
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.mft
File: hs2LQhipuaG84vrF7m3HhbAKkx0.mft (raw, json)
Hash identifier: oV/H7QXsTpsQczrToqMdIJbapogYhil+XmH9s+bOkPY=
Subject key identifier: 3F:0A:B2:A2:66:18:71:5D:44:00:46:CF:6C:F3:7C:48:28:81:F4:AF
Authority key identifier: 86:CD:8B:42:18:A9:B9:A1:BC:E2:FA:C5:EE:6D:C7:85:B0:0A:93:1D
Certificate issuer: /CN=A91BF28F/serialNumber=86CD8B4218A9B9A1BCE2FAC5EE6DC785B00A931D
Certificate serial: 030E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hs2LQhipuaG84vrF7m3HhbAKkx0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.mft
Manifest number: 02E9
Signing time: Mon 27 Jul 2026 02:36:42 +0000
Manifest this update: Mon 27 Jul 2026 02:36:41 +0000
Manifest next update: Mon 03 Aug 2026 02:36:41 +0000
Files and hashes: 1: hs2LQhipuaG84vrF7m3HhbAKkx0.crl (hash: Tq42WhbSq+Y8bejGZgsnZc5l2Hog9269hVSPIJs12M8=)
2: FB9DB0B8778011EFA197A558C4F9AE02.roa (hash: NdFnlMSr/V5noQXIsNx/D5f9zVB2iTgM5spp/nQu96Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.crl
rsync://rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hs2LQhipuaG84vrF7m3HhbAKkx0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 02:36:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 782 (0x30e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF28F, serialNumber=86CD8B4218A9B9A1BCE2FAC5EE6DC785B00A931D
Validity
Not Before: Jul 27 02:36:41 2026 GMT
Not After : Aug 3 02:36:41 2026 GMT
Subject: CN=6a66c43a-1e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:18:61:5b:3d:18:0c:00:bb:7c:ed:9f:70:a1:
c6:43:a9:fc:eb:a3:c4:b8:7f:19:95:fc:26:66:9e:
c0:af:07:ac:45:90:d9:4f:65:da:b3:da:ca:f2:68:
f9:9c:ff:0d:0a:10:9a:37:9a:b1:8a:c6:14:f6:0d:
54:7e:a4:37:29:9d:4c:00:fa:fd:ff:b8:1d:c1:c5:
69:2c:a2:71:af:94:54:0d:61:a4:0b:52:13:f4:8d:
5f:79:b8:54:4d:6c:c6:4d:9f:66:09:a2:dd:d4:30:
a9:b2:76:22:69:6a:b4:54:46:f1:f9:d7:ba:29:9a:
07:7d:d6:30:c7:fe:75:bf:45:65:f3:21:4e:62:04:
71:05:c1:81:2e:00:68:e0:dd:0c:ba:00:25:67:ca:
60:9a:c5:04:86:3b:bd:a3:44:5e:ed:dc:8f:1b:8e:
42:28:69:01:17:2d:d4:e7:d1:25:f1:dc:d2:e4:6a:
70:25:c0:86:35:83:33:05:fe:44:d5:ce:3f:76:e9:
0f:c6:c7:15:7f:a0:af:92:53:9e:df:66:a2:a0:2d:
f9:ca:bd:e6:e2:13:ca:62:0d:06:f5:33:22:f8:e5:
8e:f9:52:38:f8:59:2f:22:ee:71:07:c7:5e:b4:90:
87:e5:f6:33:9a:ce:9d:6d:b2:63:2b:73:93:5f:b3:
30:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:0A:B2:A2:66:18:71:5D:44:00:46:CF:6C:F3:7C:48:28:81:F4:AF
X509v3 Authority Key Identifier:
keyid:86:CD:8B:42:18:A9:B9:A1:BC:E2:FA:C5:EE:6D:C7:85:B0:0A:93:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hs2LQhipuaG84vrF7m3HhbAKkx0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:39:89:12:54:49:3c:f7:a0:f8:63:c2:da:1f:fb:9b:8b:31:
1a:eb:19:27:79:e9:8f:06:b3:7f:d1:d3:b7:3f:3e:85:1b:c0:
a3:94:15:91:85:06:3a:8b:e3:f7:f1:50:b1:f2:fe:56:1d:6f:
5f:02:b9:64:92:99:ce:89:72:e4:08:2c:b8:62:fe:aa:8e:94:
9f:c9:be:53:80:5d:74:3e:6d:aa:3f:6f:0d:19:e1:51:31:d4:
fe:9e:12:1e:99:2e:5f:7c:8f:da:5e:7b:77:c4:58:18:1f:4b:
af:02:f4:45:9c:96:af:bc:51:36:8e:84:30:f3:1c:d4:24:5a:
9b:53:c2:80:e5:25:d8:0d:8b:4f:9e:ae:98:c6:4c:c6:eb:49:
71:c1:e3:69:16:2b:ee:7d:35:52:90:b1:d9:d1:c0:3f:3e:98:
3c:f5:5a:e3:f2:6e:83:fa:4a:38:43:e1:18:e6:e8:33:f4:2d:
d6:71:a7:0a:10:87:3a:ab:35:79:df:08:3b:6d:8c:1f:bc:39:
cc:54:51:be:fb:bd:a0:20:86:10:69:6f:1e:66:7e:58:e4:6e:
1b:70:38:a6:94:2e:5b:1c:3c:ac:9b:6a:2a:e1:06:81:30:ee:
54:d9:65:a0:d1:86:a5:0d:a6:67:2c:69:7e:f8:d8:7b:41:b9:
e6:71:1c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:11:23 2026 by rpki-client