
$ rpki-client -vvf rpki.apnic.net/member_repository/A919337F/1B5BF7FE27AA11F1B751955AB7EE528E/hRn_LGgILMZHuCh2C0t7FJXshMs.mft
File: hRn_LGgILMZHuCh2C0t7FJXshMs.mft (raw, json)
Hash identifier: 8VzEwD2dOARcK2e0OO8rxTQq8JsameEOAvKBPw4x5Bg=
Subject key identifier: 31:06:B3:0D:04:8E:5E:4B:82:38:1E:05:67:80:4D:4F:70:3B:DA:0C
Authority key identifier: 85:19:FF:2C:68:08:2C:C6:47:B8:28:76:0B:4B:7B:14:95:EC:84:CB
Certificate issuer: /CN=A919337F/serialNumber=8519FF2C68082CC647B828760B4B7B1495EC84CB
Certificate serial: 43
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hRn_LGgILMZHuCh2C0t7FJXshMs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919337F/1B5BF7FE27AA11F1B751955AB7EE528E/hRn_LGgILMZHuCh2C0t7FJXshMs.mft
Manifest number: 42
Signing time: Tue 28 Jul 2026 18:04:43 +0000
Manifest this update: Tue 28 Jul 2026 18:04:42 +0000
Manifest next update: Tue 04 Aug 2026 18:04:42 +0000
Files and hashes: 1: hRn_LGgILMZHuCh2C0t7FJXshMs.crl (hash: TpPIodSYc9F6wPzpBDpYzuvOeNgYrzLTu/xFaXWxx2Y=)
2: DCF45DB827C111F19C6102CF9F833773.roa (hash: ASzg8hQDL/2aWq41h7X6nF+OfCE4FLFV0Neuc7HpczM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919337F/1B5BF7FE27AA11F1B751955AB7EE528E/hRn_LGgILMZHuCh2C0t7FJXshMs.crl
rsync://rpki.apnic.net/member_repository/A919337F/1B5BF7FE27AA11F1B751955AB7EE528E/hRn_LGgILMZHuCh2C0t7FJXshMs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hRn_LGgILMZHuCh2C0t7FJXshMs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 18:04:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67 (0x43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919337F, serialNumber=8519FF2C68082CC647B828760B4B7B1495EC84CB
Validity
Not Before: Jul 28 18:04:42 2026 GMT
Not After : Aug 4 18:04:42 2026 GMT
Subject: CN=6a68ef3b-4314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:7c:46:61:93:f4:85:10:41:c7:13:61:8f:6a:
9d:28:ce:bc:ac:b4:ca:17:c1:ed:86:30:51:ad:bc:
36:00:09:43:44:62:4d:27:4d:85:b7:26:e9:49:7c:
27:5b:ba:60:33:bf:cc:8a:f2:3e:a2:50:9d:59:6a:
6c:71:45:06:f0:f2:c5:90:aa:1d:37:f3:d5:02:44:
f0:aa:81:98:5c:13:36:19:52:dd:32:8d:b2:1d:4f:
b8:96:f2:c5:f0:ec:7e:a3:ac:1d:f0:06:43:b7:ef:
75:e9:cf:2f:e7:4f:04:52:c6:6e:ae:7a:76:15:41:
5b:23:e5:e1:87:f6:77:ec:64:88:50:99:e1:df:0f:
f9:5f:6e:cf:83:88:eb:9a:31:22:b8:8e:02:2c:e0:
88:2e:7a:7f:ec:c8:7a:5d:84:28:c1:39:a6:ed:ac:
e7:f6:54:e0:6c:7b:19:ca:76:68:fd:38:77:bd:12:
32:29:5a:09:aa:28:46:30:c3:e5:97:a0:a0:ec:b0:
fe:c1:fc:48:11:a0:e6:32:0d:e8:8e:ff:59:5c:8f:
fb:70:25:4b:9d:b3:ba:35:3b:11:80:a2:84:c7:62:
b8:a0:b4:bd:9b:c5:b6:4c:2e:b2:a1:1d:1e:4a:73:
02:37:6f:5c:0a:be:2f:2f:7d:ed:e5:70:b6:95:28:
fc:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:06:B3:0D:04:8E:5E:4B:82:38:1E:05:67:80:4D:4F:70:3B:DA:0C
X509v3 Authority Key Identifier:
keyid:85:19:FF:2C:68:08:2C:C6:47:B8:28:76:0B:4B:7B:14:95:EC:84:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919337F/1B5BF7FE27AA11F1B751955AB7EE528E/hRn_LGgILMZHuCh2C0t7FJXshMs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hRn_LGgILMZHuCh2C0t7FJXshMs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919337F/1B5BF7FE27AA11F1B751955AB7EE528E/hRn_LGgILMZHuCh2C0t7FJXshMs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:21:a5:45:de:56:ba:81:7a:1f:24:16:0d:f0:35:3e:05:dd:
44:ad:aa:46:51:62:8b:1c:de:2c:63:cd:84:85:c2:15:a8:03:
54:89:41:bf:de:24:1f:37:57:04:b5:f1:4b:19:17:dc:ff:b4:
9c:2a:61:56:71:00:66:4f:9e:12:ac:9a:19:98:d5:39:eb:35:
3a:bd:a8:f7:46:c1:7b:70:ff:60:02:04:6c:ea:3b:eb:9b:80:
11:8c:f0:ae:4f:53:f8:2c:7a:ce:18:12:22:77:33:ff:5e:7e:
dc:dd:a8:47:87:d5:3d:8f:17:fa:76:99:10:65:0a:db:23:af:
e8:4a:2a:5d:f0:c7:be:b3:fe:0d:41:e7:f3:6b:c3:e0:d8:dc:
63:0f:dd:91:c2:6a:b0:0b:7e:12:28:46:fe:0e:b5:ff:a6:75:
40:4f:3b:d1:e2:3b:62:a2:3b:b4:78:16:5c:53:d4:19:f4:fd:
96:54:ef:e2:d3:43:5a:90:df:f4:ab:f1:c8:e4:34:0f:00:69:
89:5a:a6:f6:4f:79:b0:65:48:7f:32:c8:f8:f5:20:d5:86:62:
05:eb:d6:2b:e3:8c:50:9e:dd:24:17:30:ba:1e:ee:e5:88:fd:
cc:09:7c:e3:3a:5e:21:cd:63:b0:5e:19:1d:18:63:f2:8f:72:
c1:43:55:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:43:14 2026 by rpki-client