
$ rpki-client -vvf rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.mft
File: hitzuc41BLC6JB0U_awOxLTkrcI.mft (raw, json)
Hash identifier: f5VW+IViplz03/ldIbfx4MHKgeE6sinPHy8Yc3MefLo=
Subject key identifier: A8:3D:E0:7C:EE:77:F4:60:44:A0:2B:58:E8:6D:15:5B:31:6E:D6:8E
Authority key identifier: 86:2B:73:B9:CE:35:04:B0:BA:24:1D:14:FD:AC:0E:C4:B4:E4:AD:C2
Certificate issuer: /CN=A915CCEA/serialNumber=862B73B9CE3504B0BA241D14FDAC0EC4B4E4ADC2
Certificate serial: 0A36
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hitzuc41BLC6JB0U_awOxLTkrcI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.mft
Manifest number: 0A19
Signing time: Sun 26 Jul 2026 20:18:51 +0000
Manifest this update: Sun 26 Jul 2026 20:18:51 +0000
Manifest next update: Sun 02 Aug 2026 20:18:51 +0000
Files and hashes: 1: hitzuc41BLC6JB0U_awOxLTkrcI.crl (hash: vMsalM3p1rxJoh3wVsFZWpWP9WRJS9QzoSM8iN7UGkM=)
2: 4D0CE5E2707011F1821CCDE576A30FBC.roa (hash: cKfuTAXWipJneptfP/7QaX9LGxrS5QrCTC8BKJ1ip5c=)
3: FA57B70A706F11F1A66ABD9E76A30FBC.roa (hash: qhtPC4c3/ihK8zHDitlN/gJrE0SBwNrrJJaKSbliufY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.crl
rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hitzuc41BLC6JB0U_awOxLTkrcI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 20:18:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2614 (0xa36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915CCEA, serialNumber=862B73B9CE3504B0BA241D14FDAC0EC4B4E4ADC2
Validity
Not Before: Jul 26 20:18:51 2026 GMT
Not After : Aug 2 20:18:51 2026 GMT
Subject: CN=6a666bab-14f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:29:de:ea:21:07:b0:e2:dc:f0:39:6d:8a:91:
87:59:d5:08:a7:44:ad:ae:1f:dd:1f:4e:2d:93:94:
39:91:89:c9:bc:22:ac:2d:c4:3f:97:c9:b1:26:06:
8f:02:af:d5:70:d9:c8:2d:d9:d0:08:fb:be:2c:0b:
f4:37:3e:99:d9:12:91:b5:a3:5b:9b:10:47:e2:46:
64:52:73:c6:24:75:d2:27:33:b5:b0:51:fb:5a:8e:
92:7c:f5:07:77:4e:ce:c0:9c:ca:8c:83:c1:10:10:
17:04:12:67:2c:93:4f:33:06:cd:9e:15:32:06:39:
8a:52:6e:23:05:61:c4:42:d1:90:51:79:b8:4b:81:
cd:0f:25:39:11:2c:4a:04:53:78:83:27:f4:1b:0d:
d0:da:d6:c3:36:cd:f2:2d:10:4f:6b:de:09:80:ed:
d2:84:bf:16:a2:76:22:ee:38:4d:4e:21:d3:38:16:
a8:85:35:34:a7:0b:c5:81:ea:a2:3a:ac:33:de:f5:
49:5e:d3:08:11:fe:e2:87:c4:54:ed:a1:00:04:e0:
26:92:1c:18:06:2a:0c:be:a5:ee:89:04:de:b2:a8:
54:5e:68:45:95:ae:d8:cd:17:3a:89:bd:f6:ab:cd:
7a:a4:10:bb:d3:0a:27:55:d4:72:db:8e:3b:bc:6f:
72:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:3D:E0:7C:EE:77:F4:60:44:A0:2B:58:E8:6D:15:5B:31:6E:D6:8E
X509v3 Authority Key Identifier:
keyid:86:2B:73:B9:CE:35:04:B0:BA:24:1D:14:FD:AC:0E:C4:B4:E4:AD:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hitzuc41BLC6JB0U_awOxLTkrcI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:76:c1:48:0a:3c:7c:9f:b6:e1:4f:07:e7:4e:29:8c:42:53:
e3:8f:af:38:f9:40:4d:e7:7b:2e:83:83:79:0c:04:94:7a:1f:
ad:06:d1:46:35:21:b6:ed:c5:5c:e5:0f:72:0f:3c:e2:05:3c:
21:79:3a:0c:85:d1:fa:87:ef:9c:e0:79:dd:78:9a:01:f1:f8:
2c:89:c7:43:d0:88:ca:6b:93:3d:ea:d9:7d:19:93:e8:e4:b4:
18:3b:c4:0e:18:63:eb:04:ce:46:17:d8:38:ad:87:e6:48:6b:
52:c7:d1:01:30:ba:2f:96:d2:f6:bf:2c:38:06:dc:23:30:cf:
3d:8f:e5:88:38:0a:6c:25:ec:80:aa:da:c1:c1:8d:4a:7e:a1:
30:fa:e4:40:16:be:da:3f:f5:9f:a5:71:dd:d5:ad:6e:a6:e6:
08:a3:49:a5:2e:1c:76:6e:73:12:b3:38:3f:88:be:64:13:02:
07:8f:f9:58:76:99:09:5d:de:00:0b:93:62:f2:9e:3f:8a:15:
4b:30:56:14:09:77:3e:4a:e9:fd:98:b3:5d:38:d1:1e:f8:9d:
d0:fd:4e:84:ac:a0:25:c2:aa:4e:46:ec:5e:b8:17:9f:a4:a4:
60:e9:5a:1b:f2:cd:6e:df:f5:7a:08:96:fe:a2:fd:eb:c3:37:
12:63:62:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:18:36 2026 by rpki-client