
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/HdG4aHiGkkxGExFgUO6Q6dSUJp4.mft
File: HdG4aHiGkkxGExFgUO6Q6dSUJp4.mft (raw, json)
Hash identifier: RJ3RMWX778Ty6bOvIKmr216xycK4BAeN7XjlN8imVMA=
Subject key identifier: 89:BB:2B:5F:76:C4:78:28:DA:40:4E:A3:E0:46:89:23:A7:FE:64:52
Authority key identifier: 1D:D1:B8:68:78:86:92:4C:46:13:11:60:50:EE:90:E9:D4:94:26:9E
Certificate issuer: /CN=A911D848/serialNumber=1DD1B8687886924C4613116050EE90E9D494269E
Certificate serial: 0166
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdG4aHiGkkxGExFgUO6Q6dSUJp4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/HdG4aHiGkkxGExFgUO6Q6dSUJp4.mft
Manifest number: 0157
Signing time: Mon 27 Jul 2026 07:15:07 +0000
Manifest this update: Mon 27 Jul 2026 07:15:07 +0000
Manifest next update: Mon 03 Aug 2026 07:15:07 +0000
Files and hashes: 1: HdG4aHiGkkxGExFgUO6Q6dSUJp4.crl (hash: UKehZeZ6p3/k+c22YPpgeqY/75Kg6YV4ecnZ8F7Rigc=)
2: F0C8DB1CA54E11EF8592FD66C4F9AE02.roa (hash: W9u5qlB4WlP9CIfe+lgCw0P7bcpuJCWbMFYa3TvAgqM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/HdG4aHiGkkxGExFgUO6Q6dSUJp4.crl
rsync://rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/HdG4aHiGkkxGExFgUO6Q6dSUJp4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdG4aHiGkkxGExFgUO6Q6dSUJp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 07:15:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 358 (0x166)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D848, serialNumber=1DD1B8687886924C4613116050EE90E9D494269E
Validity
Not Before: Jul 27 07:15:07 2026 GMT
Not After : Aug 3 07:15:07 2026 GMT
Subject: CN=6a67057b-99dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ba:1e:fd:24:f4:e6:ea:6e:d8:79:c5:72:2f:
6e:14:31:cf:fa:92:0a:bb:bf:19:01:3d:78:26:6d:
d2:47:3a:64:7d:f7:ed:17:e0:66:11:47:76:6d:a1:
8f:fe:4c:63:f9:c1:48:de:6c:01:3f:c2:88:91:d7:
15:c0:f6:bd:ea:7e:9a:70:aa:82:62:cb:7e:d9:75:
fd:b0:b0:2e:a6:2e:8f:a0:cb:aa:64:5d:43:e2:0a:
ba:f1:34:ba:59:b6:70:ac:77:39:f5:02:b4:ed:94:
04:e1:68:b6:63:69:9e:80:dc:a8:5a:60:b1:1b:94:
a2:3e:3f:cd:c0:39:a6:2e:2a:2b:36:4c:0f:c6:14:
7e:70:79:7d:84:61:f8:61:a2:73:70:eb:fc:89:56:
a2:f7:54:d4:6b:23:b9:7f:36:3f:13:4d:a8:51:c2:
e2:cb:50:e5:a0:ff:18:fd:6f:b9:9b:c5:3e:d7:1f:
0c:79:0c:50:7e:2f:a5:67:d8:e0:86:f7:3a:3c:b2:
67:43:e3:35:82:e5:18:09:fc:63:b1:82:32:61:6d:
e4:71:5c:75:4a:1d:6a:3e:45:e3:ee:3d:3c:97:5b:
a7:23:7c:b7:90:dd:2e:c3:4b:79:3b:7a:21:f8:ad:
1f:df:ee:2c:19:70:af:9a:f6:62:a7:af:33:5a:6b:
a4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:BB:2B:5F:76:C4:78:28:DA:40:4E:A3:E0:46:89:23:A7:FE:64:52
X509v3 Authority Key Identifier:
keyid:1D:D1:B8:68:78:86:92:4C:46:13:11:60:50:EE:90:E9:D4:94:26:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/HdG4aHiGkkxGExFgUO6Q6dSUJp4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdG4aHiGkkxGExFgUO6Q6dSUJp4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/HdG4aHiGkkxGExFgUO6Q6dSUJp4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:0a:13:9c:6b:42:7d:84:07:ef:92:ce:9d:cc:ca:78:81:fb:
bf:7e:4f:b3:2f:a9:29:78:20:4c:c6:d8:ea:1a:86:65:a7:49:
10:1e:1a:56:bf:8b:8c:ca:4e:7d:9c:22:6d:b0:16:0d:bd:1f:
1a:ac:12:c0:b2:18:0e:94:49:65:f6:3c:2e:7c:18:98:f8:5e:
27:92:3b:54:83:de:72:49:cf:7e:b3:ea:c3:25:34:37:8b:21:
c5:6a:b8:e5:23:13:22:8b:f7:1d:60:ea:0a:ca:05:72:70:17:
d7:47:b9:ff:e9:1a:a1:48:6a:e5:b8:f5:d3:02:77:db:a3:c4:
39:0b:be:88:94:e6:c6:11:d8:cc:73:86:36:75:1f:1c:f7:8a:
ca:90:a8:d8:a5:10:70:18:41:e2:11:20:38:26:2c:74:ff:c6:
cf:25:ad:a5:c6:fc:88:d7:a0:a1:f4:80:11:ce:f5:bd:99:10:
f5:21:8a:3a:9f:dd:ec:4a:10:ea:3d:3d:1e:ba:3f:19:b7:47:
e4:38:cf:23:60:af:b7:4d:78:9d:72:2c:db:29:30:76:e1:80:
55:1e:e8:2c:2f:5f:91:3a:1a:2a:61:cb:b5:65:0a:9c:34:e7:
c3:15:bf:1e:55:54:54:f6:b3:6f:2f:2e:6c:21:c6:99:76:db:
1c:1b:f2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:48:40 2026 by rpki-client