
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.mft
File: s0it0HgdstIdxNM510-HoDk4ycc.mft (raw, json)
Hash identifier: 31jt8pJLNtX181ZbVElyN89L69PuI6UnX/MSNV1CCfU=
Subject key identifier: EE:3A:F2:F1:91:52:76:A5:6F:2B:0E:1E:AC:45:47:3A:DB:B3:48:76
Authority key identifier: B3:48:AD:D0:78:1D:B2:D2:1D:C4:D3:39:D7:4F:87:A0:39:38:C9:C7
Certificate issuer: /CN=A91C7C44/serialNumber=B348ADD0781DB2D21DC4D339D74F87A03938C9C7
Certificate serial: 02C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s0it0HgdstIdxNM510-HoDk4ycc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.mft
Manifest number: 02BE
Signing time: Mon 27 Jul 2026 02:41:15 +0000
Manifest this update: Mon 27 Jul 2026 02:41:15 +0000
Manifest next update: Mon 03 Aug 2026 02:41:15 +0000
Files and hashes: 1: s0it0HgdstIdxNM510-HoDk4ycc.crl (hash: rLYd0kuNTaUJj/csu+Z4udzPx1XoA26iGs9CkPETfP0=)
2: 945D844463E311EDAD1B0B3FC4F9AE02.roa (hash: eqDK5JxYlPrD2YI5tre8evg6C6tiJ/GL+g0KzbaQtNU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.crl
rsync://rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s0it0HgdstIdxNM510-HoDk4ycc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 02:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 711 (0x2c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7C44, serialNumber=B348ADD0781DB2D21DC4D339D74F87A03938C9C7
Validity
Not Before: Jul 27 02:41:15 2026 GMT
Not After : Aug 3 02:41:15 2026 GMT
Subject: CN=6a66c54b-2327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0b:99:e1:c2:ea:5a:e5:e8:0d:f6:b2:74:df:
e5:a9:16:9c:9c:82:a8:86:cb:1e:04:8a:a1:b8:07:
b8:72:88:ee:2f:87:3f:cd:63:5f:21:6a:4b:04:58:
1d:b4:09:4f:58:17:8e:ce:09:17:13:39:9d:2a:1a:
64:2e:b6:d7:08:b1:02:9d:ed:aa:ac:87:a3:45:10:
5f:3f:6a:a4:75:66:bc:27:be:42:10:48:a1:fc:7d:
e9:62:06:f0:7a:c8:f8:96:08:15:7f:66:1f:28:5c:
50:11:d1:19:63:07:f0:25:46:44:7e:e0:db:2a:b1:
8e:20:51:e1:d5:64:69:a1:23:a2:79:e0:8a:f8:b5:
60:24:d5:df:5a:df:5f:dc:ab:cf:30:4f:25:6b:2a:
22:d7:d6:44:21:67:e4:a3:62:a9:33:77:8a:34:0a:
eb:7c:a7:1a:72:a3:61:0b:17:2e:25:d4:83:d9:4b:
d8:dd:80:1d:a2:33:ea:ec:83:7d:28:bb:49:7a:e7:
a1:c0:3d:51:25:35:2d:d3:da:7b:9e:37:cb:da:d7:
7c:b2:f6:f9:50:fc:80:02:91:10:61:5d:02:ab:00:
29:57:ae:7e:02:f5:ba:69:56:5b:f9:4a:09:d3:08:
0d:60:45:f0:d5:e8:6b:0c:df:cc:6c:48:c4:f3:12:
86:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:3A:F2:F1:91:52:76:A5:6F:2B:0E:1E:AC:45:47:3A:DB:B3:48:76
X509v3 Authority Key Identifier:
keyid:B3:48:AD:D0:78:1D:B2:D2:1D:C4:D3:39:D7:4F:87:A0:39:38:C9:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s0it0HgdstIdxNM510-HoDk4ycc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:41:c6:d9:6e:9f:51:d0:38:fa:ad:38:6c:58:72:da:16:59:
99:68:37:ae:a3:96:26:9a:87:e3:c9:39:75:ec:8c:fe:53:9a:
a4:1a:64:5c:04:93:be:79:e2:f1:ae:bb:7e:bf:0b:f9:ee:7a:
6b:33:ff:22:63:11:94:b6:00:e2:61:12:d6:b3:92:87:c1:a7:
c6:d3:ce:e9:b6:e9:db:5a:16:85:b1:b4:9f:ce:00:41:d8:69:
f7:83:62:be:35:df:7d:39:50:e9:9e:7d:bb:38:36:40:a1:5b:
c6:b3:a3:d9:c0:a7:ba:10:fe:fd:5d:fd:23:fe:95:cb:e0:a8:
e2:a1:a9:26:a5:da:50:90:1b:32:1b:75:3e:12:8f:1f:81:24:
e2:8c:65:e7:db:72:83:a4:55:28:6d:ba:ba:6f:fd:c4:cf:bd:
b2:c6:a5:27:5f:78:ab:96:8c:80:55:77:c7:f3:a1:b6:2e:ab:
16:ba:16:cf:20:55:cb:3c:fa:fd:e2:5d:cf:7b:cc:24:1e:7f:
2c:75:a3:7f:29:c3:5f:4a:4c:49:f9:ea:58:6b:29:c5:7d:b9:
d3:04:5d:ae:84:c7:89:14:84:b4:93:65:ea:8b:1a:b8:22:c1:
af:44:0e:d7:b9:03:62:47:4d:3e:9d:39:d0:e0:9c:dd:0c:14:
49:d1:ee:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:12:08 2026 by rpki-client