
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/HN4SRMu7llQubIsJo9rBwbRDaNc.mft
File: HN4SRMu7llQubIsJo9rBwbRDaNc.mft (raw, json)
Hash identifier: TORpX/v4uvzHrcK2KcpDD90XkmqMqkwit8Nb14ljmmQ=
Subject key identifier: 15:43:B6:9A:74:66:3F:9A:C3:AB:E1:9C:7B:12:6A:11:63:96:FF:E4
Authority key identifier: 1C:DE:12:44:CB:BB:96:54:2E:6C:8B:09:A3:DA:C1:C1:B4:43:68:D7
Certificate issuer: /CN=A918A498/serialNumber=1CDE1244CBBB96542E6C8B09A3DAC1C1B44368D7
Certificate serial: D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HN4SRMu7llQubIsJo9rBwbRDaNc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/HN4SRMu7llQubIsJo9rBwbRDaNc.mft
Manifest number: D3
Signing time: Wed 15 Apr 2026 06:17:19 +0000
Manifest this update: Wed 15 Apr 2026 06:17:18 +0000
Manifest next update: Wed 22 Apr 2026 06:17:18 +0000
Files and hashes: 1: HN4SRMu7llQubIsJo9rBwbRDaNc.crl (hash: kOd0MX/9zKNulpo42eHAYiAq7GOXQDWC/vqcmCL0Eqw=)
2: 62C86698F80A11EFA400AC2FC4F9AE02.roa (hash: U4LLMJ0m7hitnKHAojnOcr6u6PFK2WR9WUoRdlPrdFk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/HN4SRMu7llQubIsJo9rBwbRDaNc.crl
rsync://rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/HN4SRMu7llQubIsJo9rBwbRDaNc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HN4SRMu7llQubIsJo9rBwbRDaNc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 06:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 215 (0xd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A498, serialNumber=1CDE1244CBBB96542E6C8B09A3DAC1C1B44368D7
Validity
Not Before: Apr 15 06:17:18 2026 GMT
Not After : Apr 22 06:17:18 2026 GMT
Subject: CN=69df2d6f-1777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ce:d8:c3:1c:3d:7d:8f:90:d1:36:6b:5b:00:
c0:e8:49:2a:f9:e8:84:92:16:8f:a7:33:8b:5a:f1:
32:18:01:7c:28:5c:38:1b:47:0b:63:ce:5d:c5:fb:
10:a4:12:7a:3f:c1:bd:de:a7:84:e8:76:d5:25:97:
53:44:f1:aa:14:46:77:fb:8c:3a:6d:4d:37:59:2a:
59:14:38:6e:ea:bf:d6:7f:96:78:91:94:92:65:b3:
3d:d1:12:9f:a4:6d:a8:45:f1:f0:cb:47:2c:6f:ec:
ca:b5:02:4d:de:2e:9f:ff:34:2e:8a:89:d9:29:07:
03:a7:68:c2:ab:22:dd:87:06:90:f6:c4:cf:05:e7:
51:bd:d5:98:dd:4d:91:e8:85:73:22:ba:92:77:9d:
88:ba:ae:97:8a:aa:74:bc:41:13:71:d9:07:fd:cd:
2f:2f:e2:2b:a3:6b:f4:2d:fa:57:35:84:5d:bd:6e:
32:ea:1e:87:b2:2b:b4:85:30:db:97:99:49:1e:b8:
3c:aa:23:b3:53:90:ca:66:56:82:14:6e:56:f9:52:
1a:66:89:3e:34:68:26:25:3e:8c:88:51:70:81:b7:
7b:d6:be:e8:6e:c6:9f:56:87:19:ac:64:9b:f1:0a:
42:93:ac:52:5b:ba:c7:5e:35:86:f2:a8:0b:f6:42:
78:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:43:B6:9A:74:66:3F:9A:C3:AB:E1:9C:7B:12:6A:11:63:96:FF:E4
X509v3 Authority Key Identifier:
keyid:1C:DE:12:44:CB:BB:96:54:2E:6C:8B:09:A3:DA:C1:C1:B4:43:68:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/HN4SRMu7llQubIsJo9rBwbRDaNc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HN4SRMu7llQubIsJo9rBwbRDaNc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/HN4SRMu7llQubIsJo9rBwbRDaNc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:d2:fe:70:b3:24:77:77:45:3a:26:7c:f3:c4:39:3f:9c:a7:
36:a9:82:c0:75:b4:dc:54:ca:24:31:5c:fb:ec:2d:c2:1e:6d:
a6:e0:74:4c:fb:39:88:1e:69:0f:19:7f:cf:b7:79:2c:a1:99:
d3:11:53:8e:56:0a:c3:8a:39:4b:d1:2c:34:59:11:de:47:67:
27:89:70:0a:40:91:6e:0f:f0:6d:22:3e:8e:20:e1:14:31:84:
3e:c7:1f:4f:31:14:36:3c:5d:51:d1:e2:42:00:d2:2a:fb:52:
4e:c8:24:e0:78:f5:67:28:6a:c0:47:c5:50:b7:97:d9:35:39:
48:26:f7:a3:80:e5:7e:55:b9:eb:f5:5e:93:d9:7b:45:a3:d5:
34:26:6f:ca:fe:5b:b3:06:4e:58:fb:b0:f2:61:8d:57:83:50:
07:cc:b0:e2:f3:74:0a:b7:8b:83:09:6d:20:1e:ad:9b:1f:d2:
af:b2:f9:d9:db:5c:9f:bd:a8:53:90:ef:91:1d:56:fd:9f:12:
df:f9:7f:06:b9:22:d6:89:e7:41:16:80:a0:9f:e6:8f:75:4e:
7c:1c:74:c0:22:67:c1:4a:40:77:cd:b2:0c:4f:69:7f:6d:99:
41:28:e3:8e:d4:19:2c:76:44:49:11:0b:93:25:25:94:1d:fe:
cf:4e:2a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:32:16 2026 by rpki-client