
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft
File: hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft (raw, json)
Hash identifier: iz3fQBIFbgR1wSBPMcLx3HK7WbZjRvG682wvIUofZTA=
Subject key identifier: CF:01:07:B7:A9:A3:25:64:38:B6:55:9C:B0:1A:4C:88:29:F0:20:AB
Authority key identifier: 85:C5:67:25:91:03:D9:E2:29:2E:64:DB:FB:79:FD:39:B2:56:FD:E4
Certificate issuer: /CN=A9196DCA/serialNumber=85C567259103D9E2292E64DBFB79FD39B256FDE4
Certificate serial: D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcVnJZED2eIpLmTb-3n9ObJW_eQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft
Manifest number: D8
Signing time: Sun 01 Mar 2026 07:44:13 +0000
Manifest this update: Sun 01 Mar 2026 07:44:12 +0000
Manifest next update: Sun 08 Mar 2026 07:44:12 +0000
Files and hashes: 1: hcVnJZED2eIpLmTb-3n9ObJW_eQ.crl (hash: DncwMjuaoRWJB48uJZdzLLAAsk3No6mqU4gRtsmoxvo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.crl
rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcVnJZED2eIpLmTb-3n9ObJW_eQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:44:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 216 (0xd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196DCA, serialNumber=85C567259103D9E2292E64DBFB79FD39B256FDE4
Validity
Not Before: Mar 1 07:44:12 2026 GMT
Not After : Mar 8 07:44:12 2026 GMT
Subject: CN=69a3ee4d-98df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e4:76:c0:70:1c:d3:4c:9f:46:f3:17:d0:cc:
ec:25:e3:e8:3e:f3:0d:58:2f:6e:4c:f4:a4:45:7c:
76:ff:4a:df:23:71:fe:c3:61:14:d6:c0:42:a6:b5:
58:e7:c9:8e:56:d3:65:76:bf:14:e0:cf:29:23:16:
3e:8d:0a:ea:57:5a:c6:d5:60:aa:23:3e:be:c0:4d:
9d:c5:36:80:79:68:4c:b8:05:47:3d:43:f6:0e:85:
91:cf:d5:68:9c:31:00:80:e5:fd:4a:03:ef:62:b7:
96:4f:1a:78:22:ad:52:27:b0:47:3b:9c:7c:90:9d:
38:50:d2:b6:b3:d0:d3:0e:50:a3:a5:f6:1d:cb:a1:
27:14:41:92:8c:00:a1:d1:cb:a5:af:ec:3b:4d:e2:
4c:1c:3e:dd:64:5d:b8:11:b0:57:fd:ad:8a:ed:c7:
c7:49:83:b2:65:94:d0:07:eb:2b:0b:66:bf:a2:49:
a6:ba:a2:94:d1:68:7c:ed:04:7d:40:85:70:d9:ad:
8a:56:96:d8:15:b3:6a:e8:8a:9a:a1:ae:0e:4e:76:
4a:dd:c1:28:5f:26:17:70:7e:e2:b6:17:62:e1:5e:
e0:2a:51:61:e2:ff:f9:19:c3:e8:c2:bd:21:d6:7f:
e0:76:9c:f4:a5:92:ef:b2:72:2a:e8:4d:38:be:c0:
0d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:01:07:B7:A9:A3:25:64:38:B6:55:9C:B0:1A:4C:88:29:F0:20:AB
X509v3 Authority Key Identifier:
keyid:85:C5:67:25:91:03:D9:E2:29:2E:64:DB:FB:79:FD:39:B2:56:FD:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcVnJZED2eIpLmTb-3n9ObJW_eQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e4:83:f5:0d:4d:ea:6a:9b:44:4e:86:a9:5a:af:2a:ea:5c:88:
2b:94:54:11:9e:db:19:b9:f2:11:84:53:c2:66:0d:9d:71:72:
92:7a:67:df:30:ec:a0:10:85:ca:38:71:86:0c:89:ce:68:1e:
8c:e0:fd:50:b0:13:4d:83:a1:fc:0b:1f:66:ba:10:63:7f:85:
79:b9:62:5e:2d:85:62:8a:39:b8:57:af:66:66:3b:28:94:36:
d5:b5:48:c7:71:45:dd:e9:eb:1b:63:f3:c0:52:14:fd:82:01:
12:f1:89:58:cd:94:f0:a9:b0:c2:e0:60:13:7e:af:20:22:8c:
a6:d3:29:3a:6f:a8:15:1e:9c:df:fa:14:b8:9f:d6:74:42:14:
d9:e1:9a:07:e9:5c:5d:3b:d4:82:c8:69:1d:5a:4b:90:71:bd:
6c:e2:0c:9d:0d:bf:1a:c5:49:9a:68:dd:37:69:23:48:bb:67:
86:23:de:3c:e6:07:6f:ad:8a:86:0b:aa:f4:9b:34:a3:88:85:
1a:1c:d4:22:fb:bb:e6:48:fa:62:41:25:f1:98:87:bb:de:5e:
9b:df:4d:f1:31:c9:59:25:45:41:50:96:3a:63:08:84:9d:08:
59:15:9a:4f:af:74:f3:da:fc:73:a7:7f:16:12:45:ff:67:b9:
31:16:57:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:43:34 2026 by rpki-client