
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.mft
File: b5HHak90ZkEA3Y3r0XhRQuE3gC0.mft (raw, json)
Hash identifier: iPOywlrzL16GPjQLyOru7hE7bbwZ0ROxz07z+J6uz1I=
Subject key identifier: F8:62:62:7D:A8:92:8F:82:25:DF:AF:BB:D3:AA:48:11:35:9B:DE:79
Authority key identifier: 6F:91:C7:6A:4F:74:66:41:00:DD:8D:EB:D1:78:51:42:E1:37:80:2D
Certificate issuer: /CN=A918D2CA/serialNumber=6F91C76A4F74664100DD8DEBD1785142E137802D
Certificate serial: B7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b5HHak90ZkEA3Y3r0XhRQuE3gC0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.mft
Manifest number: B2
Signing time: Fri 17 Apr 2026 06:53:11 +0000
Manifest this update: Fri 17 Apr 2026 06:53:11 +0000
Manifest next update: Fri 24 Apr 2026 06:53:11 +0000
Files and hashes: 1: b5HHak90ZkEA3Y3r0XhRQuE3gC0.crl (hash: 4vBo3DlBhOdUTAqdBZpIloGhQknSqKx4Nsxxyoy3Ugs=)
2: 8C9E2B18354711F09FCEEE25C4F9AE02.roa (hash: vLHp4ObDO1IK1mUqYi6ciOieF4o9Rbhwa3XZX1qH6lI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.crl
rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b5HHak90ZkEA3Y3r0XhRQuE3gC0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183 (0xb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D2CA, serialNumber=6F91C76A4F74664100DD8DEBD1785142E137802D
Validity
Not Before: Apr 17 06:53:11 2026 GMT
Not After : Apr 24 06:53:11 2026 GMT
Subject: CN=69e1d8d7-34c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4e:20:22:1e:ae:4e:15:b8:84:23:94:28:27:
f7:41:6c:88:f2:6f:ce:3a:dd:76:b6:d5:89:d7:30:
ed:ca:4c:8d:50:55:85:e0:40:3c:67:fc:39:e5:c4:
c6:ce:e4:f6:4d:dc:62:04:72:58:f9:5f:0f:4c:e1:
d1:6e:62:c1:85:70:7e:82:e8:59:7e:dd:5a:a4:ea:
df:e4:af:9a:85:1d:35:9a:0b:3f:9e:31:1b:e4:5c:
ec:a4:8e:45:93:91:50:68:22:a7:4b:fe:a5:ef:ce:
f8:1c:c3:84:2a:4e:8d:e4:7a:fb:3d:af:c6:dd:a9:
96:2a:32:4d:45:d8:eb:6f:51:0c:74:0e:8b:91:3f:
dd:01:72:d0:43:f0:f6:57:1d:fa:8b:39:1e:26:af:
cc:92:6b:49:95:ad:90:c5:44:0d:a1:e9:1d:ce:f3:
66:aa:13:11:96:c0:b4:59:e6:a4:51:97:a3:d6:61:
7f:04:e7:c3:33:85:f2:94:d8:cc:ad:06:9f:01:cf:
14:ff:9c:af:0f:2f:c0:4d:8f:23:31:a6:9d:f2:95:
31:6b:e1:6b:f1:9e:4f:b7:40:bf:b3:52:c7:0e:05:
c1:d2:28:f4:9b:d5:a0:db:d1:97:3a:be:1a:ee:fd:
53:96:02:c6:82:eb:ba:ee:dd:5b:03:fe:93:f4:47:
d0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:62:62:7D:A8:92:8F:82:25:DF:AF:BB:D3:AA:48:11:35:9B:DE:79
X509v3 Authority Key Identifier:
keyid:6F:91:C7:6A:4F:74:66:41:00:DD:8D:EB:D1:78:51:42:E1:37:80:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b5HHak90ZkEA3Y3r0XhRQuE3gC0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:c6:0e:cd:27:b2:ad:b2:33:68:77:d1:f9:c5:22:8c:02:5b:
15:30:fa:62:fb:f5:64:eb:27:44:68:28:e9:01:8f:a4:20:96:
65:2b:2c:a8:51:2c:ad:26:98:96:64:7f:66:a4:80:b9:a4:90:
6a:18:e2:80:b7:63:c2:e9:d2:2d:e5:01:f1:78:aa:21:c1:a1:
98:d2:33:5e:20:d9:e6:d3:8e:86:05:3a:26:2e:fe:19:bb:62:
ef:73:0b:de:06:aa:bc:f9:41:dc:ec:d2:f9:00:f3:b1:98:59:
92:ce:1d:0b:eb:cd:f9:ff:18:2a:d7:58:4e:0e:0f:dd:87:c1:
22:1f:d0:17:a5:d6:82:70:c5:17:2a:e7:6d:a5:38:ca:0c:5c:
38:bd:2c:14:6e:0c:1b:e8:d5:42:54:3f:9f:80:db:8d:89:a4:
15:b4:12:09:45:03:e2:60:78:ae:10:73:81:11:c1:0a:4f:1d:
fa:8c:61:3e:0f:f1:fc:55:22:5b:aa:3b:b6:60:62:d1:2e:ef:
53:b4:ff:e2:7d:ce:0d:73:fd:d9:89:50:f9:f4:4a:d0:cb:c4:
5d:b5:05:a5:16:17:08:68:a1:8b:ab:23:be:92:81:d0:4b:2a:
32:6b:85:e3:05:d5:d4:06:3e:b3:af:ca:98:f6:a5:43:37:e5:
ff:0e:5d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:41:23 2026 by rpki-client