
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft
File: -HInxmU9abruLplIhCzrC0BJ54Y.mft (raw, json)
Hash identifier: IXaHdblWvAjHGX2tQH5v4uwVhmelO3698/u5JMUCWWY=
Subject key identifier: AA:A3:9F:11:57:F1:6A:3C:02:D5:32:DA:5E:65:42:DF:3A:B0:FE:09
Authority key identifier: F8:72:27:C6:65:3D:69:BA:EE:2E:99:48:84:2C:EB:0B:40:49:E7:86
Certificate issuer: /CN=A916D23A/serialNumber=F87227C6653D69BAEE2E9948842CEB0B4049E786
Certificate serial: 0BD5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft
Manifest number: 0BC4
Signing time: Tue 28 Jul 2026 19:16:59 +0000
Manifest this update: Tue 28 Jul 2026 19:16:59 +0000
Manifest next update: Tue 04 Aug 2026 19:16:59 +0000
Files and hashes: 1: -HInxmU9abruLplIhCzrC0BJ54Y.crl (hash: BrwviAfSmXKwVi4iOZXQPBB3ZE2/ZtrX+g3dtfPPjS0=)
2: E265728A877911EA9E28DF0BC4F9AE02.roa (hash: eJeSjBWnfyztRwss0NRo6wVnGnHYGD5kAHWaTt/BWrE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.crl
rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:16:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3029 (0xbd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D23A, serialNumber=F87227C6653D69BAEE2E9948842CEB0B4049E786
Validity
Not Before: Jul 28 19:16:59 2026 GMT
Not After : Aug 4 19:16:59 2026 GMT
Subject: CN=6a69002b-412f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e5:26:b9:7a:c9:d9:af:8a:34:8b:90:43:84:
90:fc:fc:63:f8:9c:0a:81:66:ae:0a:a5:26:c1:49:
4f:ad:1d:a6:1a:63:2e:7c:b5:66:81:f1:e7:7e:81:
61:2a:c7:93:7c:21:33:0c:d6:0f:7a:e3:75:e6:b3:
6b:87:8b:ca:1c:e3:1f:05:4c:eb:fa:e5:61:9d:89:
5a:b9:e3:69:6e:fa:bf:6d:76:da:fe:04:97:27:ed:
b7:77:89:25:66:32:c3:88:ea:38:58:52:99:14:87:
de:81:ba:f4:aa:b2:76:c8:fc:f0:99:fd:89:7b:00:
5f:96:5c:38:6a:82:06:c5:d6:b7:d3:dc:8d:d8:c2:
7a:7b:61:16:2b:71:d5:be:bc:10:7f:43:31:f5:fd:
26:68:94:3f:4e:47:8d:7b:18:ef:7d:ea:b8:0b:10:
7a:0e:9b:9b:1f:c8:c1:35:9e:cf:98:35:df:e8:45:
6e:80:4c:5f:2b:1f:a8:a1:7f:15:99:ef:66:12:7e:
08:b3:66:48:2c:03:f7:cd:42:69:16:f0:a5:c3:40:
da:2f:93:04:b3:5d:42:09:93:ad:fc:c9:bd:00:51:
ae:e9:c3:4e:16:c3:ce:d0:65:cc:57:b8:e3:c9:5f:
98:bf:7a:22:85:84:d3:9e:de:2d:d2:f5:4f:b4:26:
65:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A3:9F:11:57:F1:6A:3C:02:D5:32:DA:5E:65:42:DF:3A:B0:FE:09
X509v3 Authority Key Identifier:
keyid:F8:72:27:C6:65:3D:69:BA:EE:2E:99:48:84:2C:EB:0B:40:49:E7:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:1d:86:4f:71:27:60:f2:b7:43:c8:81:a4:c9:e4:38:0e:5f:
97:21:2f:ca:8d:0a:33:5b:7a:d5:30:e8:91:fa:0c:78:b6:87:
51:d8:f2:b5:5d:8f:3c:3d:50:d8:0d:93:e6:82:b8:c3:30:13:
35:77:90:43:6b:f7:3d:0c:15:f3:73:9c:2d:a3:71:47:5a:83:
e3:16:ce:a0:b5:05:6c:cc:91:25:9b:24:2d:e5:d4:78:ec:fc:
e8:d2:53:41:df:ab:99:1f:85:e0:78:c7:dd:01:ff:2e:2b:da:
ea:00:1b:a9:e7:da:88:59:ca:57:89:8a:19:bc:eb:44:e3:19:
84:57:ba:58:4b:f1:d2:01:77:74:63:31:d2:96:50:d6:f0:21:
db:a7:af:b3:f1:26:04:85:09:fc:e3:4b:b1:bb:a2:0a:87:46:
11:cd:0b:88:6b:26:0e:ed:18:99:41:af:d1:37:d3:1f:f5:84:
26:a6:28:46:78:9d:9b:b0:a2:11:d1:16:47:38:d0:73:75:4c:
b9:37:d7:65:e3:31:df:14:d5:38:7d:57:7c:4d:33:72:6b:97:
cb:18:10:59:75:02:ce:64:98:19:48:c5:fc:d1:50:65:14:f2:
1a:21:ca:d5:c5:1a:89:32:08:8e:55:42:3f:79:0a:d5:51:18:
78:c3:ec:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:11:45 2026 by rpki-client