
$ rpki-client -vvf rpki.apnic.net/member_repository/A917AAAD/E3B2B644F7C111EA8275CB66C4F9AE02/1hfUcQSCx_d1dSBX3IaCJZsxnHg.mft
File: 1hfUcQSCx_d1dSBX3IaCJZsxnHg.mft (raw, json)
Hash identifier: r1UZh3d6F7pELm4EhdjW9hsIwOXxEsueVFnAUhkqYVs=
Subject key identifier: 6C:77:C5:E0:F3:C5:7C:31:3F:B9:28:B0:0F:F0:C3:C4:29:81:3A:1A
Authority key identifier: D6:17:D4:71:04:82:C7:F7:75:75:20:57:DC:86:82:25:9B:31:9C:78
Certificate issuer: /CN=A917AAAD/serialNumber=D617D4710482C7F775752057DC8682259B319C78
Certificate serial: 08B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1hfUcQSCx_d1dSBX3IaCJZsxnHg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917AAAD/E3B2B644F7C111EA8275CB66C4F9AE02/1hfUcQSCx_d1dSBX3IaCJZsxnHg.mft
Manifest number: 08A3
Signing time: Tue 28 Jul 2026 20:58:56 +0000
Manifest this update: Tue 28 Jul 2026 20:58:55 +0000
Manifest next update: Tue 04 Aug 2026 20:58:55 +0000
Files and hashes: 1: 1hfUcQSCx_d1dSBX3IaCJZsxnHg.crl (hash: RDoB2WtyBV6bOjGJvAJsXn5SBhNtOi6bJY/wwCDT0mk=)
2: CAB0B6B2F7C311EA8A722484C4F9AE02.roa (hash: /xCNBqLNz0L8cDqpYEQMnHLgfzVahak+S8dk9Uan5oM=)
3: CB42F018F7C311EA8A722484C4F9AE02.roa (hash: IxYVxX1BoFCHdIOrjAwAEmnCO+dNiZSE2wEYWsIxYD4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917AAAD/E3B2B644F7C111EA8275CB66C4F9AE02/1hfUcQSCx_d1dSBX3IaCJZsxnHg.crl
rsync://rpki.apnic.net/member_repository/A917AAAD/E3B2B644F7C111EA8275CB66C4F9AE02/1hfUcQSCx_d1dSBX3IaCJZsxnHg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1hfUcQSCx_d1dSBX3IaCJZsxnHg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:19:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2231 (0x8b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917AAAD, serialNumber=D617D4710482C7F775752057DC8682259B319C78
Validity
Not Before: Jul 28 20:58:55 2026 GMT
Not After : Aug 4 20:58:55 2026 GMT
Subject: CN=6a691810-ae3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d8:6c:42:19:52:7f:e0:20:3c:68:a0:1f:6b:
3b:fd:47:72:dd:28:fe:8b:3c:27:11:b4:eb:e2:47:
8a:38:c2:db:6e:0f:88:c2:d5:f6:ef:cc:b4:97:79:
f7:2a:95:1a:7d:12:26:67:6f:4a:59:00:d2:a7:d4:
94:87:60:b1:43:ac:8f:9b:94:55:e5:66:1c:e9:a1:
4f:8f:47:cb:0d:4d:d8:f5:78:a4:d1:8b:6e:f0:3a:
c1:68:e1:7a:64:94:c6:ee:82:25:3b:cd:8a:59:ad:
ee:ef:fa:0c:44:51:98:d2:49:c0:91:60:28:d3:b6:
b6:22:16:c2:32:fa:c3:38:7f:0e:c3:a5:d8:df:0c:
dc:95:81:38:d9:8a:b6:43:33:80:32:eb:08:8b:93:
b0:13:05:77:6f:f5:aa:c4:81:ac:79:91:a8:2b:32:
21:bc:e4:ef:ed:3f:62:f4:b0:39:3c:bc:74:98:aa:
24:05:05:42:aa:fe:ee:ea:9d:de:cb:e9:2e:45:15:
69:08:e8:18:23:a1:91:ea:e6:c4:8e:de:d4:63:99:
95:7a:62:01:27:9a:1c:80:69:03:20:ee:5a:14:89:
3c:17:c6:bd:3b:f1:5d:67:ca:f9:41:b9:56:ad:18:
42:14:ab:31:87:b4:90:87:7a:e8:a2:f1:a8:c3:87:
bd:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:77:C5:E0:F3:C5:7C:31:3F:B9:28:B0:0F:F0:C3:C4:29:81:3A:1A
X509v3 Authority Key Identifier:
