
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.mft
File: h-gMDkYzEKnTA4zgE88YU3SlxyI.mft (raw, json)
Hash identifier: 1jT5uO035f1iifRkoevft1E2fIuhNBIbwR5e0qZDExQ=
Subject key identifier: BB:A1:A7:F3:D0:FC:16:EA:45:A8:50:8E:BB:98:3F:D3:0D:38:BF:90
Authority key identifier: 87:E8:0C:0E:46:33:10:A9:D3:03:8C:E0:13:CF:18:53:74:A5:C7:22
Certificate issuer: /CN=A918524B/serialNumber=87E80C0E463310A9D3038CE013CF185374A5C722
Certificate serial: 06E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h-gMDkYzEKnTA4zgE88YU3SlxyI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.mft
Manifest number: 06D4
Signing time: Sat 10 Oct 2026 22:23:58 +0000
Manifest this update: Sat 10 Oct 2026 22:23:58 +0000
Manifest next update: Sat 17 Oct 2026 22:23:58 +0000
Files and hashes: 1: h-gMDkYzEKnTA4zgE88YU3SlxyI.crl (hash: qqQi9W/IwscrNcLAStOTzSGOXcJijMXk7Dbc7yceHPo=)
2: C49CE482BEA411EB85828650C4F9AE02.roa (hash: YRVF06vQab+9NFZ7dGOQFnvASdYRW+VxNdESL/wwkLo=)
3: C850F3BA89A511EEB6692E43C4F9AE02.roa (hash: 9/omkIpCPqIeBe3uMYLBYEVI2CH4WNDcld2XzAT23Mc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.crl
rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h-gMDkYzEKnTA4zgE88YU3SlxyI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 22:23:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1764 (0x6e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918524B, serialNumber=87E80C0E463310A9D3038CE013CF185374A5C722
Validity
Not Before: Oct 10 22:23:58 2026 GMT
Not After : Oct 17 22:23:58 2026 GMT
Subject: CN=6acabafe-cb67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ee:47:e9:aa:ba:e0:e9:c3:33:45:ff:83:8a:
b1:ce:d8:0b:ea:e6:4d:c1:a4:b9:d7:47:51:a7:ab:
f9:7b:ed:da:da:26:ef:df:20:c1:c0:29:e2:be:1f:
9e:22:58:87:ed:ad:1a:d3:6a:32:9f:49:65:03:7e:
3b:10:ab:a1:9a:37:82:77:08:28:9e:4b:9c:61:92:
0d:3c:ca:6c:19:dd:36:0d:05:38:94:c4:4b:29:46:
77:23:4c:22:fb:84:94:4d:a8:d5:70:a5:32:d5:a4:
2a:56:e5:96:57:75:06:61:35:ff:1d:1d:32:1c:18:
65:ed:64:25:8e:73:2a:48:3d:3a:6a:88:e3:0e:d1:
63:47:54:16:cd:4f:57:8a:96:63:b9:38:a1:a5:41:
20:f0:ab:f3:40:9f:20:2b:e0:bf:3d:c1:a6:f6:7c:
6e:a2:99:3c:5f:74:06:f0:27:db:cf:4f:56:aa:fe:
62:57:70:83:dd:cd:2c:43:ff:15:ea:e8:13:b7:7e:
41:cc:ce:88:8a:1f:3f:21:e6:ab:77:35:16:87:3e:
b9:64:c5:16:fa:96:1e:3d:ea:70:55:4d:c7:0c:9d:
ab:6b:7d:2b:65:99:b4:2c:13:23:37:aa:19:e4:20:
ff:8d:46:05:c0:34:bd:ce:21:38:cb:f7:b7:1d:a4:
cf:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A1:A7:F3:D0:FC:16:EA:45:A8:50:8E:BB:98:3F:D3:0D:38:BF:90
X509v3 Authority Key Identifier:
keyid:87:E8:0C:0E:46:33:10:A9:D3:03:8C:E0:13:CF:18:53:74:A5:C7:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h-gMDkYzEKnTA4zgE88YU3SlxyI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:af:f3:65:76:86:9e:70:7b:e2:5e:08:c1:59:09:89:2a:40:
93:16:aa:93:db:9c:65:db:ea:19:01:70:8c:e7:38:c3:b9:12:
1f:18:cf:e8:75:58:d5:a5:bc:b5:73:e2:62:59:30:b0:e0:a4:
f1:c9:e7:6a:a7:28:d9:65:ec:5f:3d:5b:3b:fa:91:9b:66:4f:
27:41:45:85:61:40:b1:b5:22:e9:ca:18:63:30:fe:c5:ba:82:
3c:67:4d:32:bf:37:a6:6f:89:f1:26:07:ff:2e:2e:f7:3c:85:
6e:b1:8a:40:18:2f:ad:c6:5d:f7:47:19:c7:de:72:a6:18:f7:
0c:b4:26:92:0b:70:f4:ac:8e:98:05:16:98:c6:2c:aa:07:bd:
3d:3b:52:a9:e9:55:2f:24:02:fd:e0:9b:51:f7:ea:ba:96:6d:
c4:1f:35:9e:3f:c0:72:a4:ce:eb:b2:39:37:de:48:8f:bf:32:
70:c6:0b:2a:e1:83:08:7a:a8:41:3e:b1:c9:bf:c0:91:51:8b:
d5:d3:4d:6c:bc:2a:d1:a2:cd:d2:34:9d:5d:e1:92:c5:1c:00:
34:a9:a8:93:b9:b2:53:81:7d:68:56:19:2c:61:92:7c:f8:6c:
a4:db:49:48:70:e8:6f:bb:00:45:34:7a:6d:bf:48:1b:e6:90:
3e:ae:31:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:31:26 2026 by rpki-client