
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.mft
File: H_jK4i0tckq70cLRJft9t7T4Sv8.mft (raw, json)
Hash identifier: efUGNHIcou+qypGalkqzBA8vBSLKaNdOByfli3mQR8k=
Subject key identifier: FD:24:6D:98:4B:94:23:7D:DB:17:64:74:C7:8C:09:57:9D:48:29:52
Authority key identifier: 1F:F8:CA:E2:2D:2D:72:4A:BB:D1:C2:D1:25:FB:7D:B7:B4:F8:4A:FF
Certificate issuer: /CN=A915670F/serialNumber=1FF8CAE22D2D724ABBD1C2D125FB7DB7B4F84AFF
Certificate serial: 82
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_jK4i0tckq70cLRJft9t7T4Sv8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.mft
Manifest number: 80
Signing time: Sun 27 Sep 2026 08:15:01 +0000
Manifest this update: Sun 27 Sep 2026 08:15:00 +0000
Manifest next update: Sun 04 Oct 2026 08:15:00 +0000
Files and hashes: 1: H_jK4i0tckq70cLRJft9t7T4Sv8.crl (hash: ys3t4JPtF+1X7g38/YS4f/jVjihXLfrV5by+UjzfDK8=)
2: E342A7D0F9D911F0908C8513676F56BC.roa (hash: rFk76m5fW9CYOpE5VZsRNzUgbtpqshwPbQBMeshiV/E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.crl
rsync://rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_jK4i0tckq70cLRJft9t7T4Sv8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 08:15:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130 (0x82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915670F, serialNumber=1FF8CAE22D2D724ABBD1C2D125FB7DB7B4F84AFF
Validity
Not Before: Sep 27 08:15:00 2026 GMT
Not After : Oct 4 08:15:00 2026 GMT
Subject: CN=6ab8d085-2d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c5:fd:7f:e6:20:fc:b3:ba:f6:1b:88:46:20:
d9:a4:4a:c5:1e:9c:de:ed:b7:bf:c4:0c:2c:9f:85:
ed:1a:0b:a8:5e:b5:88:95:26:e9:92:57:ea:34:b3:
9b:5d:b9:24:9a:28:66:af:ed:e5:55:98:e4:a4:07:
01:7c:ab:7e:e0:ce:e5:3f:53:6e:48:d2:34:cb:09:
67:99:ab:bc:41:cd:41:3a:be:a0:bb:28:cb:b9:f3:
c4:3c:1a:9e:ff:a4:51:2e:f3:11:4b:d3:32:9c:f3:
75:c3:70:b4:44:41:94:90:32:2a:d0:b3:9d:4a:96:
92:fc:83:71:ec:3f:b6:e5:e3:73:8b:13:16:4e:c3:
1e:09:8b:1d:56:e9:7d:2f:e9:d5:a9:db:b9:39:f0:
54:e0:25:93:7d:a2:5f:c0:5b:fa:c4:1e:87:e8:70:
44:ff:e5:a6:a8:e7:ab:f3:24:c6:66:92:5b:7c:67:
ed:d9:b1:9b:d0:40:08:c7:ee:36:e0:ab:b7:3b:51:
36:aa:cf:1d:dd:0c:3e:fb:01:ba:9a:17:3e:ce:6c:
ad:64:46:5a:97:55:2a:9a:bc:07:0d:19:70:1d:fe:
e5:51:e1:85:75:72:73:aa:f2:b3:67:17:68:53:7e:
14:3e:75:c5:96:b5:4d:b8:3f:b1:b8:64:c3:6d:65:
21:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:24:6D:98:4B:94:23:7D:DB:17:64:74:C7:8C:09:57:9D:48:29:52
X509v3 Authority Key Identifier:
