
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft
File: 4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft (raw, json)
Hash identifier: b7OQ6dfn/U7IDRJLP5FTRF2r46n9xqhEUmSsYxwJ+JA=
Subject key identifier: E0:04:C2:6B:01:B5:F8:FA:71:2A:C8:40:10:A6:DF:28:1D:CC:1B:91
Authority key identifier: E3:E1:CC:CF:83:D5:2C:B8:A3:C9:87:A8:11:E1:F8:07:F3:39:3E:7F
Certificate issuer: /CN=A911BDDF/serialNumber=E3E1CCCF83D52CB8A3C987A811E1F807F3393E7F
Certificate serial: 02C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft
Manifest number: 02B7
Signing time: Mon 27 Jul 2026 02:50:47 +0000
Manifest this update: Mon 27 Jul 2026 02:50:47 +0000
Manifest next update: Mon 03 Aug 2026 02:50:47 +0000
Files and hashes: 1: 4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl (hash: YgJKQ19fkjGfUAGSh6RGQaEP654qwnXWVAWJ47KDImE=)
2: E8F2B1C224E911F0B5C26715C4F9AE02.roa (hash: XvLu9Lco+z3v8UzXTRCenPQt8JmuU1Ozm34u8QKc+Iw=)
3: 13BC244C61A311F0A6E3910CC4F9AE02.roa (hash: L4XqfcnZ4gHSW4QTEz3ONJ/g1x9XTw6MU5/Gf30dDq8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl
rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 02:50:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 713 (0x2c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BDDF, serialNumber=E3E1CCCF83D52CB8A3C987A811E1F807F3393E7F
Validity
Not Before: Jul 27 02:50:47 2026 GMT
Not After : Aug 3 02:50:47 2026 GMT
Subject: CN=6a66c787-777d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5e:83:95:07:98:be:c4:08:10:93:53:a7:dd:
99:92:35:46:e0:97:56:13:a2:53:0c:3e:d5:e0:43:
68:c9:25:00:d6:79:5a:aa:43:52:32:15:8b:48:51:
68:f6:94:1a:f7:b9:3d:27:48:3f:0e:36:fc:5c:bd:
b2:68:d4:06:31:99:1b:d7:ae:2c:26:de:16:81:1a:
96:4f:bd:df:5e:b6:f0:e0:63:ce:c8:c3:b7:19:c4:
60:a5:96:6d:52:81:53:5f:c4:8b:c7:e4:6a:7d:d5:
27:ab:9b:b3:4e:68:dc:cf:b9:fc:2f:d0:76:ee:30:
a7:f1:33:90:89:9b:82:13:59:83:78:83:9e:85:22:
10:4f:94:ef:3d:9b:cc:af:b9:c9:89:5d:fb:f4:f8:
7b:16:b6:2b:9b:4c:4d:18:c8:12:ad:99:1d:97:08:
75:80:60:72:8d:e8:26:2b:74:ce:15:be:85:d0:6d:
2e:ef:e3:39:12:60:48:9d:84:cd:09:12:42:f7:db:
9f:c5:7c:b5:32:41:70:ef:d5:67:53:59:e7:f6:d7:
12:1b:e4:64:06:75:ac:a1:3e:64:7d:d8:c6:0e:e7:
0c:24:32:fc:97:19:1e:11:82:ff:ca:6b:35:3b:ee:
8c:4f:51:fa:ad:11:7b:ba:3d:0d:86:26:36:60:73:
bc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:04:C2:6B:01:B5:F8:FA:71:2A:C8:40:10:A6:DF:28:1D:CC:1B:91
X509v3 Authority Key Identifier:
keyid:E3:E1:CC:CF:83:D5:2C:B8:A3:C9:87:A8:11:E1:F8:07:F3:39:3E:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:80:7f:6b:6b:fe:29:7c:53:bd:ba:df:b3:3f:d3:a6:24:ea:
4a:d0:e0:81:eb:ab:fc:5a:61:fb:a6:09:9b:e5:40:05:37:b7:
50:b3:2d:82:49:f4:2b:47:6c:ac:0f:12:6e:5f:10:96:27:b9:
8c:39:8f:35:49:8e:da:07:b4:0c:fc:1a:ac:8c:a0:ce:ad:23:
de:02:c5:f8:3f:0e:e5:bc:5e:73:28:29:44:41:c5:2b:82:61:
ff:3d:10:90:88:c8:28:91:1a:8c:a9:e4:27:b2:67:1e:11:81:
e5:ab:2e:99:9d:17:bf:2d:50:e5:4a:08:b4:9e:6f:1a:97:e4:
61:f3:80:58:b9:3b:6a:13:35:f4:9b:95:71:ad:98:c7:8a:98:
29:82:9a:7f:13:48:90:2e:2a:5a:ab:1c:0f:7e:0a:27:c6:42:
c5:0a:ba:01:68:61:61:90:65:0c:af:e4:7c:77:83:55:05:b3:
30:e3:e4:1b:5d:b7:e3:5b:b4:0b:45:08:e4:c1:27:ae:79:2d:
fb:ce:b6:01:74:a0:df:2d:24:ce:51:8b:6c:42:91:9a:f2:96:
64:38:65:5d:87:51:c3:0a:6d:74:20:fc:01:ba:ed:db:42:0a:
49:b9:0c:44:a3:c5:b4:38:59:26:21:c0:33:47:99:24:59:ad:
09:d0:1a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:33:27 2026 by rpki-client