
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft
File: fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft (raw, json)
Hash identifier: GG1atoSbnFYtBKvjWzhtDX/HffgmlTzKVh81f2zDVvw=
Subject key identifier: C7:0A:D3:AD:71:8C:01:2D:65:D2:C3:67:DE:0D:53:9D:D7:64:35:2A
Authority key identifier: 7C:72:8B:97:04:29:D4:70:09:79:78:A1:6E:76:7B:21:DC:6E:3B:1F
Certificate issuer: /CN=A914B610/serialNumber=7C728B970429D470097978A16E767B21DC6E3B1F
Certificate serial: 355E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft
Manifest number: 355D
Signing time: Tue 28 Jul 2026 15:16:09 +0000
Manifest this update: Tue 28 Jul 2026 15:16:09 +0000
Manifest next update: Tue 04 Aug 2026 15:16:09 +0000
Files and hashes: 1: fHKLlwQp1HAJeXihbnZ7IdxuOx8.crl (hash: Lwjv4GgbqpstAS02YjZMAxqCoEENdvQWNjfODGHyOI0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.crl
rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:16:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13662 (0x355e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B610, serialNumber=7C728B970429D470097978A16E767B21DC6E3B1F
Validity
Not Before: Jul 28 15:16:09 2026 GMT
Not After : Aug 4 15:16:09 2026 GMT
Subject: CN=6a68c7b9-ff22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8e:d0:7e:d5:e0:11:3d:2e:7a:e8:e3:16:fc:
6d:57:af:dc:61:39:72:ff:14:99:29:8c:a2:3e:e8:
3b:e4:2c:c4:a7:95:b0:0d:fc:5d:13:02:5d:68:6c:
a2:2d:be:50:05:5a:5f:ff:99:df:bf:04:4b:9a:db:
28:b6:82:72:5a:dc:f5:5a:37:87:32:26:19:bc:02:
a3:5b:b1:c3:ea:c8:81:e4:7f:8a:dd:28:7c:0b:71:
b4:8b:67:8b:04:78:db:ae:55:e2:e1:dd:5b:c7:f3:
cb:2f:99:08:e5:01:e9:b2:95:c6:03:00:ff:fb:00:
d8:e3:68:9f:2e:43:81:d6:00:b9:4d:e2:05:64:8e:
2d:cc:e2:30:3c:f1:89:14:b1:93:65:52:03:8c:c2:
87:1f:a4:6d:a4:5a:90:5c:f1:b6:97:af:05:4a:c4:
7e:a6:82:03:30:be:00:68:7a:bc:de:d4:0e:58:92:
d9:38:6e:a8:ca:15:f4:06:4e:0f:61:26:40:bd:e7:
dd:a6:b8:9f:fd:61:70:61:dd:57:10:af:18:5b:34:
5a:04:fb:c7:ed:13:44:90:3d:82:1e:e9:25:23:dc:
81:dd:4a:76:14:1f:87:ca:dd:88:f7:49:fa:91:d9:
6d:ef:f6:ae:fa:fb:ab:be:22:d3:bc:d7:5f:dd:b3:
0d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:0A:D3:AD:71:8C:01:2D:65:D2:C3:67:DE:0D:53:9D:D7:64:35:2A
X509v3 Authority Key Identifier:
keyid:7C:72:8B:97:04:29:D4:70:09:79:78:A1:6E:76:7B:21:DC:6E:3B:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:da:c4:f1:9e:0f:39:cb:a2:e5:91:bf:ac:d0:58:27:1d:4c:
