
$ rpki-client -vvf rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft
File: SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft (raw, json)
Hash identifier: L/S3YSR3K/8czpkIOrf7uFCLBnwrP4opFwZ0KyUiHbk=
Subject key identifier: 2C:D7:B5:A6:55:20:8F:1C:17:38:3F:A6:EC:00:2F:2D:07:0A:3F:29
Authority key identifier: 4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB
Certificate issuer: /CN=A91896D4/serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB
Certificate serial: 02CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft
Manifest number: 02B3
Signing time: Mon 27 Jul 2026 02:53:33 +0000
Manifest this update: Mon 27 Jul 2026 02:53:32 +0000
Manifest next update: Mon 03 Aug 2026 02:53:32 +0000
Files and hashes: 1: SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl (hash: BpGcHVMnit4B5DoXhGtV5LsoEn/OrHUPLatyvu1/DPs=)
2: C93A47F63ABB11EE8A78BE4CC4F9AE02.roa (hash: kt58U+JdwwoWOrJfOurK3ZzukKhfcE+5o9qCOQ61N04=)
3: 6985BF0062D611EEB5C5721CC4F9AE02.roa (hash: RnuV+1DoXIf2HDUvOKaEZgCO7oWGACeQmNMNZ7oeAtg=)
4: CD23AE8C403011EEA773CE47C4F9AE02.roa (hash: 3thOWBScBaW27emyNgWIB6Tm9y3isPfdf3d0Ik133Zg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl
rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 02:53:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 719 (0x2cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91896D4, serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB
Validity
Not Before: Jul 27 02:53:32 2026 GMT
Not After : Aug 3 02:53:32 2026 GMT
Subject: CN=6a66c82d-fab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ad:eb:6e:20:c0:90:ca:39:43:64:52:ad:78:
99:bf:f2:1c:60:f1:b4:73:8b:f6:a1:7c:93:83:da:
89:ec:ed:d5:28:f9:c4:ce:7a:27:45:29:03:f3:b1:
7d:c1:ab:96:d6:b0:93:99:27:f2:fe:09:ba:b0:29:
cd:9a:6a:00:c7:59:05:83:65:a8:1b:6d:f4:d8:48:
78:7d:ea:65:7d:eb:d8:21:d0:2f:ce:00:cd:79:93:
42:55:77:e9:7a:89:6d:bb:a0:d5:52:3e:c4:3c:47:
89:57:f4:cd:40:07:0b:a6:c7:8c:88:77:4c:54:37:
5c:f3:2d:21:2a:50:6b:eb:1f:07:9b:78:dd:bc:04:
df:b5:61:3f:cd:ad:3b:9a:d4:0b:c9:6f:92:d7:11:
5e:b2:fa:ed:ee:8b:b9:ff:77:69:80:9c:a1:c4:7d:
f8:ea:f4:84:63:0f:f4:7a:c2:29:e0:0b:d0:9c:ed:
97:66:9d:80:b2:6e:8e:85:bd:dc:af:ee:38:ce:dc:
2e:fa:92:bc:97:1b:56:5d:d0:bb:22:69:40:ad:33:
f3:18:b1:8c:76:78:01:fe:fb:96:41:82:3e:48:a1:
7e:d2:ba:d2:5d:f3:e1:dc:99:62:f8:3e:09:b2:86:
26:66:f0:0b:02:1d:1b:0e:e9:f5:09:e9:14:38:f9:
5d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D7:B5:A6:55:20:8F:1C:17:38:3F:A6:EC:00:2F:2D:07:0A:3F:29
X509v3 Authority Key Identifier:
keyid:4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d0:60:96:6f:cc:03:95:7d:55:5e:8a:93:b8:0d:33:ae:5a:74:
13:a6:33:a2:29:50:41:88:ac:52:a5:d4:80:7d:0d:35:0a:d0:
5b:56:73:d6:0d:8d:d6:e7:c4:5b:2a:9c:bc:21:21:14:f2:10:
ca:94:fc:6d:85:a5:c3:63:bb:fd:fd:a0:83:29:91:f5:8a:fb:
79:8f:aa:b3:83:22:75:1c:e7:4c:61:ec:89:89:d0:52:17:38:
9f:6f:91:c0:b2:4b:fc:7d:ea:53:ba:8a:8a:e0:9d:ea:b8:78:
9d:80:37:d2:2a:ed:3a:38:6d:da:bf:5f:62:ea:b5:3b:12:ba:
ca:d3:e3:9d:1f:4b:13:26:0a:f7:e1:db:63:d8:45:42:81:8d:
3f:88:89:ee:b2:96:74:59:68:dc:6f:7f:9f:19:27:ce:d4:e7:
ad:2d:83:cc:78:dc:6b:50:e7:83:b2:54:26:ef:b4:41:ff:f0:
42:d1:0f:87:a1:0b:1b:c8:a0:ed:e8:a2:4f:27:06:20:a3:ac:
8d:57:b0:45:fa:06:6c:e8:4d:96:bc:95:e8:a7:44:e4:4e:69:
20:3c:a4:fc:d4:89:7c:d9:86:f1:eb:6d:36:b0:be:2b:ec:ab:
dc:b9:c0:e3:a3:5d:3f:a7:24:8d:2f:cb:f0:36:7c:10:74:31:
da:69:02:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:22:51 2026 by rpki-client