
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft
File: hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft (raw, json)
Hash identifier: wGsNDDs2K7GBwIJBjFgzHzaE9WSv9HLvSurMFGztDHE=
Subject key identifier: 2D:C4:0F:6D:FC:9F:D7:D6:E4:B6:F2:1A:3D:7F:0F:FD:4E:DF:56:98
Authority key identifier: 84:7F:2E:12:EA:B5:06:A5:01:09:94:42:07:B1:D7:02:66:77:F0:9B
Certificate issuer: /CN=A916CDAC/serialNumber=847F2E12EAB506A50109944207B1D7026677F09B
Certificate serial: E4
Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft
Manifest number: DF
Signing time: Sun 15 Nov 2026 06:45:27 +0000
Manifest this update: Sun 15 Nov 2026 06:45:27 +0000
Manifest next update: Sun 22 Nov 2026 06:45:27 +0000
Files and hashes: 1: hH8uEuq1BqUBCZRCB7HXAmZ38Js.crl (hash: 83CaKTGSk0qMZIGKrZjeNv40tCGKfxN6/LDpIUO8OLU=)
2: 33C3BDD69AA111F0944EF628C4F9AE02.roa (hash: pV6RrpL0HFiSkSQ3Egen1lL8OO4gLgRAAJv9sHZbodQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.crl
rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 06:45:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228 (0xe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916CDAC, serialNumber=847F2E12EAB506A50109944207B1D7026677F09B
Validity
Not Before: Nov 15 06:45:27 2026 GMT
Not After : Nov 22 06:45:27 2026 GMT
Subject: CN=6af95507-1141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ab:c8:4f:2b:ba:dc:44:3e:1c:08:96:b9:a0:
67:88:20:2e:5f:cf:49:7c:9f:31:20:88:54:ff:d5:
5e:2c:08:45:ad:4c:f9:7b:c0:27:df:8f:90:d0:50:
3f:68:30:8e:73:ea:26:3f:56:1f:4d:39:c6:ac:c8:
9d:23:21:73:19:ae:e3:f5:eb:d8:20:b6:e1:1b:12:
8f:d7:11:a4:1f:45:99:0c:2b:ba:2f:89:81:f7:af:
05:16:44:28:ee:03:84:ce:97:d3:5f:b5:32:76:cd:
f2:c3:cc:16:e8:47:b1:00:37:01:62:a3:3e:ba:0b:
d7:10:04:0c:63:c1:0b:dd:45:1d:48:e6:e5:cd:2f:
d8:fe:10:8d:bf:06:14:67:c7:88:be:ab:66:1e:40:
0c:67:d1:82:0b:5a:31:b0:cf:0c:07:66:2f:3e:5b:
35:93:d9:a9:21:c9:8e:85:f5:5f:97:ff:ff:98:c1:
3a:cd:b8:5c:fd:a4:0d:6c:3a:95:d2:5a:9d:2e:b0:
41:11:7a:d8:20:2e:90:63:be:4e:e5:09:b1:14:e3:
f0:d4:9f:da:76:94:c8:da:0c:d7:a6:1c:06:29:e5:
3e:32:91:9d:de:a7:e3:1a:4f:12:ee:07:8c:22:bc:
81:d8:09:1d:56:81:a2:24:5a:ca:3c:29:f1:03:40:
c1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C4:0F:6D:FC:9F:D7:D6:E4:B6:F2:1A:3D:7F:0F:FD:4E:DF:56:98
X509v3 Authority Key Identifier:
keyid:84:7F:2E:12:EA:B5:06:A5:01:09:94:42:07:B1:D7:02:66:77:F0:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:91:34:6a:a1:bd:a8:0e:f0:aa:ba:8c:7e:f4:14:c4:fa:c0:
9f:19:1f:bf:8a:21:1e:6a:4a:a5:92:37:de:ee:55:ac:a1:57:
d0:3f:94:52:4f:a2:82:f3:d5:d7:20:59:52:a9:c2:85:02:b8:
4e:bc:20:3e:91:19:d7:d7:85:0e:e1:30:7a:a2:44:6d:32:e8:
67:cd:fd:cb:6b:90:cb:0e:8b:c0:ef:5a:4c:99:a4:aa:d4:15:
33:69:9f:74:c8:e0:ce:93:cf:06:0c:61:ba:2f:17:a8:60:f7:
ff:b2:8c:56:60:37:df:43:84:6b:9b:88:3d:1f:ff:59:c3:33:
c3:1d:d5:cf:d5:be:12:e6:b0:b3:9a:43:8b:17:49:7e:39:d5:
cc:08:7d:da:1e:07:0b:b4:ef:6c:b0:db:36:30:cd:9e:2f:27:
a4:9d:91:9f:56:87:9d:11:63:bb:64:8f:eb:e4:17:26:bd:45:
7c:36:08:af:d8:b0:e2:54:7c:ae:13:ce:39:ed:18:5b:db:19:
9d:52:98:eb:e4:65:9e:d1:4f:5f:c6:ea:94:fb:94:23:51:49:
0f:60:24:3a:09:42:07:36:79:6d:45:58:03:1f:4c:df:fa:11:
f5:23:83:79:f4:75:d6:5d:57:40:78:ca:be:b8:1f:7e:fb:0d:
66:3f:a9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:26:28 2026 by rpki-client