
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft
File: h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft (raw, json)
Hash identifier: rAtIzCHHot7Lm5l4nP/yFASI/IQZ+sVjYfryssupQkI=
Subject key identifier: F4:9A:B8:E8:C0:2F:74:17:6B:4B:8F:09:E7:3A:31:70:99:F8:3D:2C
Authority key identifier: 87:8B:86:86:95:FC:45:C9:C6:3B:6F:BC:54:CC:B3:50:9C:4B:9F:4B
Certificate issuer: /CN=A918A35C/serialNumber=878B868695FC45C9C63B6FBC54CCB3509C4B9F4B
Certificate serial: 0C7E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft
Manifest number: 0C75
Signing time: Tue 28 Jul 2026 18:51:34 +0000
Manifest this update: Tue 28 Jul 2026 18:51:34 +0000
Manifest next update: Tue 04 Aug 2026 18:51:34 +0000
Files and hashes: 1: h4uGhpX8RcnGO2-8VMyzUJxLn0s.crl (hash: TCSqtIbKShwSbcsi8SyW1COwq1mePZJS7EZfstxpefM=)
2: 0D22F748261A11EA83CE8D17C4F9AE02.roa (hash: b+zymn1ltVuOppTrIVQmgPXI02QXRnzUgrsEcAqqyFw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.crl
rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 18:51:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3198 (0xc7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A35C, serialNumber=878B868695FC45C9C63B6FBC54CCB3509C4B9F4B
Validity
Not Before: Jul 28 18:51:34 2026 GMT
Not After : Aug 4 18:51:34 2026 GMT
Subject: CN=6a68fa36-c0ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c0:4f:44:42:18:a9:a7:a6:ce:a7:1f:81:9c:
9a:4f:da:36:70:ad:3c:47:26:08:e7:15:6f:a0:6b:
5b:96:98:6e:04:8b:c7:cf:cd:4e:8e:08:8f:c2:70:
29:f3:25:57:c8:51:8e:d2:91:83:e4:af:2c:ba:a8:
57:80:b6:dd:f9:19:93:cb:2d:2a:25:c8:24:e5:d9:
39:f6:a0:65:0b:87:18:85:c6:43:65:23:fc:47:ec:
17:0b:c5:83:00:a2:6a:8d:9f:38:d3:00:a4:f9:2e:
d7:95:ed:4e:5d:65:e0:05:d1:e0:0a:b3:dc:1d:27:
20:f1:eb:5a:86:eb:2e:45:94:31:39:4e:dc:73:54:
63:c1:1f:3d:5d:65:e0:94:e0:16:67:ff:30:f5:9f:
f7:d4:35:0e:5c:6b:b5:0c:8c:8b:49:8f:95:64:0f:
49:58:62:a4:49:73:d3:9f:14:50:4a:22:83:95:04:
2a:26:84:c3:6a:ea:59:5a:be:2b:db:0c:dd:bb:c2:
2e:fc:fb:ce:d8:e9:9f:e1:85:33:bd:ec:fa:23:41:
89:d8:6e:61:99:69:03:d4:73:32:25:0e:03:d1:cb:
b6:66:3b:03:75:35:08:0d:16:5e:41:90:53:ee:ad:
04:f5:88:79:4f:91:0d:26:26:9f:63:5e:82:5d:7c:
ab:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:9A:B8:E8:C0:2F:74:17:6B:4B:8F:09:E7:3A:31:70:99:F8:3D:2C
X509v3 Authority Key Identifier:
keyid:87:8B:86:86:95:FC:45:C9:C6:3B:6F:BC:54:CC:B3:50:9C:4B:9F:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:5d:08:5c:0e:53:6a:70:47:ec:4d:31:b1:9a:82:c2:37:40:
