
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.mft
File: H9jsfGVHrsUq1-DgvDLPfKoiHjc.mft (raw, json)
Hash identifier: g/CeHfw/CUkhzGEEB5/HDnlqBqut+WOId52nMW6GYFE=
Subject key identifier: 74:5C:73:B9:DE:1A:AA:D8:18:3B:15:42:AD:A6:1E:2F:8F:2D:84:91
Authority key identifier: 1F:D8:EC:7C:65:47:AE:C5:2A:D7:E0:E0:BC:32:CF:7C:AA:22:1E:37
Certificate issuer: /CN=A917B4DF/serialNumber=1FD8EC7C6547AEC52AD7E0E0BC32CF7CAA221E37
Certificate serial: 06DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9jsfGVHrsUq1-DgvDLPfKoiHjc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.mft
Manifest number: 06D2
Signing time: Sun 26 Jul 2026 23:05:04 +0000
Manifest this update: Sun 26 Jul 2026 23:05:03 +0000
Manifest next update: Sun 02 Aug 2026 23:05:03 +0000
Files and hashes: 1: H9jsfGVHrsUq1-DgvDLPfKoiHjc.crl (hash: k+KFc8qRwe7fvtl48+hBR8STrFDUdJS4S3XGtIe+BA0=)
2: F8CE85E2B30211EBA63AE482C4F9AE02.roa (hash: Oq+DZRLUONdiWQsPcpVZZkOJsIqLLjEOw+XElhBj3Kw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.crl
rsync://rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9jsfGVHrsUq1-DgvDLPfKoiHjc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 23:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1755 (0x6db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B4DF, serialNumber=1FD8EC7C6547AEC52AD7E0E0BC32CF7CAA221E37
Validity
Not Before: Jul 26 23:05:03 2026 GMT
Not After : Aug 2 23:05:03 2026 GMT
Subject: CN=6a6692a0-3114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3e:98:fe:1e:5c:a7:f8:70:bc:4b:f8:bf:49:
e0:02:a8:d9:51:42:38:06:8d:76:53:1a:96:59:28:
fb:68:13:20:7b:8e:8e:d4:5f:ed:f6:c8:3c:19:dc:
c5:34:1b:56:02:8e:0f:a8:c6:58:af:8d:9e:62:6c:
9c:f1:75:1c:12:1b:e3:ca:07:cf:58:5d:71:fe:d7:
a0:e8:79:9f:f9:bb:66:1e:b3:09:b7:d0:b8:cf:17:
d5:7e:a0:1f:35:24:20:ec:e5:2f:a7:93:5a:dd:a0:
39:ea:b7:5e:c8:55:d2:ae:3b:b0:36:13:03:d5:f3:
73:7e:81:5f:af:d5:6b:28:3d:cd:d3:a7:58:58:d2:
3f:42:e8:c8:f0:a6:69:9c:81:9d:78:a1:63:63:e0:
80:f1:5f:36:c6:c9:ae:b0:22:52:3c:72:45:67:61:
15:88:a2:7e:31:92:2c:2e:15:5a:d7:24:7c:26:b0:
37:49:39:bd:75:bb:eb:16:f5:f7:21:42:3f:7d:83:
09:50:91:be:17:68:2f:a4:61:e6:b2:87:ce:5b:a9:
e9:3d:94:cf:0b:b8:d4:dc:7e:f3:d7:f8:a9:66:bc:
65:85:18:84:8a:f3:eb:2d:50:41:08:ca:9e:09:1c:
57:c6:62:22:dc:50:90:15:1c:7a:40:b0:79:1e:ba:
d7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:5C:73:B9:DE:1A:AA:D8:18:3B:15:42:AD:A6:1E:2F:8F:2D:84:91
X509v3 Authority Key Identifier:
