
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft
File: h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft (raw, json)
Hash identifier: wNR+jdsyNWKDdQBI4wsJyfbFvJc34Jop534tZwiAfiI=
Subject key identifier: B6:DE:08:7D:84:60:F9:F4:06:AD:E0:7A:51:BC:F8:EA:49:ED:8B:FB
Authority key identifier: 87:8B:86:86:95:FC:45:C9:C6:3B:6F:BC:54:CC:B3:50:9C:4B:9F:4B
Certificate issuer: /CN=A918A35C/serialNumber=878B868695FC45C9C63B6FBC54CCB3509C4B9F4B
Certificate serial: 0C2F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft
Manifest number: 0C27
Signing time: Mon 02 Mar 2026 02:25:33 +0000
Manifest this update: Mon 02 Mar 2026 02:25:33 +0000
Manifest next update: Mon 09 Mar 2026 02:25:33 +0000
Files and hashes: 1: h4uGhpX8RcnGO2-8VMyzUJxLn0s.crl (hash: z3L5iAcyKgq+3Uvpbq7m1moVi3FrZPfkRqrKaaE1uDo=)
2: 0D22F748261A11EA83CE8D17C4F9AE02.roa (hash: AGJ3imo4fnyGAnxscjmKEoYw6azyeSOHkHTLOF2MKsQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.crl
rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:25:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3119 (0xc2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A35C, serialNumber=878B868695FC45C9C63B6FBC54CCB3509C4B9F4B
Validity
Not Before: Mar 2 02:25:33 2026 GMT
Not After : Mar 9 02:25:33 2026 GMT
Subject: CN=69a4f51d-0006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a2:29:ed:5d:c6:81:b4:df:e9:14:02:6a:38:
14:fd:4b:40:c6:79:cd:59:8f:3a:da:a0:87:e5:aa:
f5:31:38:10:78:78:c5:df:cc:d9:13:f1:ba:05:64:
cb:41:18:a8:08:c3:6d:85:ea:8a:94:0f:61:26:03:
3f:01:9f:00:d6:fb:dc:84:d9:50:05:37:7c:fc:83:
41:ff:3c:8c:5a:cd:44:bc:06:ef:24:ab:59:7b:c4:
43:f6:d5:a0:fb:6a:45:40:eb:b0:0e:18:b5:0b:48:
17:db:da:93:fc:1e:7a:c6:89:62:b8:41:dd:53:7a:
17:62:1d:f0:87:2d:56:36:19:38:2d:cd:93:e1:eb:
ca:d6:88:3f:66:b5:38:7d:d5:09:5f:74:df:84:9b:
d3:21:7a:24:71:bc:38:2b:4b:6f:c6:00:71:25:29:
bc:3e:58:42:09:af:e2:74:5b:28:e1:a7:74:7d:d1:
f6:17:88:2f:32:bd:92:40:45:bf:13:79:b2:d4:d9:
5c:0b:17:b8:0f:bb:b8:51:a5:d6:4e:38:f1:0a:8d:
b2:29:77:fc:d6:ee:04:fa:19:91:67:65:99:55:63:
f6:54:1c:30:4e:d4:2c:ac:bd:95:67:e5:77:4f:6e:
25:6d:97:16:e0:72:de:db:c5:eb:13:1e:5e:b2:9e:
7f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:DE:08:7D:84:60:F9:F4:06:AD:E0:7A:51:BC:F8:EA:49:ED:8B:FB
X509v3 Authority Key Identifier:
keyid:87:8B:86:86:95:FC:45:C9:C6:3B:6F:BC:54:CC:B3:50:9C:4B:9F:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:94:9c:81:94:39:ea:4b:a3:dc:c9:cf:d8:10:0a:ed:6b:e1:
