
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft
File: hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft (raw, json)
Hash identifier: M9+4ffuSJX9oRGiYJahNKxGlQOimCUo7BhDf03JgCkw=
Subject key identifier: 49:3E:B9:4E:15:C0:AE:AB:DA:5D:7B:59:22:1E:C2:75:15:05:1A:C1
Authority key identifier: 86:CA:EF:96:73:9E:F4:9A:51:4F:E9:F9:0B:6F:E9:50:9D:3C:C9:53
Certificate issuer: /CN=A915D0AC/serialNumber=86CAEF96739EF49A514FE9F90B6FE9509D3CC953
Certificate serial: 0269
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft
Manifest number: 0252
Signing time: Wed 29 Jul 2026 03:30:11 +0000
Manifest this update: Wed 29 Jul 2026 03:30:11 +0000
Manifest next update: Wed 05 Aug 2026 03:30:11 +0000
Files and hashes: 1: hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl (hash: tWxNOXpGDk91ALrDBxS0V+hIpeehpj5J/k5hvldc5WU=)
2: DC11ACCE182F11EE82A0FC48C4F9AE02.roa (hash: TVUqImfkH05qiQ19RCKAlmLm+qu0pav08yARc+QiM3g=)
3: 44DD2C9ABD2811EE9E6BD047C4F9AE02.roa (hash: su1llYedwPnLSUZ71VKszo5WnnMLP9v6r72WwKMqsNs=)
4: DCC31BA8182F11EE82A0FC48C4F9AE02.roa (hash: Nk6B9oGSm+C8lzJG0kzS3nVaiBodjvcAtEqWj+52CmA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl
rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 03:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 617 (0x269)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D0AC, serialNumber=86CAEF96739EF49A514FE9F90B6FE9509D3CC953
Validity
Not Before: Jul 29 03:30:11 2026 GMT
Not After : Aug 5 03:30:11 2026 GMT
Subject: CN=6a6973c3-7866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3f:3e:a3:93:2f:a8:54:dc:28:08:ca:9b:c7:
4d:e2:74:2b:59:61:95:d1:32:9a:13:d2:b4:83:ed:
26:15:85:f2:ed:7f:58:77:19:8b:ff:c8:3d:91:6e:
c7:92:9c:78:ee:70:3d:1d:62:dd:80:56:16:f6:14:
ed:42:95:85:27:91:95:26:8a:60:20:06:20:94:9d:
8d:a7:e0:66:d9:d0:53:6e:76:e3:d5:31:c7:5a:85:
92:ee:4c:29:ad:77:28:73:32:22:92:bd:aa:12:b4:
42:23:b3:68:95:a6:50:15:47:ff:6f:51:6e:41:a7:
51:83:31:bb:ec:a0:44:57:bd:30:31:8f:ba:8c:de:
54:d2:e3:b9:2e:2a:4e:fc:c8:ca:7a:f5:59:39:cb:
83:f1:06:f0:9b:5c:9b:75:08:69:53:a1:af:5f:e2:
5b:c2:09:ca:44:8b:22:81:c3:3a:a5:49:2e:01:1f:
10:85:33:dd:06:2c:1b:38:a8:b6:2e:0f:14:a1:f6:
7a:03:ea:ba:96:13:87:7a:26:12:5a:e2:a5:1d:11:
58:30:8f:bc:d0:cb:25:df:9e:7a:b5:14:c1:87:3c:
15:b7:40:fe:72:2c:68:b4:c5:42:bc:55:78:60:93:
a4:6c:05:76:6a:4a:ce:09:7a:c1:40:35:56:1e:a0:
1f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:3E:B9:4E:15:C0:AE:AB:DA:5D:7B:59:22:1E:C2:75:15:05:1A:C1
X509v3 Authority Key Identifier:
keyid:86:CA:EF:96:73:9E:F4:9A:51:4F:E9:F9:0B:6F:E9:50:9D:3C:C9:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:c1:c0:fd:af:d7:55:14:ea:9e:59:74:98:a6:2f:56:84:d1:
c9:a3:a1:42:4f:9c:65:97:8b:68:f4:14:19:f9:4a:0d:47:d5:
e7:ff:b1:1b:5a:3e:f0:b1:e7:0c:83:f2:98:9e:48:a5:72:4b:
44:12:63:78:11:74:ea:af:c9:13:5d:e7:84:38:5b:86:24:a4:
9a:21:4c:eb:aa:88:28:0f:99:7b:08:aa:b7:ec:92:fd:d0:5e:
0a:33:db:bb:9d:33:8b:68:c7:48:33:02:35:95:1b:eb:68:27:
81:b2:ff:af:92:0b:50:f7:a2:30:f1:21:0c:3d:0b:8e:67:97:
32:c1:1c:8b:62:68:b2:87:c5:b3:be:ec:99:1a:f9:51:75:d1:
66:7b:2c:f8:a4:aa:2a:1a:7a:25:6e:32:f6:dd:41:9b:0c:e2:
8f:68:ec:08:01:90:d7:4e:d1:82:89:32:11:0f:25:75:89:78:
fc:77:c2:e5:56:13:e2:5b:0f:3d:b9:cd:f8:fe:50:66:dc:8a:
c0:15:34:c3:ff:0d:0e:5b:c8:4b:a0:38:1c:aa:d0:cf:5d:a9:
21:70:d4:f9:eb:95:c7:67:9c:0f:b3:f7:ad:7b:3c:1a:d5:f3:
29:e2:04:a4:c6:a9:24:0b:10:f3:c7:cc:df:5d:bc:83:31:e4:
73:5c:dd:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:01:26 2026 by rpki-client