ab:65:78:24:6b:75:08:12:88:73:44:bd:d8:22:5c:eb:11:6a:
6c:6f:fe:0b:27:3d:db:48:e9:e6:63:39:5b:1e:a0:ca:c6:2f:
e3:93:f4:fc:58:ed:6d:d5:96:ed:6f:40:07:91:2f:88:d1:58:
fa:b5:f5:93:4f:6f:35:21:a1:f3:d7:4a:76:ed:85:06:3b:79:
d4:06:78:99:6b:74:84:4e:d4:c7:74:8a:a8:00:8e:0b:5f:7b:
39:01:b1:e7:24:cc:78:11:5e:bd:5f:ca:93:3e:e8:52:e5:aa:
33:04:4e:d6:59:9b:9d:a3:ef:a0:61:58:de:23:1b:06:60:5b:
f1:0d:c1:89:0b:c5:15:69:ac:66:1e:42:e5:a0:c1:70:db:71:
d3:75:bc:a2:fd:d8:5f:e4:7f:2d:f2:0f:ea:06:42:24:5e:bf:
ff:93:50:3d:66:2a:d7:b3:44:00:41:20:f9:1d:08:a3:40:81:
e3:3b:6b:0f:2b:b1:13:16:b4:55:71:39:f6:c8:92:37:93:c3:
6f:7a:a4:2d:0d:b5:2b:52:a0:7e:fa:0a:70:eb:25:53:78:7b:
3b:8e:9a:e3:01:33:32:10:ba:55:3f:63:ed:e3:fc:48:07:10:
c8:d4:51:df
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEI2MTAxMTAvBgNVBAUTKDdDNzI4Qjk3MDQyOUQ0NzAwOTc5NzhBMTZFNzY3QjIx
REM2RTNCMUYwHhcNMjYwNzI4MTUxNjA5WhcNMjYwODA0MTUxNjA5WjAYMRYwFAYD
VQQDEw02YTY4YzdiOS1mZjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAj47QftXgET0ueujjFvxtV6/cYTly/xSZKYyiPug75CzEp5WwDfxdEwJdaGyi
Lb5QBVpf/5nfvwRLmtsotoJyWtz1WjeHMiYZvAKjW7HD6siB5H+K3Sh8C3G0i2eL
BHjbrlXi4d1bx/PLL5kI5QHpspXGAwD/+wDY42ifLkOB1gC5TeIFZI4tzOIwPPGJ
FLGTZVIDjMKHH6RtpFqQXPG2l68FSsR+poIDML4AaHq83tQOWJLZOG6oyhX0Bk4P
YSZAvefdprif/WFwYd1XEK8YWzRaBPvH7RNEkD2CHuklI9yB3Up2FB+Hyt2I90n6
kdlt7/au+vurviLTvNdf3bMNyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMcK061x
jAEtZdLDZ94NU53XZDUqMB8GA1UdIwQYMBaAFHxyi5cEKdRwCXl4oW52eyHcbjsf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjYxMC80MzkzRUFFMDFE
QTcxMUUyODQyRkRDQTAwOEIwMkNEMi9mSEtMbHdRcDFIQUplWGloYm5aN0lkeHVP
eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZIS0xsd1FwMUhBSmVYaWhiblo3SWR4dU94OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QjYxMC80MzkzRUFFMDFEQTcxMUUyODQyRkRDQTAwOEIwMkNEMi9mSEtMbHdRcDFI
QUplWGloYm5aN0lkeHVPeDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAENrE8Z4POcui5ZG/rNBYJx1Mq2V4JGt1CBKIc0S92CJc6xFqbG/+Cyc920jp
5mM5Wx6gysYv45P0/FjtbdWW7W9AB5EviNFY+rX1k09vNSGh89dKdu2FBjt51AZ4
mWt0hE7Ux3SKqACOC197OQGx5yTMeBFevV/Kkz7oUuWqMwRO1lmbnaPvoGFY3iMb
BmBb8Q3BiQvFFWmsZh5C5aDBcNtx03W8ov3YX+R/LfIP6gZCJF6//5NQPWYq17NE
AEEg+R0Io0CB4ztrDyuxExa0VXE59siSN5PDb3qkLQ21K1KgfvoKcOslU3h7O46a
4wEzMhC6VT9j7eP8SAcQyNRR3w==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:56:55 2026 by rpki-client