ab:1d:80:80:fa:3b:61:66:0f:6f:d7:bd:54:3f:88:4d:b6:b5:
87:77:da:04:7e:e2:f9:5e:71:9d:41:90:e2:c3:f5:e9:be:92:
3a:e6:5b:4f:07:88:b0:5b:de:fb:f7:46:27:0f:75:63:70:19:
f7:d5:28:7c:c2:b3:53:79:23:d0:33:d7:5d:be:fe:e6:f8:24:
60:c3:da:4b:76:04:91:27:34:f8:e6:f9:85:be:92:3f:d1:d7:
fe:e4:cb:c7:40:a1:14:4b:08:10:96:a3:ec:5d:c5:3f:d3:a6:
1c:c6:68:5c:52:2b:2c:e4:5f:c7:0b:fb:2e:64:59:a8:ee:85:
7c:fa:1f:2c:a7:5d:83:27:c5:88:9b:31:e4:0f:b0:b1:43:50:
63:37:67:f4:42:a7:0c:9d:a7:79:9d:35:e3:2c:b1:c4:49:30:
8c:9b:2e:ef:bb:93:7e:0c:3f:83:02:c9:05:41:15:cc:05:e6:
fc:fb:64:af:fd:ad:d4:39:b2:72:95:10:be:c1:d6:74:f6:3e:
cf:f6:37:3a:fb:79:79:db:b9:48:25:f4:1d:9f:05:f8:d0:72:
fb:c4:41:e3:bd:43:1d:25:54:14:c6:62:a1:e5:77:8c:0a:43:
2d:5e:55:20
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDC8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEEzNUMxMTAvBgNVBAUTKDg3OEI4Njg2OTVGQzQ1QzlDNjNCNkZCQzU0Q0NCMzUw
OUM0QjlGNEIwHhcNMjYwMzAyMDIyNTMzWhcNMjYwMzA5MDIyNTMzWjAYMRYwFAYD
VQQDEw02OWE0ZjUxZC0wMDA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwaIp7V3GgbTf6RQCajgU/UtAxnnNWY862qCH5ar1MTgQeHjF38zZE/G6BWTL
QRioCMNtheqKlA9hJgM/AZ8A1vvchNlQBTd8/INB/zyMWs1EvAbvJKtZe8RD9tWg
+2pFQOuwDhi1C0gX29qT/B56xoliuEHdU3oXYh3why1WNhk4Lc2T4evK1og/ZrU4
fdUJX3TfhJvTIXokcbw4K0tvxgBxJSm8PlhCCa/idFso4ad0fdH2F4gvMr2SQEW/
E3my1NlcCxe4D7u4UaXWTjjxCo2yKXf81u4E+hmRZ2WZVWP2VBwwTtQsrL2VZ+V3
T24lbZcW4HLe28XrEx5esp5/3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLbeCH2E
YPn0Bq3gelG8+OpJ7Yv7MB8GA1UdIwQYMBaAFIeLhoaV/EXJxjtvvFTMs1CcS59L
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTM1Qy81MkZDNkI5ODI2
MTgxMUVBQkZFREUxMTNDNEY5QUUwMi9oNHVHaHBYOFJjbkdPMi04Vk15elVKeExu
MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2g0dUdocFg4UmNuR08yLThWTXl6VUp4TG4wcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QTM1Qy81MkZDNkI5ODI2MTgxMUVBQkZFREUxMTNDNEY5QUUwMi9oNHVHaHBYOFJj
bkdPMi04Vk15elVKeExuMHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEJScgZQ56kuj3MnP2BAK7Wvhqx2AgPo7YWYPb9e9VD+ITba1h3faBH7i+V5x
nUGQ4sP16b6SOuZbTweIsFve+/dGJw91Y3AZ99UofMKzU3kj0DPXXb7+5vgkYMPa
S3YEkSc0+Ob5hb6SP9HX/uTLx0ChFEsIEJaj7F3FP9OmHMZoXFIrLORfxwv7LmRZ
qO6FfPofLKddgyfFiJsx5A+wsUNQYzdn9EKnDJ2neZ014yyxxEkwjJsu77uTfgw/
gwLJBUEVzAXm/Ptkr/2t1DmycpUQvsHWdPY+z/Y3Ovt5edu5SCX0HZ8F+NBy+8RB
471DHSVUFMZioeV3jApDLV5VIA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:14:29 2026 by rpki-client