCB7HXAmZ38Js.crl (hash: rKBTbhum+gDyrgcy9LaCTw+6Ix9BEAr7kupEf+L4pMo=)
2: 33C3BDD69AA111F0944EF628C4F9AE02.roa (hash: eUjuNmjZ0Na+qc9wZXSBULUYBZ3ury7Q2KFbmM47hEY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.crl
rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:32:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91 (0x5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916CDAC, serialNumber=847F2E12EAB506A50109944207B1D7026677F09B
Validity
Not Before: Mar 1 09:32:28 2026 GMT
Not After : Mar 8 09:32:28 2026 GMT
Subject: CN=69a407ad-60ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ae:46:07:1a:c3:e5:d2:ba:d8:e7:6e:fc:48:
de:fd:28:28:1f:dd:88:ba:1e:80:99:2b:9a:8a:57:
e0:ba:62:3d:76:60:ed:04:d4:b7:a1:69:19:e3:65:
e8:d2:27:74:45:71:dd:c7:7b:c9:96:63:df:0e:7c:
5a:87:a1:4d:56:91:7b:36:8d:3d:b2:69:55:2a:ec:
97:60:67:80:e3:bf:50:ee:df:ab:ba:0b:98:c3:f4:
a1:9e:f5:e2:59:96:4a:ba:5a:d7:9c:22:d3:09:85:
23:70:57:77:46:14:e3:c1:f1:ca:a5:17:36:40:02:
f3:ff:df:20:06:65:cd:e3:5e:d3:fb:7c:34:3e:39:
89:aa:4c:43:46:4c:4b:fe:23:2a:2b:a7:72:6c:30:
99:ad:71:67:53:bc:63:b9:16:0c:53:cd:35:ef:2a:
a6:8c:64:87:58:bf:47:11:30:b8:04:97:93:c0:98:
f1:7b:ed:cd:84:13:c9:6e:22:6e:c8:24:b6:43:e4:
b6:63:06:29:69:c9:7f:e9:5d:08:47:54:f0:89:10:
2b:11:64:60:1f:1e:33:86:4d:6c:80:7c:fb:eb:cd:
2f:87:6c:cb:ee:5e:7e:26:a5:66:42:5e:d3:5a:7c:
22:bc:2e:b0:c0:04:93:da:08:9d:32:84:2c:33:e7:
e1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E6:BB:60:F8:40:AA:F6:CA:6E:79:E2:43:8C:C4:94:E2:73:4E:B7
X509v3 Authority Key Identifier:
keyid:84:7F:2E:12:EA:B5:06:A5:01:09:94:42:07:B1:D7:02:66:77:F0:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:d3:d4:ed:c6:2b:a0:bc:b7:05:37:33:12:93:03:d3:63:53:
56:f3:ad:47:cf:cf:0b:0e:56:bc:28:14:21:e7:17:66:2f:fe:
6b:fb:94:4f:fc:7f:1a:10:4c:bf:58:80:9d:c5:3e:7c:c0:aa:
1d:88:2d:e0:ca:44:0c:c1:00:f3:93:34:41:4f:dc:5f:2e:17:
ab:7d:e3:23:e5:4e:49:34:98:15:8b:f5:d1:db:bc:f5:73:c8:
b3:45:1d:54:0e:65:35:94:8d:2d:4f:1c:07:49:13:0e:ac:7a:
75:63:23:02:0b:d0:d1:0f:34:87:0b:a0:68:f2:76:81:f6:89:
c3:e4:99:47:04:9d:d5:92:4f:d0:0a:8e:8f:09:33:ed:82:c1:
8e:17:c7:49:da:17:f1:31:6a:37:c3:6a:48:32:64:1c:24:10:
4f:47:1a:b8:e2:b3:e9:52:fd:1c:e3:61:03:85:c1:5f:02:95:
79:7d:5d:a0:3e:36:e5:1e:1f:0a:e2:27:94:89:9d:91:e3:e4:
1b:ca:67:95:b9:07:2e:dc:10:85:53:c6:1f:5e:77:ac:64:c6:
d0:9b:46:a9:fb:10:b2:86:3d:87:b5:23:66:d0:ec:4f:25:3f:
e6:99:de:36:e4:41:48:15:8e:93:bf:e1:70:66:97:4b:d0:56:
c9:21:b4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:05:42 2026 by rpki-client