
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft
File: HTaU7xQhyRhUqIesqWELxWCucIQ.mft (raw, json)
Hash identifier: xalUaNAjBqtEX1lPFI3O72y6kO+xMJntHpyWGKw0Xko=
Subject key identifier: F9:E2:18:29:D5:73:9F:79:C7:EE:91:67:14:EE:89:9A:A5:AC:4C:2F
Authority key identifier: 1D:36:94:EF:14:21:C9:18:54:A8:87:AC:A9:61:0B:C5:60:AE:70:84
Certificate issuer: /CN=A919EB4E/serialNumber=1D3694EF1421C91854A887ACA9610BC560AE7084
Certificate serial: 0F97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft
Manifest number: 0F6C
Signing time: Tue 28 Jul 2026 17:39:30 +0000
Manifest this update: Tue 28 Jul 2026 17:39:30 +0000
Manifest next update: Tue 04 Aug 2026 17:39:30 +0000
Files and hashes: 1: HTaU7xQhyRhUqIesqWELxWCucIQ.crl (hash: BiDQymC/V2mNu5OCdrsBXnPLpRKwId9F2ygTyoYfqmc=)
2: F73EFF46839211EEA1EC8A0EC4F9AE02.roa (hash: JnEr1ULSbKqalMG/ES7bWBOgeNVDSEEFX8LfergGB94=)
3: 89A93D5E971811E9AE51CA15C4F9AE02.roa (hash: HJroJ49BIbNGAuccbium1kEpSjVPB8qo4E6nRxSwoW8=)
4: 7A40B730E2D811EBAB97665DC4F9AE02.roa (hash: CzoXjxwwafDE/0X1/IFRvm6Y/QHPkUJqqlhM2vR6GHQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.crl
rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 17:39:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3991 (0xf97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EB4E, serialNumber=1D3694EF1421C91854A887ACA9610BC560AE7084
Validity
Not Before: Jul 28 17:39:30 2026 GMT
Not After : Aug 4 17:39:30 2026 GMT
Subject: CN=6a68e952-f1fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:73:74:ba:ac:1a:df:16:b3:61:9c:3d:a7:64:
f8:c2:0c:2a:78:c9:3a:11:42:a3:7b:3d:8e:5c:b9:
e2:83:d6:d0:06:22:a6:19:13:61:0b:7f:c3:e7:93:
6d:d7:a1:64:5a:80:54:63:53:12:ae:41:c4:20:74:
20:c2:7d:30:a8:d3:8f:0c:ad:78:31:15:15:d7:95:
f8:9d:82:eb:15:76:e3:da:6d:e7:d5:72:44:8f:47:
4a:84:91:45:c2:db:ce:2b:01:1f:de:42:b3:ff:a3:
44:fe:51:0b:a8:f8:12:85:e7:05:13:41:66:af:05:
9f:23:2b:9f:98:a9:f1:db:76:7f:0a:ff:2d:7b:66:
09:ad:13:32:84:33:9f:d6:05:c0:cc:15:e6:18:54:
62:57:1d:39:1c:ce:a1:b1:03:82:0b:9d:db:33:bf:
9b:48:8c:bc:f0:d6:4f:1a:a8:69:7b:71:e6:15:7d:
81:7b:de:f9:d1:58:91:7c:da:23:c7:89:bc:42:bb:
3b:3d:74:26:dc:21:ac:93:d2:7a:bc:15:d5:71:a9:
69:ba:29:4b:ce:ef:ae:ff:1a:45:2c:cf:3f:87:b8:
8d:37:79:a7:47:4b:2f:5c:80:99:89:06:26:ee:ba:
54:57:e1:d6:30:91:46:a8:d6:d1:4d:7a:bf:e0:59:
44:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E2:18:29:D5:73:9F:79:C7:EE:91:67:14:EE:89:9A:A5:AC:4C:2F
X509v3 Authority Key Identifier:
keyid:1D:36:94:EF:14:21:C9:18:54:A8:87:AC:A9:61:0B:C5:60:AE:70:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d3:7a:39:bf:d5:e4:b5:8d:c5:4f:08:c0:32:d4:91:70:ab:
c3:ae:c1:0e:45:d5:4b:ff:34:4c:15:a6:a3:63:63:93:18:4b:
f6:e5:f1:8e:2f:fc:14:dc:ab:20:e2:00:3d:ac:f7:dd:d0:4c:
1c:8e:74:00:0e:ae:7c:ff:f8:6d:f3:de:5f:39:e9:3e:e3:78:
b3:40:99:c3:28:ea:7f:c8:4b:db:0d:8b:4b:97:94:3f:c2:4b:
87:6b:39:7c:fd:6c:f5:04:eb:28:8e:e3:a9:39:b7:50:63:de:
bc:3e:96:e0:e4:27:fd:6e:ff:22:83:d5:dc:1d:1f:32:fb:e9:
a8:3e:a7:45:17:0a:e4:c8:6e:b7:4e:d7:26:a5:6f:1e:d9:75:
62:36:e6:cc:31:f0:b6:23:49:84:40:c2:9d:87:4e:8a:ca:da:
b6:6f:6e:fb:15:53:7c:bc:4a:bf:70:b5:da:d6:82:e0:9e:02:
4c:b7:d9:ee:ff:eb:5b:12:3d:3e:0a:61:e8:c9:8b:26:8e:93:
5c:7c:5d:75:c5:1d:c4:e0:89:7d:f0:01:18:ee:e7:dc:ae:36:
94:d1:ba:6d:17:e8:74:11:b8:8b:d5:55:6e:15:d4:73:94:36:
af:06:6e:fb:3a:43:2a:4a:aa:74:4b:cc:3a:8c:d5:5f:0e:1b:
03:64:eb:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:00:15 2026 by rpki-client