
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.mft
File: b5HHak90ZkEA3Y3r0XhRQuE3gC0.mft (raw, json)
Hash identifier: oIhjz7HJTcwuG3cKAHxIRVsMn8Rxu8LDrG4CGGRNOng=
Subject key identifier: 7C:30:08:A7:A3:7D:B8:43:EA:26:C2:F0:8A:20:CE:F5:F8:B5:5A:B4
Authority key identifier: 6F:91:C7:6A:4F:74:66:41:00:DD:8D:EB:D1:78:51:42:E1:37:80:2D
Certificate issuer: /CN=A918D2CA/serialNumber=6F91C76A4F74664100DD8DEBD1785142E137802D
Certificate serial: D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b5HHak90ZkEA3Y3r0XhRQuE3gC0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.mft
Manifest number: CE
Signing time: Sat 13 Jun 2026 06:54:59 +0000
Manifest this update: Sat 13 Jun 2026 06:54:59 +0000
Manifest next update: Sat 20 Jun 2026 06:54:59 +0000
Files and hashes: 1: b5HHak90ZkEA3Y3r0XhRQuE3gC0.crl (hash: TQmfE0l7OBz91Dbm2v+l32RRkeGv2r4b80I4UJ8T7x8=)
2: 8C9E2B18354711F09FCEEE25C4F9AE02.roa (hash: vLHp4ObDO1IK1mUqYi6ciOieF4o9Rbhwa3XZX1qH6lI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.crl
rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b5HHak90ZkEA3Y3r0XhRQuE3gC0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 06:54:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 211 (0xd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D2CA, serialNumber=6F91C76A4F74664100DD8DEBD1785142E137802D
Validity
Not Before: Jun 13 06:54:59 2026 GMT
Not After : Jun 20 06:54:59 2026 GMT
Subject: CN=6a2cfec3-7fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c0:bb:e1:31:cf:9e:83:bf:c6:c2:c4:0a:d6:
a3:61:ac:76:c3:02:77:63:4d:44:b6:c0:9c:39:c6:
35:b7:8d:bd:e4:0a:13:37:71:5b:3d:68:11:96:99:
ab:af:45:73:e9:e3:1a:17:bd:08:e0:01:70:b8:4a:
10:85:05:49:cb:f5:98:d5:21:f3:69:df:de:b3:51:
90:51:92:be:d8:46:34:b5:14:3f:3b:a3:3e:af:f5:
0e:ff:b9:dc:b8:38:e7:06:d1:97:01:61:49:b3:24:
c4:41:f2:15:6c:62:a3:0f:2b:9a:fe:04:1f:02:ee:
c3:be:88:47:d2:be:3e:3b:a8:6c:f4:a8:44:c9:3a:
50:49:4e:bd:07:8c:8a:75:f0:4f:99:7c:d4:96:4f:
6c:57:94:20:92:56:d2:33:84:40:e4:33:90:23:37:
17:01:6d:b0:e9:c9:44:d5:b3:48:dc:1e:9a:03:1b:
2f:25:14:3b:2b:4d:06:00:38:ea:6e:cd:cb:28:6e:
8d:ba:2a:8b:e0:fa:58:8a:13:34:2a:79:be:ee:97:
50:4d:70:7b:41:6f:9e:2d:08:92:26:87:b0:c5:1c:
86:9f:c8:56:b3:bb:d4:65:48:6c:ef:f4:3f:f5:a6:
35:29:de:37:30:50:9b:f8:7a:22:28:d6:cf:9a:cc:
0e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:30:08:A7:A3:7D:B8:43:EA:26:C2:F0:8A:20:CE:F5:F8:B5:5A:B4
X509v3 Authority Key Identifier:
keyid:6F:91:C7:6A:4F:74:66:41:00:DD:8D:EB:D1:78:51:42:E1:37:80:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b5HHak90ZkEA3Y3r0XhRQuE3gC0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:85:63:23:dd:e7:e6:ad:eb:f9:13:3f:12:4f:95:ff:0a:64:
30:7e:94:55:32:51:a6:05:25:2b:d0:8a:cb:44:aa:26:99:df:
7e:6a:d2:80:97:97:b0:75:ac:bf:9f:29:15:dd:fc:a3:40:52:
a1:de:25:b3:14:5d:72:f3:f1:df:18:20:7b:55:9e:9a:ec:5e:
f9:75:71:ef:12:b3:32:c4:fd:03:d0:00:e5:21:05:db:97:c4:
9a:77:6b:1e:2b:4b:a7:c5:d6:f2:a3:05:dd:4c:ee:a6:b8:80:
68:7f:94:c4:f4:6e:03:fc:13:f3:f8:a7:16:d3:54:ac:7f:df:
be:11:da:fb:db:08:65:36:7c:66:2b:70:06:5a:35:4a:81:96:
03:80:87:30:b6:52:05:72:9f:f8:8a:c1:59:c4:fe:a0:92:4a:
f1:95:22:0b:08:e3:e9:ee:b8:49:a7:f4:be:d6:50:5c:8b:a1:
29:be:12:9c:45:12:18:80:d6:46:48:d4:b3:ad:01:6d:a2:22:
94:45:54:48:2f:67:36:ba:60:61:01:7d:33:5e:2d:5d:78:a0:
ca:62:63:f9:92:1f:81:69:12:1e:43:d3:1a:69:4d:3a:79:01:
ec:bd:96:19:9e:8a:45:51:bf:86:3a:85:45:3f:41:60:ea:0a:
09:94:4a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:43:31 2026 by rpki-client