
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.mft
File: hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.mft (raw, json)
Hash identifier: JXzLvlS+jNgFYVZyFlKCyXPzjZJT1LQKYz+bMkzO/ow=
Subject key identifier: 97:52:BF:C0:E0:04:00:5D:D1:6C:63:10:E7:FB:A1:B0:E6:D1:F0:E1
Authority key identifier: 84:8A:79:AB:50:41:E7:1C:E6:22:50:B5:7F:C1:E0:F5:49:78:C9:3A
Certificate issuer: /CN=A918EC78/serialNumber=848A79AB5041E71CE62250B57FC1E0F54978C93A
Certificate serial: 0B8D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.mft
Manifest number: 0B80
Signing time: Wed 14 Oct 2026 19:20:05 +0000
Manifest this update: Wed 14 Oct 2026 19:20:04 +0000
Manifest next update: Wed 21 Oct 2026 19:20:04 +0000
Files and hashes: 1: hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.crl (hash: cHt9PsrIrtxSdz3BdC0J7TTdSuyL0vt3t5bCC98C6hk=)
2: BF77D1785DCB11EA880A7643C4F9AE02.roa (hash: A0fYtG6N2BexE9W0qntrNVFN6Gcpgpfkbf4hLPy3YFQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.crl
rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Oct 2026 19:20:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2957 (0xb8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EC78, serialNumber=848A79AB5041E71CE62250B57FC1E0F54978C93A
Validity
Not Before: Oct 14 19:20:04 2026 GMT
Not After : Oct 21 19:20:04 2026 GMT
Subject: CN=6acfd5e5-0945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b8:3f:41:09:73:37:22:85:df:9e:b6:d5:5f:
be:2f:86:d4:ea:d4:11:fa:a4:13:6a:2f:31:77:81:
4b:c3:a2:7e:b5:cb:50:b0:40:98:94:56:eb:94:1e:
bc:b5:7a:f3:f7:63:a9:b9:cc:de:30:00:79:b2:20:
4b:29:c7:b7:8a:b5:5a:0a:1a:3b:59:2d:1f:06:cd:
23:16:fe:7e:f8:3d:9f:19:8b:f2:1a:e9:0e:e9:cf:
c6:24:00:ba:8e:3b:96:b7:cd:87:c8:f4:ad:92:52:
07:16:5f:ff:4e:8e:17:4f:ab:be:1d:19:67:83:67:
13:36:bf:9a:e8:9d:36:b3:0e:18:e6:43:c4:c4:23:
9d:ba:61:68:7f:01:fa:0c:06:40:a2:5d:e9:76:f5:
5d:e7:38:8d:28:2f:b9:c1:3e:fb:28:49:2c:21:ca:
fc:b6:84:95:fb:cd:e3:0c:f6:23:2b:93:bf:f0:2a:
3a:d8:a6:51:4d:c2:19:7d:a8:42:62:64:ae:e3:55:
e7:bc:cf:b5:e2:8e:42:ab:59:16:91:02:77:b9:43:
c0:e1:9f:89:8f:ba:a9:63:fe:42:1c:4c:6e:e2:c4:
bc:4e:e0:87:6e:8e:ad:a5:c6:29:45:88:8a:36:ef:
69:2c:28:bd:e3:c6:45:0e:62:fc:e7:d8:d4:83:a8:
89:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:52:BF:C0:E0:04:00:5D:D1:6C:63:10:E7:FB:A1:B0:E6:D1:F0:E1
X509v3 Authority Key Identifier:
keyid:84:8A:79:AB:50:41:E7:1C:E6:22:50:B5:7F:C1:E0:F5:49:78:C9:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:97:0a:cb:8d:76:b8:47:c7:f6:18:db:cd:c3:67:85:90:33:
a2:2e:0a:c1:ad:a9:b5:f4:a6:94:52:be:a0:a6:1d:cb:44:6a:
58:f3:00:c6:db:a6:e6:86:d8:e1:c5:12:eb:78:dd:b6:fb:ce:
5a:6c:94:cc:54:af:4c:b5:fc:87:92:6b:1e:54:4a:58:f5:fa:
a5:85:f8:a9:d3:50:76:ee:38:e9:9d:be:66:1e:98:f2:ce:83:
48:7e:3e:20:a8:0c:57:03:50:5c:7c:e4:06:6f:0a:14:1b:57:
8c:50:1c:db:8b:0f:8d:eb:06:0e:3f:69:47:64:1b:14:34:c9:
7e:90:3a:86:26:a3:c0:42:a5:bf:e7:13:38:ff:2b:fb:13:c7:
c1:e6:42:6c:8b:35:ce:61:f3:41:0d:62:48:dc:cd:83:52:1b:
b8:1b:93:8b:43:48:3e:a1:df:cb:fc:e9:2c:b0:20:ec:b5:42:
52:36:98:88:e0:58:83:16:da:ba:ad:1d:de:02:4d:08:e2:1b:
40:32:c2:f4:b3:b8:36:8b:85:22:62:63:93:35:4b:d4:55:e9:
8c:a0:1c:a7:93:da:a0:a7:b8:7c:ee:e1:2e:57:3d:fd:0c:a9:
10:fb:47:a4:22:fc:af:d0:61:51:82:6e:5d:f0:63:7b:ad:43:
3a:7b:7c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 05:31:22 2026 by rpki-client