keyid:1F:F8:CA:E2:2D:2D:72:4A:BB:D1:C2:D1:25:FB:7D:B7:B4:F8:4A:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_jK4i0tckq70cLRJft9t7T4Sv8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:44:c1:d9:9b:a6:18:f0:13:1f:ec:b1:e2:cb:5a:14:00:7d:
50:3c:e0:ac:f8:73:dc:25:68:a5:45:2c:0b:ad:aa:2e:54:1c:
b8:7d:d9:d4:08:1f:69:24:fc:66:b8:be:b6:e3:1b:77:8e:b7:
b5:71:07:7e:d9:c0:3a:c2:4a:37:19:7d:f8:14:21:2f:94:52:
82:a4:4d:98:77:f1:bd:f5:b9:07:b6:99:d5:a5:00:29:5b:00:
21:8c:92:e8:2d:ff:59:39:c0:f8:20:a1:ae:c9:cb:14:6a:d4:
b2:76:dd:5c:35:28:f0:06:46:b5:82:62:3a:be:fc:0a:03:04:
1d:3c:00:0e:e4:57:24:b1:3d:93:dc:2a:0a:d9:7f:09:81:e9:
0c:cb:f1:ac:bb:36:56:c8:89:db:13:6b:f6:4b:11:08:63:b8:
4d:15:39:ff:cd:63:4b:2b:a2:dd:07:b3:ec:6e:30:ce:9c:4a:
0c:33:ee:5c:74:62:da:1c:43:a2:a2:34:65:95:50:b4:6d:a8:
ae:9c:2e:ff:b0:dc:3c:79:f6:b4:b1:90:42:78:04:03:d9:21:
c6:77:ff:07:af:03:7b:71:b7:a4:bd:18:30:c6:95:7e:bf:c4:
26:27:17:0d:33:63:b6:b7:93:c7:84:eb:b4:76:0e:6e:21:7e:
51:b4:71:ec
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTY3MEYxMTAvBgNVBAUTKDFGRjhDQUUyMkQyRDcyNEFCQkQxQzJEMTI1RkI3REI3
QjRGODRBRkYwHhcNMjYwOTI3MDgxNTAwWhcNMjYxMDA0MDgxNTAwWjAYMRYwFAYD
VQQDEw02YWI4ZDA4NS0yZDk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn8X9f+Yg/LO69huIRiDZpErFHpze7be/xAwsn4XtGguoXrWIlSbpklfqNLOb
Xbkkmihmr+3lVZjkpAcBfKt+4M7lP1NuSNI0ywlnmau8Qc1BOr6guyjLufPEPBqe
/6RRLvMRS9MynPN1w3C0REGUkDIq0LOdSpaS/INx7D+25eNzixMWTsMeCYsdVul9
L+nVqdu5OfBU4CWTfaJfwFv6xB6H6HBE/+WmqOer8yTGZpJbfGft2bGb0EAIx+42
4Ku3O1E2qs8d3Qw++wG6mhc+zmytZEZal1UqmrwHDRlwHf7lUeGFdXJzqvKzZxdo
U34UPnXFlrVNuD+xuGTDbWUhQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP0kbZhL
lCN92xdkdMeMCVedSClSMB8GA1UdIwQYMBaAFB/4yuItLXJKu9HC0SX7fbe0+Er/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjcwRi9GNkVCMzI0RUY5
RDgxMUYwQjdBMzk2NEI2NjZGNTZCQy9IX2pLNGkwdGNrcTcwY0xSSmZ0OXQ3VDRT
djguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hfaks0aTB0Y2txNzBjTFJKZnQ5dDdUNFN2OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NjcwRi9GNkVCMzI0RUY5RDgxMUYwQjdBMzk2NEI2NjZGNTZCQy9IX2pLNGkwdGNr
cTcwY0xSSmZ0OXQ3VDRTdjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOETB2ZumGPATH+yx4staFAB9UDzgrPhz3CVopUUsC62qLlQcuH3Z1AgfaST8
Zri+tuMbd463tXEHftnAOsJKNxl9+BQhL5RSgqRNmHfxvfW5B7aZ1aUAKVsAIYyS
6C3/WTnA+CChrsnLFGrUsnbdXDUo8AZGtYJiOr78CgMEHTwADuRXJLE9k9wqCtl/
CYHpDMvxrLs2VsiJ2xNr9ksRCGO4TRU5/81jSyui3Qez7G4wzpxKDDPuXHRi2hxD
oqI0ZZVQtG2orpwu/7DcPHn2tLGQQngEA9khxnf/B68De3G3pL0YMMaVfr/EJicX
DTNjtreTx4TrtHYObiF+UbRx7A==
-----END CERTIFICATE-----
Generated at Mon Sep 28 00:36:41 2026 by rpki-client