
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.mft
File: b5HHak90ZkEA3Y3r0XhRQuE3gC0.mft (raw, json)
Hash identifier: x9Z4BnQfOPMXUTpG9FayDRbZICQlPhLq8NboXmG8Kmg=
Subject key identifier: 7C:3A:BF:C7:CA:8A:C1:78:75:6B:57:BD:9D:03:69:10:60:14:7C:73
Authority key identifier: 6F:91:C7:6A:4F:74:66:41:00:DD:8D:EB:D1:78:51:42:E1:37:80:2D
Certificate issuer: /CN=A918D2CA/serialNumber=6F91C76A4F74664100DD8DEBD1785142E137802D
Certificate serial: 9C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b5HHak90ZkEA3Y3r0XhRQuE3gC0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.mft
Manifest number: 98
Signing time: Sun 01 Mar 2026 09:28:09 +0000
Manifest this update: Sun 01 Mar 2026 09:28:09 +0000
Manifest next update: Sun 08 Mar 2026 09:28:09 +0000
Files and hashes: 1: b5HHak90ZkEA3Y3r0XhRQuE3gC0.crl (hash: tXZa8f/KTWzPqLeXqoZzQk/nrigIorDpIgTplumt3EI=)
2: 8C9E2B18354711F09FCEEE25C4F9AE02.roa (hash: 9lJDx4+O6el+GSFbl7FYDnsYPGw+jTdGP9VGs+k2cYw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.crl
rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b5HHak90ZkEA3Y3r0XhRQuE3gC0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:28:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156 (0x9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D2CA, serialNumber=6F91C76A4F74664100DD8DEBD1785142E137802D
Validity
Not Before: Mar 1 09:28:09 2026 GMT
Not After : Mar 8 09:28:09 2026 GMT
Subject: CN=69a406a9-672d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0e:d1:a8:35:a8:55:ec:f8:0c:23:36:fc:a9:
15:2c:97:82:e6:ca:ef:d0:15:b8:91:07:b1:0a:f8:
0c:5e:90:ac:65:f3:d9:d4:1a:7f:a9:c7:66:3b:da:
e8:55:03:de:d5:ce:26:4f:b0:3c:43:48:fc:6b:2e:
d1:5e:44:eb:96:fd:4e:9d:91:90:35:cb:d4:fb:53:
f4:c5:d6:04:1d:48:ff:29:6a:ac:98:4f:75:12:85:
4e:08:ff:0a:9f:8b:c0:c4:3f:d8:84:46:12:e2:c1:
b6:00:71:66:59:42:5c:d0:a4:51:04:2e:61:32:d5:
2b:71:f8:5a:f0:01:0e:df:74:8c:fe:d3:9e:a1:ff:
23:29:bd:15:a6:2c:dc:6b:1b:d7:eb:b6:8d:1c:3c:
23:92:d4:ad:97:19:7b:bc:00:89:bd:81:e3:72:71:
c8:78:8f:07:b7:f6:48:47:07:a9:34:5e:6f:bc:b4:
b0:a2:8e:8e:5d:0a:a2:0a:84:20:15:51:22:4e:8a:
f9:23:8f:cf:ef:51:06:0b:ab:af:68:4f:82:4e:32:
21:db:f7:cc:13:50:e9:f4:a2:76:36:21:61:cf:97:
22:c4:e4:23:6d:3a:ae:3f:59:af:a2:64:f8:db:e5:
a0:81:18:1f:9e:44:82:d5:47:30:cb:d2:9d:64:15:
2c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:3A:BF:C7:CA:8A:C1:78:75:6B:57:BD:9D:03:69:10:60:14:7C:73
X509v3 Authority Key Identifier:
keyid:6F:91:C7:6A:4F:74:66:41:00:DD:8D:EB:D1:78:51:42:E1:37:80:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b5HHak90ZkEA3Y3r0XhRQuE3gC0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:03:bd:c8:cb:89:ae:3f:0b:82:ab:a3:0d:2a:a2:ee:30:af:
31:ee:db:4e:64:a1:f5:65:55:78:38:12:e8:b4:71:91:c8:fc:
f4:15:72:85:77:ec:67:ab:5b:78:1c:ae:20:b1:46:9c:e5:7c:
70:4f:ab:57:30:27:56:8d:ec:e8:1c:7e:77:a3:5c:ba:74:89:
e3:b8:10:9d:79:5e:b7:c7:76:3c:38:4f:cd:2e:c3:f3:7a:01:
66:53:d6:d4:9a:f2:37:09:af:94:02:0d:82:39:53:c1:c1:cd:
a0:0e:5e:9c:a4:53:eb:15:15:43:35:08:d4:91:e3:80:74:c1:
83:6b:11:b5:4a:2b:7a:25:97:b4:4b:52:85:49:e2:f7:cc:f4:
11:15:6c:63:fb:70:5d:1e:12:f2:6e:58:a3:95:f1:ed:bd:d9:
df:43:c1:df:8c:28:0d:d3:0c:47:7d:b5:fa:75:26:27:c1:2f:
d2:3e:35:87:84:79:47:0e:7f:15:e0:e1:5b:17:3e:8c:4e:1c:
10:59:4e:22:71:bf:ad:c5:a8:dd:6c:72:03:82:f1:e8:c8:c6:
21:25:0b:4d:48:1a:4e:78:b1:ba:2d:71:11:0e:5e:57:46:d9:
c9:ed:3d:1a:84:15:ca:58:12:c6:6d:5f:8f:85:bf:6b:42:cd:
f4:b7:dd:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:02:06 2026 by rpki-client