
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft
File: H5ogKJzpMW5ls9tyToxzYGyPhks.mft (raw, json)
Hash identifier: I92hWPGsAZrDfLtgO0e56N6ttK6F8IK9b6HiaCVr7nY=
Subject key identifier: A5:CB:32:D8:EB:B3:17:0A:BE:95:08:7B:CD:63:9B:23:B6:DF:C4:08
Authority key identifier: 1F:9A:20:28:9C:E9:31:6E:65:B3:DB:72:4E:8C:73:60:6C:8F:86:4B
Certificate issuer: /CN=A914BF33/serialNumber=1F9A20289CE9316E65B3DB724E8C73606C8F864B
Certificate serial: 0D21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft
Manifest number: 0D07
Signing time: Tue 28 Jul 2026 18:30:33 +0000
Manifest this update: Tue 28 Jul 2026 18:30:33 +0000
Manifest next update: Tue 04 Aug 2026 18:30:33 +0000
Files and hashes: 1: H5ogKJzpMW5ls9tyToxzYGyPhks.crl (hash: ze+BwtciUrpApE+hYYDivHHj3ttnR2CETWczOGhEJy4=)
2: 172E487A416911ECB6B11742C4F9AE02.roa (hash: lJfLPhd1kAAzDWL/Ne5AiMPNOkxSubYVAGKuzG/T5pk=)
3: 67827BDC0B8511EA97C80D52C4F9AE02.roa (hash: 7CjBAuah6/o6TO56EaGyhTraMGUdKeiH/EG6F7J9nYY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.crl
rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 18:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3361 (0xd21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BF33, serialNumber=1F9A20289CE9316E65B3DB724E8C73606C8F864B
Validity
Not Before: Jul 28 18:30:33 2026 GMT
Not After : Aug 4 18:30:33 2026 GMT
Subject: CN=6a68f549-a992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2e:8a:88:bb:16:22:33:98:0d:77:5f:b0:73:
ff:d8:50:60:89:a8:8d:fa:6b:b0:a5:67:57:fd:8a:
4c:ee:04:3d:a4:a1:4d:6e:55:ce:0f:ce:38:20:ad:
a1:33:a3:11:91:ec:32:f8:49:ca:1e:c0:22:35:bb:
69:2a:3d:6b:85:f8:1c:ad:9f:80:08:a2:57:0f:b8:
2d:20:f7:41:f3:68:f9:ca:2d:60:45:4a:c2:6f:90:
1b:71:04:f5:b4:d9:ad:91:66:d7:fa:eb:6e:1c:3f:
83:9b:79:84:65:dc:51:75:d3:e1:91:f1:19:35:63:
1e:b2:33:2e:5a:c6:32:bf:0c:b4:51:aa:45:0f:37:
84:ba:59:6e:bc:8c:d6:61:1f:17:ea:1a:e4:da:5f:
23:7c:b3:08:c3:1a:2e:b3:91:a0:8c:87:81:1c:b7:
95:14:d0:82:ec:94:c2:a4:53:74:8a:af:75:c3:63:
82:09:c4:18:20:f3:04:38:f3:a9:66:7a:10:ce:4e:
15:dd:f4:8c:42:df:f9:39:73:15:61:2f:8e:3f:a7:
d1:05:2a:8e:3e:bb:48:96:ad:c8:0d:b6:0c:b6:aa:
01:d7:9d:62:44:38:13:ed:5a:af:4b:f6:01:c5:21:
0f:0b:fa:73:22:29:8a:01:4b:7a:65:76:22:76:0d:
27:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CB:32:D8:EB:B3:17:0A:BE:95:08:7B:CD:63:9B:23:B6:DF:C4:08
X509v3 Authority Key Identifier:
keyid:1F:9A:20:28:9C:E9:31:6E:65:B3:DB:72:4E:8C:73:60:6C:8F:86:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:26:f1:81:ec:f9:73:77:94:81:e4:ee:01:4c:f7:68:6b:cc:
b3:cb:7e:72:b9:fe:c6:97:17:94:a4:58:20:92:7b:41:25:59:
00:07:a2:94:8c:92:69:6b:f1:b6:aa:13:d9:99:f4:32:75:73:
31:fc:a0:17:4f:c1:fc:6c:01:19:65:8c:a1:70:83:30:17:b9:
d4:ed:e1:f9:30:07:46:87:bc:53:d1:8e:0c:5a:08:9f:27:90:
84:76:7d:2d:ca:a5:4d:3b:9f:aa:57:3c:77:86:99:53:a8:05:
01:08:72:5d:d9:04:e6:3c:ad:c6:c5:e4:72:2c:63:21:35:d2:
bf:1d:b0:a0:d5:a1:cb:91:59:c8:ab:c1:cd:70:eb:43:7c:92:
38:33:4c:df:0e:01:19:d7:8b:f2:07:35:73:cb:4d:73:1c:2c:
ec:b0:43:cb:2d:cb:db:8b:bd:ad:71:d3:3f:81:04:0c:cc:84:
27:d6:6e:1f:94:bc:77:0f:59:64:af:b8:3b:7d:3d:ab:74:86:
73:db:fc:fa:ea:6c:3d:ab:a3:4a:dd:f8:ca:a1:2c:8e:ef:41:
30:37:ec:50:ad:2a:78:a0:f4:9d:82:82:02:74:cf:0a:09:64:
4d:0d:97:10:61:d9:6f:2f:b5:4a:b1:05:01:85:a5:2b:e2:6c:
11:a8:2e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:54:38 2026 by rpki-client