
$ rpki-client -vvf rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft
File: sHoKQBnouCACE78tzPxocPheBGY.mft (raw, json)
Hash identifier: qjDGsVmn0v6srD27+eNm9m+afgCUO7bShtr2DC+SGYQ=
Subject key identifier: CF:12:E6:DA:B8:96:75:16:8F:6C:15:4F:6A:21:8B:79:4F:B1:6B:F6
Authority key identifier: B0:7A:0A:40:19:E8:B8:20:02:13:BF:2D:CC:FC:68:70:F8:5E:04:66
Certificate issuer: /CN=A916E5FB/serialNumber=B07A0A4019E8B8200213BF2DCCFC6870F85E0466
Certificate serial: 0CF0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sHoKQBnouCACE78tzPxocPheBGY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft
Manifest number: 0CD6
Signing time: Thu 16 Apr 2026 18:17:27 +0000
Manifest this update: Thu 16 Apr 2026 18:17:26 +0000
Manifest next update: Thu 23 Apr 2026 18:17:26 +0000
Files and hashes: 1: sHoKQBnouCACE78tzPxocPheBGY.crl (hash: 5vrMfh7Rfam7BnioLRFdG2tMhLO8z8VwEpy69pNQPfk=)
2: 6ED5481209DF11EAA6052433C4F9AE02.roa (hash: HrmVnXUGJt8jw2Un+GAxOWQzRcn/YFzs1aPIkDSrkXs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.crl
rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sHoKQBnouCACE78tzPxocPheBGY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:17:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3312 (0xcf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916E5FB, serialNumber=B07A0A4019E8B8200213BF2DCCFC6870F85E0466
Validity
Not Before: Apr 16 18:17:26 2026 GMT
Not After : Apr 23 18:17:26 2026 GMT
Subject: CN=69e127b7-5a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3b:6e:38:65:08:da:2d:b7:96:ec:70:58:17:
9b:9f:63:dd:a7:cc:74:86:db:00:57:c5:8e:f7:04:
c9:33:b5:8d:11:13:dd:7f:a7:74:c7:c1:3d:2e:31:
26:94:ed:b6:47:dc:59:f3:53:a8:61:b3:71:78:60:
00:8c:f1:15:fc:80:43:81:79:71:8b:9c:a1:16:d2:
af:c0:a9:ea:6e:7d:4b:33:24:d5:f1:3c:63:56:62:
64:e0:87:89:21:89:fc:f0:5b:e7:50:c2:3d:b6:ac:
f7:0f:e6:f3:4e:a9:a4:8c:c8:b7:3f:bb:1e:1d:18:
be:12:17:b6:cb:8e:5c:10:ae:02:e7:1b:69:4a:24:
d8:db:0c:7f:a3:7a:60:61:ad:24:4a:98:16:fb:73:
26:3b:38:bc:b5:0a:c0:29:3d:f2:0b:b6:14:58:42:
ae:56:8c:92:58:16:d7:2b:6b:4d:08:1f:0e:a1:6e:
31:55:83:a9:88:9e:26:ab:30:74:05:b0:a8:99:5a:
5a:78:c4:f7:71:c8:1a:50:37:19:5b:f0:c0:8e:8d:
16:3b:85:b7:62:73:c1:0a:d2:8b:c7:64:b5:2b:27:
4e:73:ff:e2:8c:81:ba:31:af:c3:a4:24:07:8d:29:
a7:c9:fa:15:d8:27:db:be:43:5f:31:18:0c:de:e5:
39:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:12:E6:DA:B8:96:75:16:8F:6C:15:4F:6A:21:8B:79:4F:B1:6B:F6
X509v3 Authority Key Identifier:
keyid:B0:7A:0A:40:19:E8:B8:20:02:13:BF:2D:CC:FC:68:70:F8:5E:04:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sHoKQBnouCACE78tzPxocPheBGY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:44:c4:2c:c5:d7:5b:79:22:18:60:b0:81:fb:b7:44:05:48:
70:66:8a:09:02:f0:cd:32:9e:0c:35:9e:8a:b0:a4:20:da:33:
42:8c:96:93:94:fe:74:8a:a7:3c:6b:1c:82:3d:2e:c6:a9:23:
3e:e2:c3:76:d5:ad:07:ba:c7:f9:47:b5:31:a5:79:2b:02:2e:
f1:98:dc:fe:fa:dc:be:70:80:43:bd:9e:3e:63:1d:fc:c4:12:
f5:9f:0f:cd:5c:e0:76:dd:d5:ad:77:0b:1a:0e:6b:00:ab:53:
6c:b6:a8:4c:cb:9b:71:35:02:8f:e7:4d:41:fd:9c:10:85:2e:
27:d8:16:de:07:11:99:8f:81:d1:4c:5b:f2:19:63:62:73:e7:
97:71:43:5f:5d:12:de:6e:65:89:25:a5:a3:95:6a:3c:01:4b:
ab:1d:70:d7:b1:dc:0b:f8:b8:ab:19:47:49:39:87:2d:51:15:
e2:0a:53:34:d9:59:10:87:eb:65:71:cc:c7:51:68:78:02:ce:
67:cc:b8:d2:20:cf:a8:b9:2c:fe:9b:c1:51:b1:ef:7a:de:77:
cb:e4:45:cb:90:f6:83:7d:2b:59:14:31:80:9c:1c:7f:88:e7:
bf:51:7c:85:5a:70:e9:09:cf:3f:10:e3:d0:d8:fb:0c:a0:95:
27:ea:76:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:00:01 2026 by rpki-client