
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.mft
File: HdHLvF31vfq7s62vErACVrfxjRI.mft (raw, json)
Hash identifier: HZ/shMCuElUlrT4XBacMYAg93/QH+FXp+XxH0U2a6JE=
Subject key identifier: 78:C2:21:EA:21:6F:B7:F1:1A:3C:4B:CE:5B:3E:79:0E:A1:0F:85:FB
Authority key identifier: 1D:D1:CB:BC:5D:F5:BD:FA:BB:B3:AD:AF:12:B0:02:56:B7:F1:8D:12
Certificate issuer: /CN=A915ADC4/serialNumber=1DD1CBBC5DF5BDFABBB3ADAF12B00256B7F18D12
Certificate serial: 023A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdHLvF31vfq7s62vErACVrfxjRI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.mft
Manifest number: 0224
Signing time: Mon 21 Sep 2026 03:10:57 +0000
Manifest this update: Mon 21 Sep 2026 03:10:56 +0000
Manifest next update: Mon 28 Sep 2026 03:10:56 +0000
Files and hashes: 1: HdHLvF31vfq7s62vErACVrfxjRI.crl (hash: 4H82Eiwq4MINnu8y2UBFkEGrmtvUwzPbC75HgyIHczY=)
2: AFC9F5324A0F11EF9E51BD7CC4F9AE02.roa (hash: MLgAaYwXB1GgAbwc1lk9vp3Ul9zku5iS1CDVPTfotbE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.crl
rsync://rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdHLvF31vfq7s62vErACVrfxjRI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 03:10:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 570 (0x23a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915ADC4, serialNumber=1DD1CBBC5DF5BDFABBB3ADAF12B00256B7F18D12
Validity
Not Before: Sep 21 03:10:56 2026 GMT
Not After : Sep 28 03:10:56 2026 GMT
Subject: CN=6ab0a041-2f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:63:b8:df:7c:c0:be:f5:c3:87:fe:23:58:0e:
9a:c1:46:f9:b9:4c:c0:25:95:af:d7:b3:62:b7:7a:
6f:66:12:56:94:a8:a6:8c:2e:2f:15:72:2b:c7:00:
ce:45:3b:3b:54:6d:c4:6d:c6:0c:d0:f3:e0:a2:93:
df:81:e9:1e:96:94:23:39:d1:e9:f2:4f:43:68:00:
06:d8:95:03:07:c3:3b:c1:f6:60:0b:cf:e2:99:59:
25:45:a6:a3:e5:1d:bd:67:79:28:e1:50:d0:6c:07:
17:fd:53:43:59:a6:b9:26:a9:96:56:93:80:9f:37:
a1:71:b3:34:b9:96:22:0c:e9:42:97:c3:eb:8b:b7:
70:dc:38:a7:7e:5b:c9:f3:a5:4e:5d:88:75:22:e5:
44:43:cc:30:74:7d:28:c1:a2:64:8c:44:ec:bb:ee:
b1:5b:46:5b:6a:10:e8:51:66:fd:58:c5:8c:55:3f:
3f:0d:62:ac:c8:fd:68:60:22:96:da:2b:46:31:e7:
5e:67:20:ec:19:a1:a9:0f:ea:59:7e:e1:41:48:27:
5a:2b:f5:ac:d7:93:da:63:f0:a2:15:82:39:cf:8c:
39:8d:ef:c6:e7:88:9f:36:7d:80:38:0c:38:d6:ea:
8d:f8:e5:2b:40:57:8c:de:21:73:6a:41:9f:71:2a:
c8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C2:21:EA:21:6F:B7:F1:1A:3C:4B:CE:5B:3E:79:0E:A1:0F:85:FB
X509v3 Authority Key Identifier:
keyid:1D:D1:CB:BC:5D:F5:BD:FA:BB:B3:AD:AF:12:B0:02:56:B7:F1:8D:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdHLvF31vfq7s62vErACVrfxjRI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:94:1a:a2:49:b6:7c:1c:8d:d8:54:67:b2:a2:60:0a:5c:f4:
78:cb:12:6a:ce:42:c8:3d:bf:80:e6:14:bd:39:d5:e9:3c:22:
d8:52:b4:07:bf:a8:a4:03:7e:16:44:43:fb:c7:21:84:0d:ac:
7c:c3:16:a5:62:98:c8:29:33:fb:6d:27:69:69:4e:ae:3b:44:
31:6d:d6:91:52:8a:76:04:b5:c7:51:e2:4f:4f:7b:1b:80:25:
37:27:b8:5d:d9:b2:96:0e:17:c3:04:d8:93:30:2c:ec:79:1b:
0d:23:c9:d3:dc:b1:c3:f3:62:a7:10:40:96:78:a8:92:9a:d7:
ce:92:53:f8:b0:87:4b:e7:95:24:8a:97:67:6a:04:06:33:af:
a5:31:55:b9:27:3e:8e:cf:ea:5a:6c:75:3c:ae:50:eb:02:c5:
7f:b3:74:4a:8b:cb:d2:5f:2a:4d:cf:58:7a:34:a4:35:73:0e:
e7:b7:55:75:0c:50:02:f0:f6:57:97:7c:a0:e9:2f:b7:27:01:
b4:9c:4b:e2:b4:a1:6d:ef:14:df:32:54:e0:57:fa:c2:84:c5:
d7:09:a9:08:f4:82:c6:81:47:df:a9:bb:9f:40:04:18:5b:32:
d7:89:5d:82:c0:e1:32:44:24:a1:9f:ef:67:5d:e1:8f:88:88:
68:9d:5e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:19:27 2026 by rpki-client