
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft
File: h57Jr836J6POe11DeHoviQOFWG4.mft (raw, json)
Hash identifier: 1gpB9XVWSg1iTHN3ED84utJLUU2NvAoVI+QDtI/eeAE=
Subject key identifier: 5B:15:0D:83:00:6B:4B:4F:FD:46:27:75:0B:2D:F0:96:81:0A:53:EB
Authority key identifier: 87:9E:C9:AF:CD:FA:27:A3:CE:7B:5D:43:78:7A:2F:89:03:85:58:6E
Certificate issuer: /CN=A914E556/serialNumber=879EC9AFCDFA27A3CE7B5D43787A2F890385586E
Certificate serial: 0878
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h57Jr836J6POe11DeHoviQOFWG4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft
Manifest number: 086E
Signing time: Tue 28 Jul 2026 21:13:30 +0000
Manifest this update: Tue 28 Jul 2026 21:13:29 +0000
Manifest next update: Tue 04 Aug 2026 21:13:29 +0000
Files and hashes: 1: h57Jr836J6POe11DeHoviQOFWG4.crl (hash: y8fVK+OusF6nLEh7BQrdnGgSJ3lD+nYe9QYMPDev1G8=)
2: 375F7DAA0C3911EB828BDC25C4F9AE02.roa (hash: sOGIE1Y4pAVns9lfWvpaPD3KRpb6ovE8rozjjlTX5nw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.crl
rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h57Jr836J6POe11DeHoviQOFWG4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 21:13:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2168 (0x878)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E556, serialNumber=879EC9AFCDFA27A3CE7B5D43787A2F890385586E
Validity
Not Before: Jul 28 21:13:29 2026 GMT
Not After : Aug 4 21:13:29 2026 GMT
Subject: CN=6a691b7a-782a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2c:9c:06:18:94:6e:dd:0d:51:62:16:58:f4:
c7:d4:f8:42:fc:a8:1f:92:1b:35:91:db:98:9b:d0:
92:95:c5:07:9e:a0:55:d9:d6:d9:aa:06:d2:8f:e1:
d0:af:e2:f1:e7:ea:8d:80:6f:fc:99:93:fb:72:5f:
42:29:7f:bd:8b:ca:9d:dd:77:1b:47:da:ca:ff:17:
47:34:62:a3:f3:09:28:41:95:28:99:91:e7:71:f2:
84:04:da:ac:65:84:f9:ed:56:e3:3b:8d:af:d6:7f:
81:d0:f5:a9:32:ec:93:9e:bc:2b:7e:6a:d7:16:a1:
c5:2c:35:59:b7:80:6a:03:cf:07:20:5f:5b:ab:f5:
d1:10:26:3e:f8:f4:0d:dd:9b:f6:93:c7:9b:76:91:
62:6d:5e:30:b8:00:5f:b3:af:5f:71:94:16:57:d5:
c5:af:8f:a5:9c:8e:7e:2d:7e:ad:70:1b:60:87:20:
5e:a8:aa:34:52:f1:1c:47:34:9e:28:e5:e4:83:dd:
e4:95:a4:8b:9b:c6:fb:1b:38:af:b0:86:49:04:42:
e6:af:77:0d:85:0a:99:78:e5:f8:17:32:e0:48:98:
00:b9:27:18:59:c8:a8:36:5b:cb:df:b8:7f:9a:9a:
8d:d6:10:58:0d:e4:d4:5a:0d:a5:78:8a:68:fd:09:
ed:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:15:0D:83:00:6B:4B:4F:FD:46:27:75:0B:2D:F0:96:81:0A:53:EB
X509v3 Authority Key Identifier:
keyid:87:9E:C9:AF:CD:FA:27:A3:CE:7B:5D:43:78:7A:2F:89:03:85:58:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h57Jr836J6POe11DeHoviQOFWG4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:4c:41:59:2b:20:72:91:e3:c8:73:f2:1d:1a:62:83:55:58:
37:ae:65:50:8f:8d:1b:96:cb:a0:05:67:e5:2d:ef:0a:ca:a9:
ab:90:49:8f:66:8b:ce:b2:5b:28:23:18:b2:42:58:b2:c1:c8:
a3:cb:1b:b1:4a:1a:43:b7:31:bf:c6:f9:cb:9c:aa:2e:c1:60:
38:87:09:94:35:2c:a0:ef:56:18:31:f9:4c:f7:42:60:bd:c0:
f9:99:59:0d:33:36:d7:84:8d:e6:b3:f9:1a:b7:90:a1:7d:3e:
17:62:ab:dc:64:0a:2f:7d:c9:1d:36:7f:7c:19:b1:47:22:4b:
be:eb:39:55:78:13:1b:82:f2:e6:85:c3:ba:a3:5f:59:7d:cf:
9f:06:2a:a2:7e:38:4e:1a:19:49:14:79:da:5e:cc:72:30:57:
7f:f9:87:ae:3d:80:50:b9:29:d8:9a:4e:77:b3:c0:e1:7f:a8:
0e:18:b5:78:c9:92:83:74:e5:58:41:f6:30:95:23:72:23:0a:
e6:07:a8:fd:ce:61:85:3c:59:28:2d:c9:b7:a0:1b:f6:86:b5:
ff:a9:17:cf:90:28:02:8e:c9:02:00:b7:9c:2e:ea:98:60:cb:
ef:56:d1:05:ab:63:4c:87:a5:69:f8:c0:8a:f9:09:e2:c8:c1:
cf:15:ba:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:48:29 2026 by rpki-client