
$ rpki-client -vvf rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft
File: HJuixf6owDTaVR_a3GKlOnoC5ds.mft (raw, json)
Hash identifier: JPu0W1G/5mgR00wZnBL31zhg4CTpEVuEtvCiaEAWAdM=
Subject key identifier: B8:F4:B6:03:B5:3B:2D:6E:37:34:F0:EF:52:D9:A4:08:C6:96:8D:7D
Authority key identifier: 1C:9B:A2:C5:FE:A8:C0:34:DA:55:1F:DA:DC:62:A5:3A:7A:02:E5:DB
Certificate issuer: /CN=A9193D86/serialNumber=1C9BA2C5FEA8C034DA551FDADC62A53A7A02E5DB
Certificate serial: 0A4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft
Manifest number: 0A2B
Signing time: Tue 28 Jul 2026 20:04:56 +0000
Manifest this update: Tue 28 Jul 2026 20:04:55 +0000
Manifest next update: Tue 04 Aug 2026 20:04:55 +0000
Files and hashes: 1: HJuixf6owDTaVR_a3GKlOnoC5ds.crl (hash: z2PZPuYhLwVksQ6d/tlwHy4U0SFXWoF4oOX3MyJSoGU=)
2: 52FC6006A19911EA96035C38C4F9AE02.roa (hash: WcxNaiIGqzItQBb7CYbwvBMMYMGcLD8tEl0Q7aIbezo=)
3: 7B136C42CC8511EC8D238672C4F9AE02.roa (hash: f4XaB+bRmsoNFuDMRRMiph6D0qfKs6SQvSg9M2XJC3I=)
4: 79C02FB0CC8511EC8D238672C4F9AE02.roa (hash: PEyE0w8+UrcKJlHY3jaK16cYhVK4lg74ijcsWV2DoxU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.crl
rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:19:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2637 (0xa4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193D86, serialNumber=1C9BA2C5FEA8C034DA551FDADC62A53A7A02E5DB
Validity
Not Before: Jul 28 20:04:55 2026 GMT
Not After : Aug 4 20:04:55 2026 GMT
Subject: CN=6a690b67-e9a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:03:f9:ad:11:15:eb:e1:ac:48:ae:7e:f7:8e:
93:78:d6:34:84:fb:2b:e3:26:be:b5:f8:eb:f1:72:
94:69:07:72:f4:2e:1d:93:6d:ef:58:9d:fb:6d:aa:
e6:2a:1f:c7:36:b2:d9:9c:a4:08:09:84:e8:83:a8:
97:ed:26:75:ce:49:49:d7:e5:1f:ad:fe:c8:6f:8f:
1a:d3:41:a4:42:c5:f2:80:46:81:6c:cb:3f:c8:e2:
20:92:b6:97:9f:24:df:6c:31:2d:cf:ca:c0:37:7e:
b0:10:65:fa:38:09:fe:75:25:7e:41:fe:da:92:c9:
4c:18:d6:bb:ea:2f:a8:f9:e6:85:cc:af:7d:6e:6b:
09:b7:24:65:c3:ff:10:66:56:e0:0d:f0:55:8b:40:
7c:27:f7:11:de:b5:d8:dd:d6:40:5a:13:32:d2:29:
be:71:e5:b7:63:18:bf:1a:4d:ad:33:28:fd:72:48:
90:2e:62:ae:98:7a:f3:ef:35:0b:f7:12:b9:0d:aa:
c3:4d:92:4b:40:c8:3b:73:ef:12:3e:5c:53:2f:4b:
0e:e1:e4:9a:1c:e5:66:d8:7a:57:a4:c7:11:34:ed:
e9:b9:4a:9c:3b:70:4e:3d:ae:51:f8:51:d9:82:31:
e6:6b:be:d1:be:86:07:e6:29:f1:53:fe:7c:d5:84:
14:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F4:B6:03:B5:3B:2D:6E:37:34:F0:EF:52:D9:A4:08:C6:96:8D:7D
X509v3 Authority Key Identifier:
keyid:1C:9B:A2:C5:FE:A8:C0:34:DA:55:1F:DA:DC:62:A5:3A:7A:02:E5:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:ad:55:e3:79:b1:8a:50:36:7a:40:9c:c6:bf:5d:1a:15:c2:
ba:0c:bb:9f:d8:19:aa:48:3e:5e:0a:e9:15:8b:c9:c4:17:a6:
ef:ff:90:19:75:fc:36:ec:ae:5f:eb:8c:2d:f4:17:75:d0:61:
22:6a:00:8e:6c:a4:08:c5:0c:fa:e5:b2:38:a7:06:71:55:e9:
3d:b4:5a:70:0e:21:12:90:fc:6f:30:ee:f2:ad:bb:97:1b:8c:
04:1c:19:99:f0:cf:0b:a1:e3:dd:72:09:0a:cd:cd:d7:b3:c6:
72:78:6d:2e:ca:d7:38:60:dd:f2:25:13:53:c3:9b:81:e3:9a:
61:d6:6c:27:23:54:42:04:58:93:da:8a:11:09:d0:20:0f:d0:
bd:11:27:aa:c0:1d:f3:2b:8b:89:36:20:55:f0:0f:30:42:84:
f0:a4:2a:ca:12:2b:48:39:78:3c:43:a6:fb:29:b8:21:f8:4b:
4b:7e:58:d9:26:c6:a6:b3:df:d7:ed:b6:1a:9f:f4:af:06:03:
23:be:54:80:1d:f3:86:fb:31:d2:15:4c:b4:8a:fa:51:2b:a3:
82:23:ce:93:46:f5:51:f3:71:2f:af:77:90:ca:9b:34:b8:5c:
e3:94:42:2a:d9:8d:b8:da:d1:3d:bf:03:c6:04:b2:dd:03:eb:
f9:08:04:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:37:28 2026 by rpki-client