
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft
File: H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft (raw, json)
Hash identifier: PmjNnViZcqB3Nfc4dXcdbXWDog6LLSW8bp8OPC2bLVg=
Subject key identifier: 1B:A2:1B:F6:25:CA:2F:2C:1D:BD:11:E3:88:19:39:F5:28:50:3B:14
Authority key identifier: 1F:63:3F:72:D1:C6:78:16:C2:06:4A:56:E5:38:3C:D9:54:DD:C0:E5
Certificate issuer: /CN=A91764E1/serialNumber=1F633F72D1C67816C2064A56E5383CD954DDC0E5
Certificate serial: 01FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2M_ctHGeBbCBkpW5Tg82VTdwOU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft
Manifest number: 01EE
Signing time: Mon 21 Sep 2026 03:25:08 +0000
Manifest this update: Mon 21 Sep 2026 03:25:07 +0000
Manifest next update: Mon 28 Sep 2026 03:25:07 +0000
Files and hashes: 1: H2M_ctHGeBbCBkpW5Tg82VTdwOU.crl (hash: BHaZrGXBWCWVndF8/L5y8S8EynvRdhKLwyJr5xcTj5Y=)
2: 30A1B4D0C67E11EEB4008058C4F9AE02.roa (hash: 1afV/Wp2zXvrGPdZywlVFm2mfGMyxkWyHsB9FTJiBqA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.crl
rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2M_ctHGeBbCBkpW5Tg82VTdwOU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 03:25:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 511 (0x1ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91764E1, serialNumber=1F633F72D1C67816C2064A56E5383CD954DDC0E5
Validity
Not Before: Sep 21 03:25:07 2026 GMT
Not After : Sep 28 03:25:07 2026 GMT
Subject: CN=6ab0a394-f2e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:44:ef:94:a8:f9:d4:f7:f8:8c:ec:80:88:b2:
78:da:ba:ac:fe:fb:e3:8c:f5:20:ff:1f:f7:ae:c4:
84:6f:b9:66:4a:3d:96:a7:16:05:53:23:5e:23:69:
b4:be:b6:30:2d:d2:6a:60:f1:bd:9f:53:e6:b1:b1:
99:29:08:7e:ca:11:4c:25:2e:f1:19:86:2f:92:b2:
d6:d0:91:ec:77:87:d8:d9:28:d3:86:c9:e3:40:7a:
20:f7:38:a0:db:5e:32:f1:3d:8f:fc:1b:e3:af:0b:
d5:c2:30:ca:cc:ec:37:d7:e0:34:e5:de:f8:7a:06:
b3:7c:b3:b4:95:c4:9d:51:d5:7d:dc:bc:24:80:1d:
8f:2d:58:15:31:81:2e:2b:49:87:1e:6f:9d:14:54:
74:86:0b:08:60:17:07:f0:5e:1d:97:e8:2f:49:a2:
01:28:82:3e:8d:1b:bc:1a:1c:b4:ee:a3:4e:1b:56:
0b:97:0b:d2:0e:a4:de:2f:45:58:94:21:81:b7:df:
4d:c2:5f:e8:10:e7:7e:4a:cb:62:04:91:9e:b7:89:
11:c3:16:54:0f:90:04:f3:3b:e2:27:2f:2b:af:34:
41:ba:54:02:12:10:2b:3b:c3:ef:f6:f0:04:cd:25:
3d:87:5b:b8:50:c6:89:13:e5:37:52:47:fd:da:09:
94:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A2:1B:F6:25:CA:2F:2C:1D:BD:11:E3:88:19:39:F5:28:50:3B:14
X509v3 Authority Key Identifier:
keyid:1F:63:3F:72:D1:C6:78:16:C2:06:4A:56:E5:38:3C:D9:54:DD:C0:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2M_ctHGeBbCBkpW5Tg82VTdwOU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:83:83:8f:b4:39:4e:58:be:98:c7:76:ab:07:40:67:31:d0:
d3:0d:33:38:74:91:20:d0:4a:fd:ae:5a:e8:a3:b0:72:f8:2d:
d8:e0:3f:b7:b5:c7:43:31:9e:9b:fd:65:7b:37:84:0e:f5:ca:
9b:49:7d:71:23:02:a2:92:61:95:a1:88:09:e2:83:4f:d8:60:
65:d2:bd:87:41:04:7b:bb:84:40:1a:1c:77:6d:ed:b8:6b:c1:
14:7e:26:1d:c8:9a:91:c0:c3:bf:37:2d:02:00:55:9d:1e:69:
4a:02:54:8c:86:06:61:5d:b2:3b:38:e0:dc:4d:69:86:70:09:
2b:17:5c:8b:72:0a:ca:c2:f5:ad:3d:f4:c5:02:a5:1d:6a:a8:
94:80:2b:20:32:c7:60:8e:5b:9a:91:25:1c:46:58:54:52:7b:
87:4d:8d:08:a9:09:87:3d:38:fc:a6:ae:e7:a1:a8:fd:6b:85:
32:eb:bf:65:83:c2:6d:c3:be:df:9b:b6:21:06:b8:07:75:1f:
92:fe:89:31:60:ec:fb:21:3b:df:7f:8d:d1:7e:bf:4a:3e:f8:
dc:72:98:7e:dd:15:4b:d5:b5:f4:9e:ed:3c:49:58:66:c9:a8:
89:62:36:f0:74:1a:14:df:d2:00:b9:cd:9c:0c:c3:4a:49:d8:
42:f2:c6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:51:33 2026 by rpki-client