keyid:D6:17:D4:71:04:82:C7:F7:75:75:20:57:DC:86:82:25:9B:31:9C:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917AAAD/E3B2B644F7C111EA8275CB66C4F9AE02/1hfUcQSCx_d1dSBX3IaCJZsxnHg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1hfUcQSCx_d1dSBX3IaCJZsxnHg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AAAD/E3B2B644F7C111EA8275CB66C4F9AE02/1hfUcQSCx_d1dSBX3IaCJZsxnHg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:ff:44:06:33:da:53:b7:0b:5c:e5:21:2e:1e:65:ab:89:0c:
40:5c:47:2f:c2:97:dc:8d:d7:00:78:dc:f7:30:d1:76:15:94:
c4:ed:03:31:9c:89:d0:28:f3:72:c0:07:e5:cd:b4:df:15:62:
22:65:69:02:dd:a8:cb:db:56:79:89:cd:98:0b:ab:ff:5a:5c:
a4:a0:96:e7:61:78:d2:d8:86:ee:27:1f:64:a4:56:43:16:4e:
b9:91:1f:65:9a:3d:32:de:fc:81:9b:2f:0a:43:85:72:c6:f1:
21:ed:23:ef:6f:36:86:5b:23:7d:01:f0:ce:0b:6e:5a:e7:72:
f0:05:f4:58:de:2b:fd:59:16:61:c3:3b:20:0e:bf:c4:30:a1:
81:6d:67:77:a2:26:ea:cb:51:a3:a2:77:c7:72:98:19:b7:fc:
9f:71:8d:77:d5:c8:b5:c5:2c:cd:ae:32:36:da:1b:2f:3b:41:
47:1b:cc:bd:dc:ad:fa:cc:dc:97:64:72:a7:df:bc:a7:a0:d5:
4f:08:be:7e:2b:fd:36:0d:70:a8:82:c2:62:b2:e3:21:88:ae:
6b:e3:ab:e9:40:51:42:82:c4:84:12:4f:da:df:94:5c:c2:d4:
5e:6b:dc:43:ab:e0:d6:9c:d8:c9:d3:ab:79:0f:e1:05:22:4d:
ab:76:4f:e1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0FBQUQxMTAvBgNVBAUTKEQ2MTdENDcxMDQ4MkM3Rjc3NTc1MjA1N0RDODY4MjI1
OUIzMTlDNzgwHhcNMjYwNzI4MjA1ODU1WhcNMjYwODA0MjA1ODU1WjAYMRYwFAYD
VQQDEw02YTY5MTgxMC1hZTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA49hsQhlSf+AgPGigH2s7/Udy3Sj+izwnEbTr4keKOMLbbg+IwtX278y0l3n3
KpUafRImZ29KWQDSp9SUh2CxQ6yPm5RV5WYc6aFPj0fLDU3Y9Xik0Ytu8DrBaOF6
ZJTG7oIlO82KWa3u7/oMRFGY0knAkWAo07a2IhbCMvrDOH8Ow6XY3wzclYE42Yq2
QzOAMusIi5OwEwV3b/WqxIGseZGoKzIhvOTv7T9i9LA5PLx0mKokBQVCqv7u6p3e
y+kuRRVpCOgYI6GR6ubEjt7UY5mVemIBJ5ocgGkDIO5aFIk8F8a9O/FdZ8r5QblW
rRhCFKsxh7SQh3roovGow4e9hQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGx3xeDz
xXwxP7kosA/ww8QpgToaMB8GA1UdIwQYMBaAFNYX1HEEgsf3dXUgV9yGgiWbMZx4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUFBRC9FM0IyQjY0NEY3
QzExMUVBODI3NUNCNjZDNEY5QUUwMi8xaGZVY1FTQ3hfZDFkU0JYM0lhQ0pac3hu
SGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFoZlVjUVNDeF9kMWRTQlgzSWFDSlpzeG5IZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QUFBRC9FM0IyQjY0NEY3QzExMUVBODI3NUNCNjZDNEY5QUUwMi8xaGZVY1FTQ3hf
ZDFkU0JYM0lhQ0pac3huSGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOf9EBjPaU7cLXOUhLh5lq4kMQFxHL8KX3I3XAHjc9zDRdhWUxO0DMZyJ0Cjz
csAH5c203xViImVpAt2oy9tWeYnNmAur/1pcpKCW52F40tiG7icfZKRWQxZOuZEf
ZZo9Mt78gZsvCkOFcsbxIe0j7282hlsjfQHwzgtuWudy8AX0WN4r/VkWYcM7IA6/
xDChgW1nd6Im6stRo6J3x3KYGbf8n3GNd9XItcUsza4yNtobLztBRxvMvdyt+szc
l2Ryp9+8p6DVTwi+fiv9Ng1wqILCYrLjIYiua+Or6UBRQoLEhBJP2t+UXMLUXmvc
Q6vg1pzYydOreQ/hBSJNq3ZP4Q==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:41:52 2026 by rpki-client