
$ rpki-client -vvf rpki.apnic.net/member_repository/A914AF32/9DEC07409E5011E89803D826C4F9AE02/hHBzG4maje6yn-pRuQ3BWNvaKvA.mft
File: hHBzG4maje6yn-pRuQ3BWNvaKvA.mft (raw, json)
Hash identifier: XoBF2dgDeoYXDBq2pvaHZs/Y7j32x8YX44A/0a81TZU=
Subject key identifier: B4:98:CA:65:2D:0F:0C:3F:BF:D8:DA:07:38:43:6D:90:21:6A:3B:CB
Authority key identifier: 84:70:73:1B:89:9A:8D:EE:B2:9F:EA:51:B9:0D:C1:58:DB:DA:2A:F0
Certificate issuer: /CN=A914AF32/serialNumber=8470731B899A8DEEB29FEA51B90DC158DBDA2AF0
Certificate serial: 146B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHBzG4maje6yn-pRuQ3BWNvaKvA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914AF32/9DEC07409E5011E89803D826C4F9AE02/hHBzG4maje6yn-pRuQ3BWNvaKvA.mft
Manifest number: 1454
Signing time: Tue 28 Jul 2026 16:58:41 +0000
Manifest this update: Tue 28 Jul 2026 16:58:40 +0000
Manifest next update: Tue 04 Aug 2026 16:58:40 +0000
Files and hashes: 1: hHBzG4maje6yn-pRuQ3BWNvaKvA.crl (hash: 8B3rJ6ytJdQlL58kFdbgbOQgyhGMEw+Th/5RuXlpLtg=)
2: 813A255423A611F09025FC11C4F9AE02.roa (hash: RaOIdSyJbLBmHHTBAcqvM2xNuH84JM4tWrC9RYmAhrM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914AF32/9DEC07409E5011E89803D826C4F9AE02/hHBzG4maje6yn-pRuQ3BWNvaKvA.crl
rsync://rpki.apnic.net/member_repository/A914AF32/9DEC07409E5011E89803D826C4F9AE02/hHBzG4maje6yn-pRuQ3BWNvaKvA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHBzG4maje6yn-pRuQ3BWNvaKvA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 16:58:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5227 (0x146b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914AF32, serialNumber=8470731B899A8DEEB29FEA51B90DC158DBDA2AF0
Validity
Not Before: Jul 28 16:58:40 2026 GMT
Not After : Aug 4 16:58:40 2026 GMT
Subject: CN=6a68dfc1-813c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7e:7e:04:36:c5:f3:61:cc:99:d9:bf:b8:6f:
9a:31:b8:e9:66:26:42:75:a9:76:75:c2:5d:bc:17:
2d:38:cf:c9:7a:77:b2:c9:f9:a9:4e:be:05:48:3e:
44:d2:db:ea:62:e1:70:91:af:7e:d4:8a:df:50:b3:
bf:9f:e9:b2:36:85:53:f6:d3:fd:61:8d:c0:35:2d:
b7:58:53:5b:ef:07:36:51:7a:43:29:94:60:6d:e4:
52:e4:ed:47:de:33:ff:2e:a2:6f:49:6a:e3:d0:8e:
e5:ef:24:3b:1e:80:bd:fc:5d:e4:7e:f9:94:86:59:
99:56:5f:9a:b8:fa:61:66:03:22:b5:c1:9e:7b:05:
4f:53:ea:64:f8:ca:b0:a5:9d:db:7f:51:43:c3:12:
8b:c6:da:5d:27:14:4c:89:01:f1:84:cf:e5:94:41:
5c:91:8f:6a:7c:6e:fc:4a:51:42:d0:86:a3:43:6f:
7d:e3:f7:52:e7:70:c9:d6:da:df:98:a9:b7:2e:5b:
72:c1:45:5e:62:99:45:13:83:a9:05:07:50:ad:96:
4c:50:dc:4c:7a:b2:c6:04:9c:fc:36:8c:12:82:9b:
83:93:f3:e7:fe:11:cd:e4:0a:5b:88:27:fa:5c:53:
0b:d5:ef:a0:75:1d:af:e7:81:f7:a0:47:fd:18:43:
e3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:98:CA:65:2D:0F:0C:3F:BF:D8:DA:07:38:43:6D:90:21:6A:3B:CB
X509v3 Authority Key Identifier:
keyid:84:70:73:1B:89:9A:8D:EE:B2:9F:EA:51:B9:0D:C1:58:DB:DA:2A:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914AF32/9DEC07409E5011E89803D826C4F9AE02/hHBzG4maje6yn-pRuQ3BWNvaKvA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHBzG4maje6yn-pRuQ3BWNvaKvA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914AF32/9DEC07409E5011E89803D826C4F9AE02/hHBzG4maje6yn-pRuQ3BWNvaKvA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:03:34:c6:a3:76:3c:78:38:0e:cf:4d:43:75:c8:ae:1d:1e:
2b:19:35:82:8e:b6:e5:f8:0e:52:83:6d:94:91:55:b8:46:0c:
dc:43:ee:65:a2:29:fb:56:c7:c2:72:46:af:6b:43:4a:02:f4:
20:15:ea:5b:da:d6:4d:8a:51:22:6e:47:3d:78:7e:bf:f8:08:
ea:df:ca:46:c5:ca:27:a9:60:19:be:29:e9:ac:40:17:cf:63:
1a:f5:7c:e0:98:48:6c:0c:02:02:ba:dc:b6:1c:2c:94:6d:d3:
2b:42:22:60:de:9c:73:5e:9a:d0:3a:11:e8:a3:b1:2e:bb:3d:
b8:8d:dc:ce:b8:85:6e:1f:a9:73:5a:b3:ba:37:6b:df:21:c2:
e7:8f:f5:58:82:b2:17:3c:4c:df:fb:64:b6:f0:4d:84:32:f6:
d8:76:56:a4:45:e8:de:27:53:7a:f5:78:e1:23:ff:0e:87:1b:
19:cd:9d:be:88:ef:27:2c:63:4b:32:ff:d4:b9:bd:3d:a8:cd:
29:6d:cc:f4:74:4b:2a:81:04:f3:91:3d:91:86:29:8e:76:38:
3c:4b:ed:3d:b1:03:9a:8a:09:db:ed:be:8e:d2:7b:36:a1:6e:
9a:50:38:1e:69:15:f5:3b:90:11:de:4d:41:54:e1:38:83:c5:
b0:61:7f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:30:33 2026 by rpki-client