
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.mft
File: hbfttaaEvj2aYpdZkKcdmY3vUYs.mft (raw, json)
Hash identifier: l0kHh8t7Dt6g7sjsX++MFitOM+IvG2C9iYrkknEN6Uo=
Subject key identifier: D6:B8:14:75:5F:1D:73:25:09:66:B7:28:FC:2C:32:CD:B3:0C:23:F4
Authority key identifier: 85:B7:ED:B5:A6:84:BE:3D:9A:62:97:59:90:A7:1D:99:8D:EF:51:8B
Certificate issuer: /CN=A91B62E1/serialNumber=85B7EDB5A684BE3D9A62975990A71D998DEF518B
Certificate serial: 80
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbfttaaEvj2aYpdZkKcdmY3vUYs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.mft
Manifest number: 7E
Signing time: Mon 27 Jul 2026 09:52:53 +0000
Manifest this update: Mon 27 Jul 2026 09:52:53 +0000
Manifest next update: Mon 03 Aug 2026 09:52:53 +0000
Files and hashes: 1: hbfttaaEvj2aYpdZkKcdmY3vUYs.crl (hash: odexW+/7gWAULUkzt7DPeaDqbeEJpNSoMbkuwTwxl/s=)
2: 146F4288C8E711F0A7C33B4CC4F9AE02.roa (hash: mWJy1v+ne8mjUCBxQ8B6n5ShRR6xhgziEl5EgVMvzV0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.crl
rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbfttaaEvj2aYpdZkKcdmY3vUYs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:52:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128 (0x80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B62E1, serialNumber=85B7EDB5A684BE3D9A62975990A71D998DEF518B
Validity
Not Before: Jul 27 09:52:53 2026 GMT
Not After : Aug 3 09:52:53 2026 GMT
Subject: CN=6a672a75-7bcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:44:74:34:06:5b:e2:c7:c1:d8:ea:6d:56:ee:
61:99:bb:38:b2:78:19:bc:18:10:97:37:d9:d7:43:
69:d6:b2:fa:47:90:bb:ea:44:08:77:0e:3a:07:f8:
d9:7d:c7:b3:5f:7c:39:cb:29:08:2c:63:c1:db:80:
d8:6b:fd:59:47:00:a7:a4:66:e2:c5:eb:a0:a5:06:
78:3b:e7:ba:d5:9b:00:7a:3e:8d:ad:1e:17:41:45:
ff:b5:dc:c9:b5:05:e9:cd:6a:a5:a3:37:c1:81:0f:
16:6e:df:10:84:29:81:4f:58:bf:53:7d:38:d3:c9:
20:1f:d8:c3:f9:79:8f:76:5d:fd:70:f3:41:69:7d:
03:58:75:49:af:22:d2:81:98:76:41:c5:89:17:99:
2a:dc:5f:9c:c9:a7:10:9f:0a:a6:e8:db:ae:59:54:
7c:b0:47:8c:ac:cb:bd:f5:22:1e:4b:58:d9:02:bc:
1f:c6:c5:db:ab:a4:a6:19:a4:02:f5:de:25:98:67:
15:1f:31:8a:fc:5e:e4:da:fe:8e:2d:78:f6:67:cb:
69:5b:5f:10:0e:e5:9e:8c:24:ec:97:a6:af:6c:c9:
db:d0:52:bc:99:84:3b:62:16:91:05:cb:2c:36:4a:
6a:23:f7:d6:8c:62:cc:89:7d:0b:12:e9:62:24:16:
34:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B8:14:75:5F:1D:73:25:09:66:B7:28:FC:2C:32:CD:B3:0C:23:F4
X509v3 Authority Key Identifier:
keyid:85:B7:ED:B5:A6:84:BE:3D:9A:62:97:59:90:A7:1D:99:8D:EF:51:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbfttaaEvj2aYpdZkKcdmY3vUYs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:c3:ea:84:2a:2e:dc:98:a9:92:14:bd:f7:cc:86:87:0a:ba:
46:74:83:3a:d0:a6:43:28:0f:10:40:ea:d6:a8:8d:8d:19:af:
07:9d:0a:c1:89:b7:a6:aa:4d:63:d8:4d:56:c7:4b:01:6b:df:
64:82:cd:da:72:e4:ab:d4:ac:d0:4f:12:94:1d:42:e4:43:cd:
f1:7c:f0:98:9f:72:14:39:15:53:4e:0b:66:d6:54:96:4e:51:
f2:d5:da:bb:5b:3b:50:65:09:f4:a2:03:d6:ab:55:86:62:6f:
8d:19:99:c0:b4:21:75:95:fa:85:95:6a:48:4f:7b:ea:63:5f:
f5:a9:55:05:67:47:72:80:f6:8b:54:11:a5:32:45:df:27:48:
bc:bc:24:81:50:22:ba:41:2a:ff:c3:5c:44:a1:da:3c:f8:ce:
21:fe:52:71:38:90:bb:33:3f:b1:ca:7e:25:15:e2:33:b6:22:
eb:29:37:89:4b:1d:54:96:f3:ce:ea:b1:f4:35:bb:db:32:5f:
c1:21:08:b8:37:d5:cb:9f:3a:05:3f:80:7c:21:16:e2:c4:cd:
7b:9d:55:9a:39:8c:06:e5:f8:04:fc:75:f0:74:c5:f3:c7:b5:
a9:e1:96:f7:68:fd:54:b3:57:e3:4a:42:13:0f:51:41:29:b0:
36:9e:02:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:21:58 2026 by rpki-client