
$ rpki-client -vvf rpki.apnic.net/member_repository/A914D9C3/45CC82CC806911EF82C9773CC4F9AE02/HlwQfv0DzxPSFKOaaizo3a0wRw4.mft
File: HlwQfv0DzxPSFKOaaizo3a0wRw4.mft (raw, json)
Hash identifier: IxfBx0BEOPyr3p3kEgUG23VxlLLgLx2B8dg9RFX1W1Y=
Subject key identifier: ED:01:1D:05:77:3A:A7:60:E3:DB:DA:44:60:EC:DF:86:20:38:A9:13
Authority key identifier: 1E:5C:10:7E:FD:03:CF:13:D2:14:A3:9A:6A:2C:E8:DD:AD:30:47:0E
Certificate issuer: /CN=A914D9C3/serialNumber=1E5C107EFD03CF13D214A39A6A2CE8DDAD30470E
Certificate serial: 015D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlwQfv0DzxPSFKOaaizo3a0wRw4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D9C3/45CC82CC806911EF82C9773CC4F9AE02/HlwQfv0DzxPSFKOaaizo3a0wRw4.mft
Manifest number: 0158
Signing time: Mon 27 Jul 2026 06:59:23 +0000
Manifest this update: Mon 27 Jul 2026 06:59:23 +0000
Manifest next update: Mon 03 Aug 2026 06:59:23 +0000
Files and hashes: 1: HlwQfv0DzxPSFKOaaizo3a0wRw4.crl (hash: jT5HaluxR4Yo8/INiowW3uxtaVQ9E0ReAULi2UkJyao=)
2: F7B3707C806911EF8C30A03DC4F9AE02.roa (hash: aiqE7GBN+l3YOlzTvalxpxvHOLBHG0Z/5JCvpwlar2o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914D9C3/45CC82CC806911EF82C9773CC4F9AE02/HlwQfv0DzxPSFKOaaizo3a0wRw4.crl
rsync://rpki.apnic.net/member_repository/A914D9C3/45CC82CC806911EF82C9773CC4F9AE02/HlwQfv0DzxPSFKOaaizo3a0wRw4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlwQfv0DzxPSFKOaaizo3a0wRw4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 06:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 349 (0x15d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D9C3, serialNumber=1E5C107EFD03CF13D214A39A6A2CE8DDAD30470E
Validity
Not Before: Jul 27 06:59:23 2026 GMT
Not After : Aug 3 06:59:23 2026 GMT
Subject: CN=6a6701cb-f080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2a:d3:1d:0a:35:72:05:90:9d:9e:47:9b:38:
c3:dc:82:2b:8a:45:5f:97:cf:75:b6:01:47:22:ef:
e2:f9:e6:9b:af:9f:c0:d9:8c:30:0c:ba:56:44:aa:
b8:10:59:94:e0:4d:48:24:57:e5:fb:cb:22:97:cc:
74:45:4b:6a:e7:93:2a:cc:be:7e:60:8b:6b:66:ff:
3f:d2:c7:2d:9e:9d:b5:fc:4b:a5:7f:7b:d0:5d:06:
8c:8c:7b:07:a7:f3:1c:a3:e2:f2:1d:05:1e:2d:d8:
e6:6d:3f:50:70:6d:c6:84:f6:8f:93:82:f7:97:96:
d2:85:29:c7:60:ee:75:8c:64:bf:53:da:43:72:88:
a8:ba:84:6d:e7:0e:d0:bd:55:46:de:07:a8:7d:02:
67:59:1d:35:16:41:d4:2b:06:76:0c:d1:44:52:e9:
2c:eb:05:36:53:7d:f4:95:ab:f9:06:d0:17:f6:30:
d6:c3:fb:e3:47:f1:50:57:40:78:8a:b7:1c:19:7c:
96:bb:a2:f1:71:a1:51:9b:fc:fc:ae:e6:cc:4f:c4:
bc:03:54:97:51:8c:34:b5:27:89:a7:92:a3:10:c7:
ef:4a:92:e1:2b:58:6b:6c:b1:11:18:c5:01:c9:42:
c0:fc:38:9d:a7:c5:b2:80:f1:7b:b7:36:63:b2:99:
be:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:01:1D:05:77:3A:A7:60:E3:DB:DA:44:60:EC:DF:86:20:38:A9:13
X509v3 Authority Key Identifier:
keyid:1E:5C:10:7E:FD:03:CF:13:D2:14:A3:9A:6A:2C:E8:DD:AD:30:47:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D9C3/45CC82CC806911EF82C9773CC4F9AE02/HlwQfv0DzxPSFKOaaizo3a0wRw4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlwQfv0DzxPSFKOaaizo3a0wRw4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D9C3/45CC82CC806911EF82C9773CC4F9AE02/HlwQfv0DzxPSFKOaaizo3a0wRw4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:70:60:16:4d:71:63:1a:a6:ee:b5:a4:fc:e0:37:53:fb:02:
15:43:db:0b:f3:f5:39:44:f7:59:b4:7b:b3:0e:fc:94:f6:37:
d2:4f:7d:91:ea:2c:f8:08:7b:b4:3a:b0:76:3c:95:9e:d9:52:
90:f2:e0:a5:8c:f8:e8:49:6f:3f:48:e5:1f:ae:f8:24:9c:1c:
2e:d7:9b:38:75:2e:ce:0c:b7:d9:3f:92:eb:19:7e:b8:45:cf:
97:9c:2b:36:41:e6:54:41:9a:87:ea:af:90:7e:ab:5f:a5:0b:
2b:15:20:64:ec:99:55:7c:2e:19:c0:8e:d6:fc:1f:62:d7:5c:
93:48:0e:8b:73:16:32:5b:f7:0c:36:e7:73:02:f5:f0:65:e1:
e5:e5:63:33:4a:a4:35:ee:0b:96:30:6d:7c:77:1e:b2:b6:e6:
a7:48:2e:9e:f8:e7:88:38:bc:25:72:51:60:12:d8:27:bd:6c:
37:a2:d6:f0:79:43:c1:15:8d:c7:76:e1:a8:12:ff:be:67:f2:
3c:9f:88:a8:4b:80:3f:d2:27:ee:31:72:2c:99:9f:cf:ae:35:
b7:10:fa:5a:ae:de:3b:ef:66:b9:60:b6:0c:41:1c:86:59:0d:
99:0c:f5:52:f7:e1:74:a3:61:7a:67:e2:5b:1c:fe:71:6a:d2:
c2:18:e8:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:46:29 2026 by rpki-client