
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft
File: HTaU7xQhyRhUqIesqWELxWCucIQ.mft (raw, json)
Hash identifier: zWpYanlbmiLrvNk/SJvSoQB3hPbgzN9kbH3HKJJUhVI=
Subject key identifier: 9D:E0:28:65:96:5E:C1:6A:A6:35:FD:B3:55:DA:66:A3:30:7F:FB:E1
Authority key identifier: 1D:36:94:EF:14:21:C9:18:54:A8:87:AC:A9:61:0B:C5:60:AE:70:84
Certificate issuer: /CN=A919EB4E/serialNumber=1D3694EF1421C91854A887ACA9610BC560AE7084
Certificate serial: 0F80
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft
Manifest number: 0F55
Signing time: Fri 12 Jun 2026 17:31:47 +0000
Manifest this update: Fri 12 Jun 2026 17:31:47 +0000
Manifest next update: Fri 19 Jun 2026 17:31:47 +0000
Files and hashes: 1: HTaU7xQhyRhUqIesqWELxWCucIQ.crl (hash: ogn8BNdzGZ5H2/A/xTJXW24+2aNVPmKeiUtMIfo+S1k=)
2: F73EFF46839211EEA1EC8A0EC4F9AE02.roa (hash: JnEr1ULSbKqalMG/ES7bWBOgeNVDSEEFX8LfergGB94=)
3: 7A40B730E2D811EBAB97665DC4F9AE02.roa (hash: CzoXjxwwafDE/0X1/IFRvm6Y/QHPkUJqqlhM2vR6GHQ=)
4: 89A93D5E971811E9AE51CA15C4F9AE02.roa (hash: HJroJ49BIbNGAuccbium1kEpSjVPB8qo4E6nRxSwoW8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.crl
rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:31:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3968 (0xf80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EB4E, serialNumber=1D3694EF1421C91854A887ACA9610BC560AE7084
Validity
Not Before: Jun 12 17:31:47 2026 GMT
Not After : Jun 19 17:31:47 2026 GMT
Subject: CN=6a2c4283-bd49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:59:21:76:87:9c:18:f6:05:66:eb:df:90:c7:
18:22:0b:52:20:1a:86:df:a3:27:52:19:de:bc:98:
78:3c:48:52:ee:78:9c:d8:87:df:19:c5:6d:d9:d2:
a1:04:52:04:3b:4a:af:2b:d1:a0:88:5d:b1:fa:9e:
32:05:98:7b:02:34:93:e9:83:41:d3:82:40:cb:23:
f9:00:9a:57:f0:1a:ff:c9:66:ab:5b:27:6d:7a:fd:
78:3f:44:79:06:f2:f3:1f:f0:24:e8:59:59:2b:fe:
00:19:d3:6c:9c:6a:36:09:bf:51:d5:cd:d8:b2:73:
23:0d:15:47:81:23:99:4e:26:08:0a:17:11:a1:50:
a0:35:01:84:93:a5:dd:a5:b0:1c:eb:5f:93:17:f8:
3d:f3:24:4b:ae:ec:af:d7:2f:bd:f7:06:32:44:4e:
fb:30:4a:b6:f3:62:85:46:9b:ee:99:72:be:4c:61:
55:db:b7:14:75:14:80:9e:9d:bc:53:89:05:36:9b:
bd:06:c9:d8:5c:aa:99:e8:0f:28:fb:f2:38:30:8c:
06:34:83:61:98:87:63:ef:3c:bd:62:71:7c:06:41:
b5:8e:c9:7a:4b:2a:dc:49:d8:31:59:30:30:a7:57:
62:90:77:4b:9a:e9:fe:2d:c7:65:eb:8d:28:e0:fb:
2a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E0:28:65:96:5E:C1:6A:A6:35:FD:B3:55:DA:66:A3:30:7F:FB:E1
X509v3 Authority Key Identifier:
keyid:1D:36:94:EF:14:21:C9:18:54:A8:87:AC:A9:61:0B:C5:60:AE:70:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:bf:04:a7:9f:22:41:76:d6:5e:07:fc:6f:b8:8a:7f:0e:40:
6a:fe:7d:15:4e:b1:85:8f:78:c6:2f:b4:79:7d:82:6a:2b:f8:
39:6d:23:59:21:58:4a:a4:03:c3:08:f3:bc:bc:be:41:4f:c7:
aa:16:79:00:ba:35:5a:e8:be:35:8a:06:1a:76:d6:6a:cf:4c:
7b:a9:3c:a0:ef:fb:62:99:9d:78:aa:d5:00:e9:b7:49:39:08:
8e:09:4c:fa:f4:da:e7:53:e4:fb:f1:48:72:d7:78:d8:53:a5:
27:17:dc:f6:58:63:ef:b9:3d:4a:6a:ec:e4:41:fb:9e:0c:03:
1e:b4:1b:d5:ba:1b:1b:e1:a6:a3:11:a5:b8:d1:32:c5:8a:a0:
c6:c7:ee:64:81:eb:7f:73:01:72:20:a8:bc:38:1c:b6:c5:30:
58:19:bf:3e:d2:0e:60:bc:74:3d:4d:93:fa:dd:d2:6e:33:d9:
43:75:5f:3e:95:b6:38:09:23:c3:12:86:03:c1:f8:59:e6:ed:
d6:f0:c2:ae:4c:0a:cf:c0:9e:b4:60:f3:6e:32:df:09:a7:a1:
15:19:35:d4:5e:50:13:89:f1:07:f6:bc:1c:af:c6:09:b2:d5:
94:37:cf:e0:09:b0:f3:48:2c:d8:9b:79:08:b3:bf:d8:6d:a3:
bd:06:26:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:59:27 2026 by rpki-client