
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.mft
File: I-HkJZ-rzUn9WMzUbPIAzRIeLqw.mft (raw, json)
Hash identifier: rGJf0kvSy3MNANJ3XAPSh24lHpBwm1aq6bV7kGgecgY=
Subject key identifier: E3:02:F6:7C:78:2D:93:76:E7:E8:4E:2C:57:78:AB:8E:3E:0F:EF:45
Authority key identifier: 23:E1:E4:25:9F:AB:CD:49:FD:58:CC:D4:6C:F2:00:CD:12:1E:2E:AC
Certificate issuer: /CN=A9158682/serialNumber=23E1E4259FABCD49FD58CCD46CF200CD121E2EAC
Certificate serial: 7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.mft
Manifest number: 79
Signing time: Mon 27 Jul 2026 10:02:42 +0000
Manifest this update: Mon 27 Jul 2026 10:02:42 +0000
Manifest next update: Mon 03 Aug 2026 10:02:42 +0000
Files and hashes: 1: I-HkJZ-rzUn9WMzUbPIAzRIeLqw.crl (hash: co9WBCm8ZAVI2yMGj92BQSi2/PeRDzVtpscxeZgu7Mo=)
2: C5D7EA08D5CF11F0A0EA7C48C4F9AE02.roa (hash: FWaWZRn2VagzBM02EknVAFE8HgmoQjfzWkVbJA60FRs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.crl
rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 10:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124 (0x7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158682, serialNumber=23E1E4259FABCD49FD58CCD46CF200CD121E2EAC
Validity
Not Before: Jul 27 10:02:42 2026 GMT
Not After : Aug 3 10:02:42 2026 GMT
Subject: CN=6a672cc2-bbec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:83:41:bc:2b:02:9b:df:72:c7:51:8b:d8:41:
b9:c1:3d:0e:ee:22:8f:5a:4a:17:ac:ec:d8:48:87:
f2:c7:17:26:39:c9:ad:9b:f0:45:c9:56:b2:0b:ed:
a3:de:89:37:1c:39:ab:2f:12:a6:fd:7d:d7:36:97:
3a:17:da:da:c9:4a:3b:e8:3b:7f:2b:0e:e5:be:03:
7b:9b:36:21:4d:d3:2c:3f:9e:13:53:de:a0:04:cf:
67:2a:87:02:34:35:7b:aa:c2:b3:9b:51:32:29:29:
37:b2:86:26:57:41:b0:27:8b:e3:db:34:7a:6f:ba:
be:e3:7a:d4:74:34:62:91:d7:5f:f7:db:3c:60:b3:
3e:d3:89:14:7c:14:1d:e6:5a:0a:9f:b2:0d:6b:9f:
45:8e:1b:25:f1:47:fd:82:f8:28:c2:95:42:3e:a2:
d0:13:d2:dc:95:83:53:7d:3b:10:1d:8b:bc:0e:6a:
05:ac:51:38:50:17:d0:f5:a4:74:9c:82:51:78:f2:
89:eb:c9:27:95:ed:0d:f5:fa:dd:cc:ff:62:30:7d:
27:8e:74:45:a0:43:0d:c2:5b:8f:a0:91:14:43:5d:
a4:e6:e4:e6:e0:27:e0:85:c7:e4:df:db:c1:8b:19:
7d:32:df:07:da:a6:c8:c8:14:31:f8:7b:1f:9c:ff:
68:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:02:F6:7C:78:2D:93:76:E7:E8:4E:2C:57:78:AB:8E:3E:0F:EF:45
X509v3 Authority Key Identifier:
keyid:23:E1:E4:25:9F:AB:CD:49:FD:58:CC:D4:6C:F2:00:CD:12:1E:2E:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:f9:86:3f:96:39:3d:25:14:6c:82:3b:ca:d3:f6:d2:c6:1b:
f2:80:cd:96:56:4f:95:40:b5:6b:ee:84:39:af:4b:34:1a:c4:
71:89:a9:0b:89:7a:3c:fc:08:32:e9:f3:c6:ae:e6:09:84:c7:
7b:aa:bc:d5:dc:4b:78:c0:7e:9e:25:8b:d5:15:fd:3b:73:fd:
aa:f7:5e:25:e9:2e:dd:a9:ab:ea:cc:46:f9:ad:37:72:a1:e7:
c4:ca:5a:29:b4:cd:47:ed:24:b6:dd:5f:1f:fa:5a:8b:09:96:
15:ed:c5:ea:71:e9:c1:7c:28:97:1d:76:93:ae:39:15:be:1a:
b8:f4:c4:8d:ac:ee:a8:be:cb:eb:84:bf:43:53:8d:f8:c1:7a:
ea:78:d9:85:41:7f:5c:ac:1d:47:4a:ac:0f:99:e5:3c:13:91:
cf:c9:be:df:81:08:54:32:08:b5:7c:f4:4f:1d:ff:74:02:30:
8e:56:46:a0:77:f0:af:d3:d7:d0:f8:49:8f:9a:23:4e:9a:1e:
03:61:28:2e:e1:69:b7:2c:67:b2:2a:f3:23:fe:8d:85:c0:ae:
a2:55:22:a2:4b:01:3e:ba:ae:67:6b:3b:63:3b:94:46:97:ed:
b3:fa:76:fe:39:88:3c:ce:1c:9b:65:43:6f:da:5f:e9:67:e4:
ad:62:cf:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:06:05 2026 by rpki-client