
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/HG_z7AmClLQtl58ltpYFkj4czu8.mft
File: HG_z7AmClLQtl58ltpYFkj4czu8.mft (raw, json)
Hash identifier: AJff8PnTdjywuWDexcJCWpEB9iFeB/rBoriVw9FrroI=
Subject key identifier: 5C:0D:6D:DF:E3:F2:B0:62:50:10:B8:53:C6:E3:33:1C:AC:8C:61:0E
Authority key identifier: 1C:6F:F3:EC:09:82:94:B4:2D:97:9F:25:B6:96:05:92:3E:1C:CE:EF
Certificate issuer: /CN=A917C81C/serialNumber=1C6FF3EC098294B42D979F25B69605923E1CCEEF
Certificate serial: 84
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HG_z7AmClLQtl58ltpYFkj4czu8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/HG_z7AmClLQtl58ltpYFkj4czu8.mft
Manifest number: 7B
Signing time: Tue 28 Jul 2026 23:30:38 +0000
Manifest this update: Tue 28 Jul 2026 23:30:37 +0000
Manifest next update: Tue 04 Aug 2026 23:30:37 +0000
Files and hashes: 1: HG_z7AmClLQtl58ltpYFkj4czu8.crl (hash: Q/FkoJM4NyFY9XicFIpHGjpMVFeDF1WVh66CL2033to=)
2: EB9160CCDFD811F08F00FF64536F56BC.roa (hash: F8WI3I+cVK027+UsBVl1Tcfy5kv9U/Wvm6A/E5S0bZk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/HG_z7AmClLQtl58ltpYFkj4czu8.crl
rsync://rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/HG_z7AmClLQtl58ltpYFkj4czu8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HG_z7AmClLQtl58ltpYFkj4czu8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 23:30:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132 (0x84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C81C, serialNumber=1C6FF3EC098294B42D979F25B69605923E1CCEEF
Validity
Not Before: Jul 28 23:30:37 2026 GMT
Not After : Aug 4 23:30:37 2026 GMT
Subject: CN=6a693b9e-7e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7c:37:82:50:55:3a:45:bc:06:76:67:4e:bd:
d5:22:43:2b:c8:69:f0:a0:a6:27:3c:73:ef:2e:5a:
06:9a:4f:e2:d7:b0:6d:73:38:76:10:75:e1:b6:c2:
ca:1d:48:30:9f:8b:b8:42:74:47:c2:59:5c:cd:1e:
09:54:dd:33:20:51:2d:d0:cf:8a:5d:dd:e0:de:da:
28:2f:22:b7:8d:6f:9b:5f:f1:a3:a9:bc:18:19:95:
6b:7b:e2:21:26:a3:8f:78:be:2d:d1:d4:83:a1:75:
7a:1f:c7:69:b5:b4:3c:60:8c:7b:56:52:1c:31:43:
c8:05:fc:0e:78:22:55:68:07:e5:c2:99:4c:ed:f5:
12:d0:68:fd:2a:72:91:96:73:3e:be:92:e7:c9:ba:
8f:1d:be:b2:18:2a:c0:33:d8:0b:23:00:e8:c9:09:
10:19:74:06:37:0e:33:53:e7:03:d7:e5:e7:ea:89:
5f:15:0a:69:2a:78:f2:00:5a:53:36:a3:ca:4e:ce:
09:cf:be:9b:2e:e3:98:b1:66:4e:bb:b3:0e:99:e1:
24:28:fc:5b:9f:d6:7b:9f:65:99:3b:ae:d7:6e:8a:
8f:a8:68:16:9c:22:40:17:2b:b1:42:09:4a:2a:71:
90:52:2a:92:4d:f0:b3:5b:6f:a0:0d:57:8d:ab:12:
ca:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:0D:6D:DF:E3:F2:B0:62:50:10:B8:53:C6:E3:33:1C:AC:8C:61:0E
X509v3 Authority Key Identifier:
keyid:1C:6F:F3:EC:09:82:94:B4:2D:97:9F:25:B6:96:05:92:3E:1C:CE:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/HG_z7AmClLQtl58ltpYFkj4czu8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HG_z7AmClLQtl58ltpYFkj4czu8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/HG_z7AmClLQtl58ltpYFkj4czu8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:f2:b6:c9:1f:89:85:34:66:21:ab:44:51:cb:c1:59:27:0c:
33:1c:25:d5:ed:bf:f6:cc:47:ab:13:04:3c:f7:94:f6:fc:65:
46:81:8f:71:6a:2d:00:4b:f2:9e:bb:09:24:27:37:40:6b:b8:
2a:33:96:c6:ff:b1:be:f9:0f:c9:c6:71:cd:74:95:3d:d7:25:
3a:8d:08:fc:ba:cd:6d:7a:b3:2c:d4:d5:7a:06:bb:88:a9:72:
46:b0:52:19:6b:9a:56:64:a2:6a:2e:ff:ce:99:65:b1:ae:f9:
44:63:90:82:12:9d:fa:6f:4c:34:10:2d:79:69:6d:ac:5f:a0:
a3:9e:36:4e:1b:3e:13:2a:db:53:8c:9d:85:ed:6e:77:23:b2:
f2:5d:25:e5:98:df:7a:26:c9:d0:18:c1:fe:4e:61:23:fe:91:
6b:2c:0f:03:43:8e:c9:c1:e7:2c:87:6c:c2:8a:0f:8d:50:79:
31:a7:39:95:86:92:e6:f2:d0:75:e1:88:e7:58:81:f2:89:73:
a1:82:7d:e2:e6:a2:6c:90:2b:1b:96:fb:df:4a:60:3a:4c:54:
7d:2f:26:fd:44:6b:7f:9c:09:d3:61:cc:de:be:67:b0:08:2f:
82:7e:b3:c8:62:d9:6b:1a:d7:4a:7e:43:38:68:6e:34:ec:ee:
45:78:c2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:56:19 2026 by rpki-client