
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DC94/9C5C8E2C6AB711F188E872EF6247A888/MHhieRqQd5CGxXf5OTGDidaLcag.mft
File: MHhieRqQd5CGxXf5OTGDidaLcag.mft (raw, json)
Hash identifier: wvaFOIX/Ii2OUb+ouzZIY7LmXQ2Fp3OEQYw2y3J6K0U=
Subject key identifier: 43:77:6D:51:EF:48:EB:C4:8D:AC:53:C4:90:FF:66:49:AD:75:78:88
Authority key identifier: 30:78:62:79:1A:90:77:90:86:C5:77:F9:39:31:83:89:D6:8B:71:A8
Certificate issuer: /CN=A912DC94/serialNumber=307862791A90779086C577F939318389D68B71A8
Certificate serial: 16
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHhieRqQd5CGxXf5OTGDidaLcag.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DC94/9C5C8E2C6AB711F188E872EF6247A888/MHhieRqQd5CGxXf5OTGDidaLcag.mft
Manifest number: 15
Signing time: Mon 27 Jul 2026 11:25:16 +0000
Manifest this update: Mon 27 Jul 2026 11:25:15 +0000
Manifest next update: Mon 03 Aug 2026 11:25:15 +0000
Files and hashes: 1: MHhieRqQd5CGxXf5OTGDidaLcag.crl (hash: ql+KRzUprbcMzXCc+IOckXn6B5dsglbT6TKmAPuuwd8=)
2: 4F16B51A6AB811F18EBFB70E6347A888.roa (hash: g04zLld4UYO3F+kCZ6KaWBxSqXKNmClRuSZYSKekq78=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912DC94/9C5C8E2C6AB711F188E872EF6247A888/MHhieRqQd5CGxXf5OTGDidaLcag.crl
rsync://rpki.apnic.net/member_repository/A912DC94/9C5C8E2C6AB711F188E872EF6247A888/MHhieRqQd5CGxXf5OTGDidaLcag.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHhieRqQd5CGxXf5OTGDidaLcag.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 11:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22 (0x16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DC94, serialNumber=307862791A90779086C577F939318389D68B71A8
Validity
Not Before: Jul 27 11:25:15 2026 GMT
Not After : Aug 3 11:25:15 2026 GMT
Subject: CN=6a67401b-d1a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d4:77:23:75:09:38:f2:d9:0c:03:10:6f:c0:
43:0e:be:ab:20:13:7b:0b:d6:f3:e5:68:14:4d:e4:
1d:f3:ff:63:fa:d0:05:15:76:02:85:a3:69:98:af:
4d:a5:93:c7:6c:6d:5a:fc:1d:94:ed:31:36:0f:3c:
33:dd:0e:c1:d5:22:c3:2c:05:bf:ea:a7:c4:52:a1:
f3:90:d1:4f:ec:78:ed:1a:f9:61:55:07:4b:e0:2b:
08:81:bc:58:51:3e:3d:40:b2:c6:c1:0d:27:6c:fb:
27:f2:9e:98:46:51:63:22:20:dd:ec:73:1b:11:05:
32:23:1b:b0:47:d3:85:44:09:56:59:c5:10:b5:ea:
30:66:41:87:61:27:c2:dc:ba:f2:68:fb:a0:2b:79:
99:f5:d6:a9:63:72:e8:15:42:ea:b1:6f:8f:32:0e:
71:86:45:13:25:58:a8:0b:3f:73:5f:82:42:72:92:
3c:29:09:f7:5c:13:d6:bb:36:21:56:41:a2:db:ef:
59:d1:50:48:9e:7e:6b:8f:7e:f7:26:7d:aa:64:21:
3f:73:38:bd:f0:57:25:7a:67:64:84:fb:57:a2:4e:
d6:61:33:6d:9e:4d:e4:fe:05:ac:45:09:b4:0e:b1:
f0:33:ee:eb:ea:83:08:3d:80:84:de:b5:a5:3e:9b:
8b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:77:6D:51:EF:48:EB:C4:8D:AC:53:C4:90:FF:66:49:AD:75:78:88
X509v3 Authority Key Identifier:
keyid:30:78:62:79:1A:90:77:90:86:C5:77:F9:39:31:83:89:D6:8B:71:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DC94/9C5C8E2C6AB711F188E872EF6247A888/MHhieRqQd5CGxXf5OTGDidaLcag.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHhieRqQd5CGxXf5OTGDidaLcag.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DC94/9C5C8E2C6AB711F188E872EF6247A888/MHhieRqQd5CGxXf5OTGDidaLcag.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:7a:bc:1b:73:86:8e:0b:88:3a:8d:af:b8:d0:92:cf:13:3c:
b0:7c:a6:ea:dc:27:80:4d:bd:1b:1b:6d:db:17:dc:04:c7:9c:
3a:33:89:bf:a6:fa:a4:b7:5a:eb:a4:eb:55:f0:1a:04:b2:13:
e5:f7:f1:58:a8:6d:28:28:0d:7c:84:7f:29:8c:7c:ce:95:1e:
cf:31:1e:19:89:7e:67:25:8b:aa:fa:dd:31:f3:16:5d:f3:c3:
4f:f0:f9:25:c6:77:08:5f:44:94:c6:28:c3:55:62:f2:89:73:
27:73:ea:9b:be:aa:6c:26:43:a2:50:82:e3:2b:9a:47:8b:45:
1c:7d:1c:82:14:f7:36:52:63:5b:48:2a:e1:fc:a9:ce:f8:51:
8a:a5:2f:d0:1c:f5:1b:1f:ac:1c:90:43:80:2f:98:1a:c7:84:
07:f3:c5:e7:ee:fa:0f:19:a5:38:40:b2:4b:06:f9:63:68:1f:
d0:45:d5:b3:30:4b:1c:a7:4d:6b:47:51:d6:34:3c:7f:cb:2f:
dc:b7:1e:6d:97:d8:09:81:75:a9:73:5b:d8:f2:1d:a2:68:9a:
25:87:2c:9e:28:e5:14:36:f1:e1:fd:b8:f1:81:66:4e:76:42:
df:e2:d6:ec:a9:c4:f4:31:a3:5a:bb:a4:8a:34:fd:9f:b3:1c:
e5:65:10:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:04:29 2026 by rpki-client