
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.mft
File: h17HLkbyzRY_Brgi5wQSmu_jGRA.mft (raw, json)
Hash identifier: 0SR8AIJcur6plXz6oqw9OFotE9/o9WFtGmzkpRI6d/M=
Subject key identifier: 80:7C:66:06:17:08:FC:F3:9C:F0:AF:A5:4C:5C:48:0D:3B:9E:80:30
Authority key identifier: 87:5E:C7:2E:46:F2:CD:16:3F:06:B8:22:E7:04:12:9A:EF:E3:19:10
Certificate issuer: /CN=A917C716/serialNumber=875EC72E46F2CD163F06B822E704129AEFE31910
Certificate serial: C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h17HLkbyzRY_Brgi5wQSmu_jGRA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.mft
Manifest number: 0580
Signing time: Sat 13 Jun 2026 01:07:40 +0000
Manifest this update: Sat 13 Jun 2026 01:07:40 +0000
Manifest next update: Sat 20 Jun 2026 01:07:40 +0000
Files and hashes: 1: h17HLkbyzRY_Brgi5wQSmu_jGRA.crl (hash: jy4BxTy0Ste5IDECycJxQkF61vwCJRNLEQoT/QEFNkA=)
2: 9BC8AC96555C11F0AF866966C4F9AE02.roa (hash: j5O+lKdp1W7ImA51bVdi15GYc+ALaPNlnwcaq1b+F4s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.crl
rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h17HLkbyzRY_Brgi5wQSmu_jGRA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:07:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 197 (0xc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C716, serialNumber=875EC72E46F2CD163F06B822E704129AEFE31910
Validity
Not Before: Jun 13 01:07:40 2026 GMT
Not After : Jun 20 01:07:40 2026 GMT
Subject: CN=6a2cad5c-3691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:25:88:cc:a8:a3:75:b2:8a:4e:da:6b:89:b4:
74:d8:c4:5c:2d:92:4c:08:e1:b1:71:79:e3:77:59:
11:42:1e:f5:a4:79:e6:73:72:ef:3e:c6:0a:33:a0:
bb:57:e5:67:2d:b1:3a:c0:b2:47:1b:c2:04:9f:e2:
7d:87:e2:c6:fe:18:4e:76:58:ba:c7:c4:de:83:a4:
41:2a:a6:2b:c0:de:c0:af:0c:9c:2e:ba:ad:f4:bf:
55:b1:f1:1d:63:d3:fb:51:95:f7:c3:1c:8b:38:e6:
96:30:c8:46:c4:7a:b2:0a:eb:f8:5d:0b:2d:1d:02:
6d:eb:d4:e4:4e:fd:28:92:97:1c:1d:82:e4:a4:29:
12:63:a4:65:5f:a0:d7:4d:f1:4c:1d:4d:b7:0f:2f:
0a:0f:50:64:52:3b:47:8a:35:c1:60:a1:e3:0a:cc:
9b:c2:45:21:19:68:c2:11:69:9a:b9:7e:ea:e0:f4:
ac:73:43:1f:3d:26:40:38:fe:ee:e6:a9:d2:50:a8:
c7:d5:0a:67:1d:b0:e1:a3:1e:36:25:b0:ab:02:51:
6b:3d:88:be:46:3e:ca:d7:7f:83:21:30:d0:42:2c:
95:e4:61:34:aa:9e:5d:1a:7c:2a:6e:c1:d1:8b:b1:
66:cc:f6:d8:58:74:24:07:83:bd:66:89:7f:1a:38:
93:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:7C:66:06:17:08:FC:F3:9C:F0:AF:A5:4C:5C:48:0D:3B:9E:80:30
X509v3 Authority Key Identifier:
keyid:87:5E:C7:2E:46:F2:CD:16:3F:06:B8:22:E7:04:12:9A:EF:E3:19:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h17HLkbyzRY_Brgi5wQSmu_jGRA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:35:08:47:8b:e6:f3:ee:64:b3:a5:ab:9b:a1:50:0f:a3:7c:
f8:39:df:7f:ad:d1:6f:3f:8f:18:7e:f5:0e:1b:90:3d:9d:ac:
18:78:93:c1:bd:bf:37:8f:eb:f9:5e:6c:c6:b9:4a:ab:e0:f9:
8d:be:b2:84:f9:fa:13:1d:1e:e8:f0:e0:82:fd:a0:56:34:ef:
29:9c:0b:85:06:0b:9a:e2:6f:56:e7:ea:3b:7e:7d:fa:ff:13:
8d:18:b7:89:4d:19:e5:aa:d4:0a:0b:67:8c:85:69:58:94:36:
29:c9:f1:7d:0d:50:c8:14:ec:9b:e8:88:d0:89:86:37:8b:8b:
2b:00:94:52:e2:fa:77:db:65:1d:b0:d6:44:ee:69:b9:d4:9f:
29:7d:f3:1d:93:60:ce:d3:6f:2e:6c:a8:4c:2c:5a:62:84:fe:
56:47:cb:cf:b4:e5:7b:48:c4:ea:25:e2:ad:80:1f:c7:83:f4:
0d:4e:ea:7e:34:2f:bd:81:a4:d0:11:cd:e4:da:ec:d1:23:a9:
b0:d9:e5:de:36:bf:30:f6:66:81:4c:a8:f8:99:8e:2f:c8:7c:
01:46:34:f6:84:ca:de:5a:be:96:2e:3e:96:ec:b8:f0:3a:08:
59:af:e5:44:77:f7:90:ee:ca:9c:8e:43:ee:8e:bb:2d:bd:1c:
18:08:b5:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:35:50 2026 by rpki-client