
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B7FC/C73BA16403A711F0A7FF9C87C4F9AE02/hXUH8dizkVyVENUEcA7OiQsGaF8.mft
File: hXUH8dizkVyVENUEcA7OiQsGaF8.mft (raw, json)
Hash identifier: ohnoOaBnKvQUBqdxJ+jyMj5D2EFhi6afXrDV5Ip3wxY=
Subject key identifier: 6B:FB:6F:40:D3:EB:A3:68:2B:5E:88:64:1F:A2:D7:39:1E:A1:1B:A7
Authority key identifier: 85:75:07:F1:D8:B3:91:5C:95:10:D5:04:70:0E:CE:89:0B:06:68:5F
Certificate issuer: /CN=A916B7FC/serialNumber=857507F1D8B3915C9510D504700ECE890B06685F
Certificate serial: 0108
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hXUH8dizkVyVENUEcA7OiQsGaF8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B7FC/C73BA16403A711F0A7FF9C87C4F9AE02/hXUH8dizkVyVENUEcA7OiQsGaF8.mft
Manifest number: 0103
Signing time: Mon 27 Jul 2026 08:15:27 +0000
Manifest this update: Mon 27 Jul 2026 08:15:27 +0000
Manifest next update: Mon 03 Aug 2026 08:15:27 +0000
Files and hashes: 1: hXUH8dizkVyVENUEcA7OiQsGaF8.crl (hash: dhUSLVG0pOBSGOGIlXEt+o+sKsT7HXD5knNkywol+yQ=)
2: B49957AA134B11F0AE18CB2BC4F9AE02.roa (hash: JXFvADq4YTaqaen/tnBh56vOg+t9TdkXrX7ZuGzAnPI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B7FC/C73BA16403A711F0A7FF9C87C4F9AE02/hXUH8dizkVyVENUEcA7OiQsGaF8.crl
rsync://rpki.apnic.net/member_repository/A916B7FC/C73BA16403A711F0A7FF9C87C4F9AE02/hXUH8dizkVyVENUEcA7OiQsGaF8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hXUH8dizkVyVENUEcA7OiQsGaF8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:15:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 264 (0x108)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B7FC, serialNumber=857507F1D8B3915C9510D504700ECE890B06685F
Validity
Not Before: Jul 27 08:15:27 2026 GMT
Not After : Aug 3 08:15:27 2026 GMT
Subject: CN=6a67139f-ca4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e7:1d:24:28:60:19:f3:89:a0:49:b0:90:24:
7d:e3:d5:86:5b:1b:0c:bf:c9:b6:26:4b:33:d9:00:
78:6f:cb:a3:3b:ee:50:6e:09:ec:62:7c:48:61:f7:
06:54:17:df:d9:c0:7b:6c:a5:59:59:8f:65:65:5a:
35:e4:95:83:be:8b:bb:f9:53:14:80:95:9b:0e:18:
3b:3e:cc:7d:7b:1f:9b:a4:45:f0:51:88:3d:47:11:
3f:ac:0a:70:70:0d:8a:f3:9e:c3:ed:a8:19:d0:c7:
7d:1c:53:01:10:31:7a:d7:18:e3:6f:a4:8e:83:6f:
0b:b0:fd:16:41:9d:eb:b7:f6:23:74:e2:4a:fe:30:
84:c7:4d:02:f5:15:38:db:58:32:d4:4d:05:06:00:
bc:ad:28:78:bf:6a:cc:4c:d8:d2:6a:f2:e8:1c:71:
79:ae:f8:cd:d0:1e:f8:0b:91:ce:9a:55:65:62:f1:
31:75:36:4c:41:a0:5e:99:da:67:3a:8e:69:f6:47:
f4:dc:bd:62:08:34:aa:61:9c:e5:cd:0b:7c:c4:26:
ff:1a:2a:4b:f9:76:d0:40:e4:0d:37:de:1d:09:9b:
1c:95:fb:b5:70:e1:03:6d:9b:87:5f:4f:0e:b4:c9:
b1:ab:de:6a:c4:b0:64:58:fc:91:78:c8:11:a0:ed:
1d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:FB:6F:40:D3:EB:A3:68:2B:5E:88:64:1F:A2:D7:39:1E:A1:1B:A7
X509v3 Authority Key Identifier:
keyid:85:75:07:F1:D8:B3:91:5C:95:10:D5:04:70:0E:CE:89:0B:06:68:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B7FC/C73BA16403A711F0A7FF9C87C4F9AE02/hXUH8dizkVyVENUEcA7OiQsGaF8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hXUH8dizkVyVENUEcA7OiQsGaF8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B7FC/C73BA16403A711F0A7FF9C87C4F9AE02/hXUH8dizkVyVENUEcA7OiQsGaF8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:88:91:2a:bd:e0:0c:8f:67:24:1b:29:35:e9:b9:ef:23:ec:
03:18:d1:b7:ce:dd:2f:0d:31:2f:12:44:05:80:44:3a:8a:b7:
8a:bb:d1:78:b3:65:21:67:4e:46:15:1c:6a:99:9a:9e:88:f4:
3c:87:71:cb:97:ad:19:9d:53:97:23:04:e0:a5:b8:f1:49:fa:
83:56:62:ea:4e:7c:c6:19:a3:c6:1c:bc:ea:83:43:ff:02:72:
2b:b1:8e:36:b3:63:f8:01:ca:63:04:ab:c1:08:ae:d1:b4:4c:
fb:da:23:4a:fd:18:47:57:3d:5d:2c:72:a0:51:09:bd:f0:64:
53:3c:08:7d:f3:86:cd:6c:8e:c3:4a:08:62:f8:5d:40:a5:b5:
a2:d1:0c:05:b8:fb:da:b2:83:ac:dc:a7:ba:d6:0f:e5:cc:0a:
89:ff:c1:81:29:01:bd:66:9b:f0:b3:d4:0d:72:af:6c:84:b5:
e5:fa:5d:31:9e:bf:7f:e6:4a:1c:dd:2f:a0:05:05:9d:d1:be:
f6:9d:18:f0:6c:04:85:40:98:21:1f:0d:f7:10:2c:6c:5b:7f:
bf:67:ac:5e:59:df:61:f5:c4:6e:54:2e:df:bc:45:a5:11:04:
18:23:cd:34:94:33:2e:ba:6d:4c:9a:d4:2f:dc:cb:aa:bc:51:
64:da:94:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:50:31 2026 by rpki-client