
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/HG_z7AmClLQtl58ltpYFkj4czu8.mft
File: HG_z7AmClLQtl58ltpYFkj4czu8.mft (raw, json)
Hash identifier: i1GA29h7gwCa62bbMfZ1Kf6MfA19HNzb1I9vO9XZSnc=
Subject key identifier: 50:3E:BE:3F:D2:A9:78:96:DB:1D:4D:E6:CE:1B:D1:5F:94:A3:BE:08
Authority key identifier: 1C:6F:F3:EC:09:82:94:B4:2D:97:9F:25:B6:96:05:92:3E:1C:CE:EF
Certificate issuer: /CN=A917C81C/serialNumber=1C6FF3EC098294B42D979F25B69605923E1CCEEF
Certificate serial: 50
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HG_z7AmClLQtl58ltpYFkj4czu8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/HG_z7AmClLQtl58ltpYFkj4czu8.mft
Manifest number: 47
Signing time: Thu 16 Apr 2026 22:57:22 +0000
Manifest this update: Thu 16 Apr 2026 22:57:21 +0000
Manifest next update: Thu 23 Apr 2026 22:57:21 +0000
Files and hashes: 1: HG_z7AmClLQtl58ltpYFkj4czu8.crl (hash: eBxrf2an1bUSM/nYRXAHk4YACDl1aTSKfEuyanZG39w=)
2: EB9160CCDFD811F08F00FF64536F56BC.roa (hash: F8WI3I+cVK027+UsBVl1Tcfy5kv9U/Wvm6A/E5S0bZk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/HG_z7AmClLQtl58ltpYFkj4czu8.crl
rsync://rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/HG_z7AmClLQtl58ltpYFkj4czu8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HG_z7AmClLQtl58ltpYFkj4czu8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:57:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80 (0x50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C81C, serialNumber=1C6FF3EC098294B42D979F25B69605923E1CCEEF
Validity
Not Before: Apr 16 22:57:21 2026 GMT
Not After : Apr 23 22:57:21 2026 GMT
Subject: CN=69e16951-66db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:06:d3:4e:46:73:cb:dc:d2:3b:11:2c:f3:01:
58:09:ad:5b:36:17:15:c8:ab:07:11:33:95:7c:b5:
94:17:ed:f5:af:50:12:e2:b2:80:c0:43:ac:83:d7:
20:fd:90:d6:7b:03:23:86:b5:b9:d6:66:c8:1c:1f:
cf:f8:29:e1:72:f3:07:18:8e:cb:2d:37:ef:b3:c8:
c7:2d:61:05:71:16:36:64:16:d8:c2:4e:ed:4e:fb:
67:6d:7a:6d:a2:87:19:b8:57:4d:98:45:83:0e:e9:
39:e8:eb:25:0b:e6:b3:77:ce:db:05:15:48:e1:1a:
b6:01:4a:65:53:43:45:fb:cd:e6:23:af:01:be:4d:
89:8d:68:fb:cc:84:ff:28:0e:26:61:14:06:fd:2d:
b3:78:d7:7a:e0:67:97:44:5c:70:3a:c0:f2:e0:74:
e4:af:40:c1:2c:ce:fe:82:11:d2:18:9a:6f:dc:ae:
d6:bf:88:ed:70:c8:60:9b:65:f4:3d:7f:ff:72:c6:
ea:42:cd:fc:92:d5:d1:90:57:72:93:27:3e:3b:fd:
25:07:31:1e:ce:f7:2e:c3:ce:fd:71:61:0a:e7:4e:
93:0e:68:1f:fa:35:37:83:8c:51:c2:ba:81:39:7a:
51:41:8c:43:10:6c:35:9e:c9:67:34:d3:97:2e:36:
93:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:3E:BE:3F:D2:A9:78:96:DB:1D:4D:E6:CE:1B:D1:5F:94:A3:BE:08
X509v3 Authority Key Identifier:
keyid:1C:6F:F3:EC:09:82:94:B4:2D:97:9F:25:B6:96:05:92:3E:1C:CE:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/HG_z7AmClLQtl58ltpYFkj4czu8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HG_z7AmClLQtl58ltpYFkj4czu8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/HG_z7AmClLQtl58ltpYFkj4czu8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:42:41:ad:a7:b6:55:dd:9c:c2:d0:81:10:a6:09:b4:03:3c:
f4:3c:dd:5d:17:8e:f6:7f:73:22:9a:4a:b0:89:e0:88:f5:37:
dd:8f:8c:06:d4:ab:8d:40:74:92:77:50:f9:50:fd:9d:bf:ae:
46:38:23:49:ee:03:44:14:f6:32:26:39:e5:4a:84:96:f2:32:
0f:21:cb:32:a1:b2:06:5a:0b:3c:9f:8f:5c:ba:b4:2f:20:9e:
de:3f:b2:3c:f9:48:a3:bd:85:64:6b:1b:c7:73:f5:a7:43:54:
bf:c2:d4:a9:a8:01:58:c3:bc:c5:2d:5d:39:d9:54:6c:2c:b9:
07:81:b1:dd:c9:5f:6d:27:82:42:af:be:a3:06:ef:76:d8:13:
0b:58:18:d3:0e:d6:e1:3a:a1:90:06:3a:46:36:18:ae:78:24:
56:68:b2:e5:6c:e5:36:92:3a:f0:6d:d8:52:c0:c6:df:e8:3a:
b2:5a:42:25:0e:89:71:d2:74:bc:8e:57:11:c1:47:87:c9:37:
a9:01:e2:27:8e:f4:51:1a:5e:4b:d6:08:33:11:f6:e8:6e:c3:
1a:87:74:a8:0d:58:c1:37:0d:91:e2:e1:69:fc:ad:b9:9b:5c:
b2:34:27:3c:5f:aa:29:4c:c0:a0:0f:88:71:92:af:07:c2:37:
cf:f4:be:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:50:54 2026 by rpki-client