
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft
File: hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft (raw, json)
Hash identifier: K7+s7lsC5DzQiDJKPJAp3J+Qz/SMHVm9sN/DJ+aS2S4=
Subject key identifier: F4:F8:BA:A2:3E:49:D6:CA:DA:7D:7B:DB:07:E1:50:90:FB:42:13:4F
Authority key identifier: 85:C5:67:25:91:03:D9:E2:29:2E:64:DB:FB:79:FD:39:B2:56:FD:E4
Certificate issuer: /CN=A9196DCA/serialNumber=85C567259103D9E2292E64DBFB79FD39B256FDE4
Certificate serial: F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcVnJZED2eIpLmTb-3n9ObJW_eQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft
Manifest number: F3
Signing time: Sun 19 Apr 2026 05:55:24 +0000
Manifest this update: Sun 19 Apr 2026 05:55:23 +0000
Manifest next update: Sun 26 Apr 2026 05:55:23 +0000
Files and hashes: 1: hcVnJZED2eIpLmTb-3n9ObJW_eQ.crl (hash: ZwL9jtV9564mwu9pNOmOI5sXJxbgPSGq4Wk8cQlaU7M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.crl
rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcVnJZED2eIpLmTb-3n9ObJW_eQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 243 (0xf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196DCA, serialNumber=85C567259103D9E2292E64DBFB79FD39B256FDE4
Validity
Not Before: Apr 19 05:55:23 2026 GMT
Not After : Apr 26 05:55:23 2026 GMT
Subject: CN=69e46e4c-9cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2c:5a:f5:c1:f9:26:f1:b1:09:b9:19:e2:20:
db:5d:dc:5b:de:50:92:2c:49:64:08:09:bf:6c:93:
1b:f0:0f:19:11:82:7f:e3:41:a8:3a:bc:44:03:1c:
3a:e2:8a:1b:e8:cd:35:7d:9e:bf:b1:cc:c0:51:74:
94:25:8c:eb:c0:16:41:59:6e:8e:dc:ea:e1:f6:70:
80:fa:71:11:c0:13:5d:b8:a6:3c:5e:e6:f2:40:93:
80:75:b5:6f:d6:7e:0a:b8:a2:75:23:0c:9b:ea:b5:
cd:d4:07:b5:ee:61:25:12:26:b7:e4:5a:23:07:42:
d8:b5:fc:65:23:44:bb:f1:6c:86:05:71:61:55:7e:
c5:bb:91:ce:d5:ba:4c:58:a0:df:d3:79:b0:42:76:
be:95:ff:48:d2:04:4d:74:d3:a0:fc:a6:2b:61:3f:
49:4d:34:a5:a2:3b:69:0c:2a:a1:bf:62:6a:b5:48:
fb:72:62:08:9f:60:bc:7d:fd:c2:ea:e8:b0:c5:28:
cc:36:e7:7d:db:e7:87:bf:e0:92:00:6d:76:d1:31:
ec:26:01:08:b0:af:62:97:22:64:e0:e5:43:05:af:
1d:0f:f9:45:87:c5:a4:5b:fe:31:5f:72:4c:c6:c3:
0a:21:40:77:9c:73:58:06:09:44:01:f6:e4:7b:50:
2a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F8:BA:A2:3E:49:D6:CA:DA:7D:7B:DB:07:E1:50:90:FB:42:13:4F
X509v3 Authority Key Identifier:
keyid:85:C5:67:25:91:03:D9:E2:29:2E:64:DB:FB:79:FD:39:B2:56:FD:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcVnJZED2eIpLmTb-3n9ObJW_eQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:d6:3b:b2:5c:2e:a3:03:b6:51:41:c3:b2:ca:4d:73:6d:ea:
44:15:c0:a7:dd:74:97:26:f5:b3:e5:57:a3:7f:2c:b9:a6:20:
12:80:b7:37:69:08:86:a7:68:aa:21:a1:b0:ef:4a:ff:a0:1d:
dd:d3:08:ac:d5:01:cd:58:3b:7d:6d:e3:05:5a:99:1e:b1:11:
63:f7:a5:04:d2:f6:39:c4:f0:5f:65:a9:b2:2c:6b:a0:bf:e9:
9b:1f:9b:ab:52:ba:18:e5:fa:bf:b5:4b:3b:64:db:9f:95:12:
33:41:37:61:c4:0f:8a:cc:49:f5:aa:a1:ad:a1:36:cf:28:56:
21:21:7c:1a:2e:a5:46:f2:79:50:37:80:28:cc:76:a8:fb:11:
0d:ad:76:55:6a:72:89:c5:a8:4c:d6:f8:7f:24:22:16:3b:8a:
aa:aa:8f:b5:12:76:71:9b:df:d7:d4:61:2b:9c:31:5d:e5:a4:
6c:28:fd:ff:43:0a:a5:8d:83:05:8a:32:3d:d5:38:6e:a5:13:
dc:24:aa:94:a5:54:8e:9f:ec:7e:58:e5:c3:a6:ef:ba:15:51:
cd:27:13:60:09:d3:e9:97:61:ff:36:f2:cb:ea:92:52:20:d8:
72:b0:c5:8f:0d:18:0d:d5:62:43:42:f1:01:4d:97:a1:7f:58:
ab:bf:3b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:17:24 2026 by rpki-client