
$ rpki-client -vvf rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft
File: htoZAOYVDL2c2BWsZ9xTpebTwCc.mft (raw, json)
Hash identifier: MrJtyM+vUDvYTGU3h+xBpmxJKc2Uac7FeFfuqiSGl7c=
Subject key identifier: 80:D3:08:96:C9:04:A9:12:3E:8E:6B:D8:07:16:DC:7D:F7:83:C4:50
Authority key identifier: 86:DA:19:00:E6:15:0C:BD:9C:D8:15:AC:67:DC:53:A5:E6:D3:C0:27
Certificate issuer: /CN=A911933B/serialNumber=86DA1900E6150CBD9CD815AC67DC53A5E6D3C027
Certificate serial: 0200
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htoZAOYVDL2c2BWsZ9xTpebTwCc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft
Manifest number: 01F7
Signing time: Mon 27 Jul 2026 04:56:06 +0000
Manifest this update: Mon 27 Jul 2026 04:56:05 +0000
Manifest next update: Mon 03 Aug 2026 04:56:05 +0000
Files and hashes: 1: htoZAOYVDL2c2BWsZ9xTpebTwCc.crl (hash: EiYWBtHhtIlrPNfu87rDnblXCFhTCdRc7WSSO5bquig=)
2: 385B3E3A42EB11F187C800F790833773.roa (hash: lsXYrcjPbnHgiNpDbl0Ybrr03F7tffMHJYTiyEAODzQ=)
3: F9EE01A842E211F1B650BCD08E833773.roa (hash: 2XaqgQvJvdCsnon/kkAwU+ckm99qA9tybA5kJKKFgfM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.crl
rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htoZAOYVDL2c2BWsZ9xTpebTwCc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:56:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 512 (0x200)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911933B, serialNumber=86DA1900E6150CBD9CD815AC67DC53A5E6D3C027
Validity
Not Before: Jul 27 04:56:05 2026 GMT
Not After : Aug 3 04:56:05 2026 GMT
Subject: CN=6a66e4e6-238a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1d:54:d5:84:3d:34:cb:fb:0c:35:c4:e4:b1:
49:71:c5:92:eb:0b:65:0c:26:18:e6:33:70:a2:78:
96:54:8b:4a:dc:05:70:6b:86:59:5e:bc:a2:43:32:
13:f3:4b:40:13:e8:4a:d9:0e:35:3f:1c:1e:87:93:
a0:14:d2:00:2b:e6:01:57:2a:6c:66:b0:c7:54:e8:
67:d3:00:16:ae:24:c8:f1:79:c9:5f:e3:b3:38:86:
a1:32:5a:bc:d2:3e:4d:b8:62:32:50:d4:e8:d9:b6:
0d:ae:4e:f8:64:38:f9:86:8f:47:17:f5:70:12:11:
9a:6c:1d:32:42:b6:15:64:a8:e1:89:72:2f:38:e1:
2b:b9:80:22:26:96:35:bd:94:21:ee:17:63:97:10:
06:e7:46:f8:4a:a5:60:47:f5:5a:ed:d5:9b:25:ad:
2d:8d:f4:ad:2f:75:61:fb:b7:23:bb:a1:a0:27:b4:
25:1f:e1:7d:b2:67:bd:d3:99:05:4c:75:1d:3f:e4:
5a:89:27:9a:f9:84:81:8a:27:c8:44:e0:e9:a1:56:
90:26:92:5f:5f:32:59:7b:d3:30:bb:eb:d0:b5:f6:
2b:23:d4:7c:6d:83:93:5d:e0:78:22:39:6e:9b:b4:
b8:8a:da:a8:81:31:d3:35:b0:a8:05:2f:a6:f9:50:
4b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D3:08:96:C9:04:A9:12:3E:8E:6B:D8:07:16:DC:7D:F7:83:C4:50
X509v3 Authority Key Identifier:
keyid:86:DA:19:00:E6:15:0C:BD:9C:D8:15:AC:67:DC:53:A5:E6:D3:C0:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htoZAOYVDL2c2BWsZ9xTpebTwCc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:6c:f5:5e:ff:4c:7b:04:c5:4f:d1:92:42:f3:4a:ce:28:2b:
4c:70:8b:55:47:1a:81:1c:94:43:6d:de:e6:d7:9b:ae:da:83:
fd:e9:ab:c7:97:5a:36:ac:a1:51:67:48:2d:e1:4f:82:53:dc:
58:14:0d:99:3f:45:04:95:94:b2:8d:35:25:6d:73:34:fb:0f:
0b:e9:2b:76:88:f0:82:e8:05:2e:08:92:93:fb:4f:07:1e:5a:
32:01:6b:22:9e:1c:fa:56:78:ff:a1:28:37:b3:b7:bb:88:03:
65:12:16:f1:3d:9e:6d:9a:2e:65:5c:7c:e9:ab:ae:e4:dc:6a:
c6:78:e3:02:0b:55:8a:a9:67:60:2d:9e:85:69:eb:b1:24:f8:
f4:6d:73:4f:5c:94:da:35:08:52:a6:10:2e:94:12:64:c9:04:
5a:86:36:51:b7:b3:eb:2f:55:e5:aa:be:47:fa:8b:c1:fc:ae:
3e:7b:1e:15:99:cc:b1:88:55:fa:c6:57:fc:99:df:06:ff:9d:
1d:34:0e:5a:fd:4c:9d:49:bd:50:64:d7:e0:4f:65:1c:ce:46:
8e:81:6f:66:5d:0f:02:ff:7a:b0:d8:06:51:70:f7:d0:74:72:
3b:76:e2:43:1c:f9:ba:7f:97:cb:b5:cf:bd:1e:90:82:14:25:
4c:5d:e4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:28:54 2026 by rpki-client