keyid:1F:D8:EC:7C:65:47:AE:C5:2A:D7:E0:E0:BC:32:CF:7C:AA:22:1E:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9jsfGVHrsUq1-DgvDLPfKoiHjc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:69:28:4c:7f:59:8a:0c:ba:81:31:15:9a:04:43:49:59:98:
77:c4:cf:96:72:38:2a:34:2c:c8:ad:e5:66:91:4f:32:ab:c0:
19:94:14:b5:ca:fd:d7:13:ff:23:da:2e:4a:c7:91:c7:d8:96:
01:73:92:44:ec:bc:41:82:92:62:00:b8:48:1e:c9:e6:cc:45:
eb:c0:b1:c7:12:d0:50:01:4e:97:82:08:ba:10:64:ed:0a:27:
9c:d3:9b:6c:3d:2d:9d:52:db:59:6f:f9:df:bb:42:49:b8:41:
cf:0d:36:89:74:a9:a2:4d:fc:6c:83:0d:ff:a5:47:30:41:dc:
8b:56:a9:d3:25:15:94:56:b0:4a:a8:13:a9:34:49:07:5e:c1:
1e:62:ac:df:c7:27:75:1d:95:7e:7a:e6:e9:41:03:18:9b:2c:
8b:b7:7a:03:5a:c1:13:57:b2:2f:d4:63:4b:0b:e6:bc:c9:33:
cb:eb:95:c4:a3:18:8b:cb:d3:da:e5:96:dd:3c:7e:44:e0:ec:
74:1f:2e:07:bd:fd:b9:81:96:44:5d:86:74:14:93:99:22:8e:
19:cf:ca:91:61:92:e2:1e:9a:1c:bb:57:f9:36:72:b4:9b:67:
86:f5:1e:82:28:7b:5b:75:1d:22:9c:0b:0e:78:cb:1e:ac:87:
c5:60:fc:de
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBtswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0I0REYxMTAvBgNVBAUTKDFGRDhFQzdDNjU0N0FFQzUyQUQ3RTBFMEJDMzJDRjdD
QUEyMjFFMzcwHhcNMjYwNzI2MjMwNTAzWhcNMjYwODAyMjMwNTAzWjAYMRYwFAYD
VQQDEw02YTY2OTJhMC0zMTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtj6Y/h5cp/hwvEv4v0ngAqjZUUI4Bo12UxqWWSj7aBMge46O1F/t9sg8GdzF
NBtWAo4PqMZYr42eYmyc8XUcEhvjygfPWF1x/teg6Hmf+btmHrMJt9C4zxfVfqAf
NSQg7OUvp5Na3aA56rdeyFXSrjuwNhMD1fNzfoFfr9VrKD3N06dYWNI/QujI8KZp
nIGdeKFjY+CA8V82xsmusCJSPHJFZ2EViKJ+MZIsLhVa1yR8JrA3STm9dbvrFvX3
IUI/fYMJUJG+F2gvpGHmsofOW6npPZTPC7jU3H7z1/ipZrxlhRiEivPrLVBBCMqe
CRxXxmIi3FCQFRx6QLB5HrrXUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHRcc7ne
GqrYGDsVQq2mHi+PLYSRMB8GA1UdIwQYMBaAFB/Y7HxlR67FKtfg4Lwyz3yqIh43
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjRERi81Q0YxRjdBMkFE
NUUxMUVCQUREOTA1NzlDNEY5QUUwMi9IOWpzZkdWSHJzVXExLURndkRMUGZLb2lI
amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0g5anNmR1ZIcnNVcTEtRGd2RExQZktvaUhqYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QjRERi81Q0YxRjdBMkFENUUxMUVCQUREOTA1NzlDNEY5QUUwMi9IOWpzZkdWSHJz
VXExLURndkRMUGZLb2lIamMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZmkoTH9Zigy6gTEVmgRDSVmYd8TPlnI4KjQsyK3lZpFPMqvAGZQUtcr91xP/
I9ouSseRx9iWAXOSROy8QYKSYgC4SB7J5sxF68CxxxLQUAFOl4IIuhBk7QonnNOb
bD0tnVLbWW/537tCSbhBzw02iXSpok38bIMN/6VHMEHci1ap0yUVlFawSqgTqTRJ
B17BHmKs38cndR2Vfnrm6UEDGJssi7d6A1rBE1eyL9RjSwvmvMkzy+uVxKMYi8vT
2uWW3Tx+RODsdB8uB739uYGWRF2GdBSTmSKOGc/KkWGS4h6aHLtX+TZytJtnhvUe
gih7W3UdIpwLDnjLHqyHxWD83g==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:25:12 2026 by rpki-client