
$ rpki-client -vvf rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft
File: HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft (raw, json)
Hash identifier: s/iKPHXKHCT0VAhGIll6tMJhxFrV1LFdcG6atRuHGf0=
Subject key identifier: 72:38:D7:4D:34:11:27:9D:9E:5D:BD:3B:64:DA:87:7F:D6:A6:1E:2F
Authority key identifier: 1C:71:D6:3E:DA:EC:B1:0F:53:14:1E:8A:30:89:43:95:9A:7C:57:5A
Certificate issuer: /CN=A91145A9/serialNumber=1C71D63EDAECB10F53141E8A308943959A7C575A
Certificate serial: 02B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft
Manifest number: 02AA
Signing time: Mon 27 Jul 2026 02:52:03 +0000
Manifest this update: Mon 27 Jul 2026 02:52:03 +0000
Manifest next update: Mon 03 Aug 2026 02:52:03 +0000
Files and hashes: 1: HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl (hash: K7diojFFZ1i06Q9pXsW+c+42NIKOXkoYm51A35E45a0=)
2: 33A0049E98E311EDBDD55016C4F9AE02.roa (hash: HKqMxuCnXZUWQyUBbuwuWp132t+lLGFUZQke8Tou0tg=)
3: 34AB7E9098E311EDBDD55016C4F9AE02.roa (hash: MRMfTNKXALiUr+Ks/cwLuFR+d+i53M1YUPrYan/sCwQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl
rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 02:52:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 696 (0x2b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91145A9, serialNumber=1C71D63EDAECB10F53141E8A308943959A7C575A
Validity
Not Before: Jul 27 02:52:03 2026 GMT
Not After : Aug 3 02:52:03 2026 GMT
Subject: CN=6a66c7d3-d144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e7:d9:d3:95:77:19:ae:68:90:e5:46:7a:14:
72:fb:0f:8c:a9:c9:ac:13:0e:de:47:da:25:e9:05:
03:4e:e2:21:a6:e4:74:34:b2:e4:f0:2c:3d:1a:7a:
18:92:6a:9b:1e:af:d9:d3:83:cf:15:84:c8:35:ba:
c2:1f:d7:2c:84:7e:19:ca:43:a7:8a:47:fe:10:9d:
c9:c0:08:d3:b2:3a:dc:10:63:de:3c:f5:12:18:8e:
23:37:1d:6d:28:1b:97:e2:9d:e5:1a:f6:33:52:bc:
8c:b7:db:af:87:e4:0b:23:f4:41:08:fe:47:65:f4:
3e:c4:4e:fa:de:2b:ea:66:e1:89:16:56:f3:3b:4d:
60:58:85:5a:cd:ec:6f:91:d6:9b:4a:2e:c1:27:c3:
aa:f7:2f:f6:25:9d:28:85:9e:f4:d0:e7:81:69:b4:
31:74:0d:0b:f6:3e:a8:73:0a:ae:a7:00:e8:16:0e:
4f:5d:31:70:4d:59:ea:e9:48:8b:51:25:1e:64:5d:
e4:83:ed:98:db:08:25:bf:4f:1e:4b:6e:28:c5:4d:
82:1c:79:dc:dd:8d:f9:3a:19:04:6d:af:2d:8a:ac:
ea:4b:50:a8:82:25:a7:28:93:a5:98:c4:62:f8:0a:
48:8d:28:f0:3d:69:81:e9:82:d2:ad:85:37:4d:4c:
cb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:38:D7:4D:34:11:27:9D:9E:5D:BD:3B:64:DA:87:7F:D6:A6:1E:2F
X509v3 Authority Key Identifier:
keyid:1C:71:D6:3E:DA:EC:B1:0F:53:14:1E:8A:30:89:43:95:9A:7C:57:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:de:84:53:89:fd:21:5a:01:4b:d3:43:5e:ec:9f:86:99:a2:
39:48:0e:20:59:21:f1:1e:f1:e3:c7:71:36:16:21:74:ab:3c:
0c:f9:a3:ae:fb:62:99:ab:08:af:c5:bf:2e:54:e7:8b:f7:e5:
32:9f:79:ce:84:ba:8b:85:7e:93:de:e1:eb:f0:b4:82:74:94:
85:29:28:63:f5:79:15:2f:11:42:39:2b:ad:97:40:ff:63:cb:
f2:0e:87:0b:7e:97:dd:cc:a7:ce:62:2d:0e:8f:3a:36:cd:69:
13:b3:d8:65:f9:e0:4b:68:d4:bc:b4:2b:49:63:96:6e:51:13:
74:23:8c:28:ac:20:82:11:ef:48:69:33:76:5f:a5:c0:c5:6b:
fa:ea:f8:37:68:40:96:16:ee:2f:95:5a:4c:4f:93:40:b7:f5:
8b:50:dc:96:4c:ad:ad:7c:77:8f:b4:fe:0d:46:3a:c0:a4:84:
60:06:b5:0d:16:ad:2d:20:06:56:4f:01:62:be:f0:6a:16:2a:
42:a9:e1:d6:0b:0e:35:a5:5e:65:da:c7:f7:a3:74:25:37:7b:
99:cb:3a:f7:7c:93:90:50:8f:9a:a8:c9:b4:67:15:49:cf:85:
6e:30:5b:17:84:c6:00:9f:22:9c:25:0c:08:94:3e:25:c6:47:
1a:a7:81:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:43:41 2026 by rpki-client