3b:f9:93:85:b9:9a:c3:6f:4a:70:68:43:71:18:c1:9e:b6:14:
19:4f:a4:45:33:d4:40:b0:a5:67:1d:c9:39:d8:dd:ac:bd:1f:
4d:8a:7c:30:50:37:47:ad:78:b4:91:84:d3:d7:72:3b:f7:21:
81:d5:c0:89:ca:87:be:44:60:43:3f:3e:24:bd:b7:69:af:b3:
9c:e7:16:81:5c:53:b4:35:2f:ac:71:ce:53:e2:14:75:8e:a7:
d0:d7:56:d9:b4:d7:bf:ac:47:b6:fd:4f:f2:4b:16:0f:e7:9a:
a5:84:22:e0:3a:e6:24:03:2a:2d:c0:b2:c4:2a:4c:93:56:79:
6c:95:9e:bb:a2:d0:25:cd:80:ae:ba:db:70:f8:cf:6f:da:77:
b2:46:bc:c2:fa:3f:e8:8a:d3:dc:d7:c1:e7:41:43:6b:31:fd:
5a:b4:ec:9b:eb:10:74:a5:30:b3:30:2f:45:3c:b2:19:90:1c:
85:82:ec:0b:e6:e4:0b:c9:c4:07:3b:c8:d1:fa:54:75:fc:11:
80:2d:c9:7a:df:03:8b:d0:ba:fc:b8:4a:5b:fa:28:bd:c2:05:
1d:fc:34:36:2e:26:2f:1c:59:33:bb:96:60:54:45:08:87:a3:
0b:6b:66:80
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEEzNUMxMTAvBgNVBAUTKDg3OEI4Njg2OTVGQzQ1QzlDNjNCNkZCQzU0Q0NCMzUw
OUM0QjlGNEIwHhcNMjYwNzI4MTg1MTM0WhcNMjYwODA0MTg1MTM0WjAYMRYwFAYD
VQQDEw02YTY4ZmEzNi1jMGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwsBPREIYqaemzqcfgZyaT9o2cK08RyYI5xVvoGtblphuBIvHz81OjgiPwnAp
8yVXyFGO0pGD5K8suqhXgLbd+RmTyy0qJcgk5dk59qBlC4cYhcZDZSP8R+wXC8WD
AKJqjZ840wCk+S7Xle1OXWXgBdHgCrPcHScg8etahusuRZQxOU7cc1RjwR89XWXg
lOAWZ/8w9Z/31DUOXGu1DIyLSY+VZA9JWGKkSXPTnxRQSiKDlQQqJoTDaupZWr4r
2wzdu8Iu/PvO2Omf4YUzvez6I0GJ2G5hmWkD1HMyJQ4D0cu2ZjsDdTUIDRZeQZBT
7q0E9Yh5T5ENJiafY16CXXyrUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPSauOjA
L3QXa0uPCec6MXCZ+D0sMB8GA1UdIwQYMBaAFIeLhoaV/EXJxjtvvFTMs1CcS59L
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTM1Qy81MkZDNkI5ODI2
MTgxMUVBQkZFREUxMTNDNEY5QUUwMi9oNHVHaHBYOFJjbkdPMi04Vk15elVKeExu
MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2g0dUdocFg4UmNuR08yLThWTXl6VUp4TG4wcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QTM1Qy81MkZDNkI5ODI2MTgxMUVBQkZFREUxMTNDNEY5QUUwMi9oNHVHaHBYOFJj
bkdPMi04Vk15elVKeExuMHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATV0IXA5TanBH7E0xsZqCwjdAO/mThbmaw29KcGhDcRjBnrYUGU+kRTPUQLCl
Zx3JOdjdrL0fTYp8MFA3R614tJGE09dyO/chgdXAicqHvkRgQz8+JL23aa+znOcW
gVxTtDUvrHHOU+IUdY6n0NdW2bTXv6xHtv1P8ksWD+eapYQi4DrmJAMqLcCyxCpM
k1Z5bJWeu6LQJc2ArrrbcPjPb9p3ska8wvo/6IrT3NfB50FDazH9WrTsm+sQdKUw
szAvRTyyGZAchYLsC+bkC8nEBzvI0fpUdfwRgC3Jet8Di9C6/LhKW/oovcIFHfw0
Ni4mLxxZM7uWYFRFCIejC2tmgA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:17:58 2026 by rpki-client