
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft
File: h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft (raw, json)
Hash identifier: boGtJjpNbkY0d1gfb/zLK2/Dfiw6MtMf7m7l9dcJFUM=
Subject key identifier: 38:E6:66:03:AB:B3:41:FB:05:96:74:36:46:96:78:42:90:A3:24:1A
Authority key identifier: 87:F0:59:68:71:B5:15:BB:B3:D2:98:2D:C6:FB:9C:12:DE:F4:C2:34
Certificate issuer: /CN=A91D226F/serialNumber=87F0596871B515BBB3D2982DC6FB9C12DEF4C234
Certificate serial: 0281
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_BZaHG1Fbuz0pgtxvucEt70wjQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft
Manifest number: 026A
Signing time: Mon 27 Jul 2026 03:46:03 +0000
Manifest this update: Mon 27 Jul 2026 03:46:03 +0000
Manifest next update: Mon 03 Aug 2026 03:46:03 +0000
Files and hashes: 1: h_BZaHG1Fbuz0pgtxvucEt70wjQ.crl (hash: YjS2+z8P/6aigV+XPeywMyP9MeeoIWu+5rAH695mQ9o=)
2: 20EEA4E85D4511F19E70A12CB2833773.roa (hash: 0NWy9uzlmlVP6XgEKzHCIkE1793aYzIulkG89nveM1w=)
3: 00FB58CE5D4611F186A46996B2833773.roa (hash: NVOHwEnXASVBqmCqfxY3gSyyM9N1jznjqr0Pc3+NqTM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.crl
rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_BZaHG1Fbuz0pgtxvucEt70wjQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 03:46:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 641 (0x281)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D226F, serialNumber=87F0596871B515BBB3D2982DC6FB9C12DEF4C234
Validity
Not Before: Jul 27 03:46:03 2026 GMT
Not After : Aug 3 03:46:03 2026 GMT
Subject: CN=6a66d47b-d436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4b:00:cc:85:22:32:56:fc:90:24:c5:ef:e2:
07:a6:19:2b:b8:e1:9d:4d:33:84:fd:e2:a3:bf:af:
ee:e6:ef:9c:e0:35:2e:e0:16:f4:3e:45:ca:63:02:
a4:32:52:45:c3:79:4e:67:db:69:d8:cb:66:fb:bd:
34:fe:01:54:b5:a4:81:d9:67:04:62:ee:6c:b9:fa:
fe:d8:94:d9:00:78:d8:76:b1:05:11:4a:62:d5:6e:
ff:8c:d3:94:f1:24:2b:d6:b2:dc:08:07:53:33:52:
ad:2f:e6:6a:e9:fc:86:2b:26:6c:f1:1c:7d:3f:4b:
3c:cc:ec:ad:0e:df:bc:9b:2d:95:8e:db:39:91:0f:
d5:ee:ec:31:5d:60:3f:5e:ff:fd:42:26:eb:2a:03:
f1:12:cd:94:dd:26:4c:e6:26:19:60:8c:d0:7f:ce:
fd:93:5a:db:90:e9:d4:db:78:73:00:f3:7a:95:bf:
3e:c7:ed:a8:55:bc:95:3b:43:56:01:79:89:f1:22:
fb:be:7b:6a:c9:e2:aa:fd:f9:8b:25:73:a1:fd:69:
cd:a9:55:48:89:08:aa:ef:14:d9:83:04:2c:68:a1:
0d:0c:1b:08:96:ee:37:80:16:a6:da:da:a0:1e:b0:
ff:85:fe:64:71:f8:4d:b3:74:eb:87:83:cd:54:d2:
8c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E6:66:03:AB:B3:41:FB:05:96:74:36:46:96:78:42:90:A3:24:1A
X509v3 Authority Key Identifier:
keyid:87:F0:59:68:71:B5:15:BB:B3:D2:98:2D:C6:FB:9C:12:DE:F4:C2:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_BZaHG1Fbuz0pgtxvucEt70wjQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:2b:c7:ec:a3:bd:eb:25:9a:78:24:47:16:08:4e:cb:3c:d1:
cd:1f:f1:48:27:95:75:d6:9c:cd:a0:bb:87:59:cd:dc:c2:14:
fc:7f:47:a0:c4:04:ed:74:fb:ad:92:50:6f:a6:c4:3e:01:85:
a7:b9:db:c4:f5:3b:45:c4:cb:3d:7a:0f:17:53:6f:75:72:0b:
6c:cd:e8:dd:6b:37:75:cc:04:ee:79:08:02:78:6d:e0:19:66:
ac:78:6d:0a:02:e6:d3:d4:09:cd:bf:f5:25:45:41:df:e9:8d:
58:fe:84:40:e6:b9:65:f3:70:8c:d4:82:fa:22:d1:af:93:c8:
da:fb:a9:79:75:89:c2:1d:0b:8c:8c:0a:cc:42:17:d9:5a:68:
d2:7f:5b:ae:fd:c4:08:19:7b:88:0b:28:8b:c5:15:77:be:cd:
01:2b:ef:63:2b:43:80:57:6e:a3:40:88:44:fa:a6:61:c9:17:
70:8a:2b:84:ac:4d:82:73:0b:6a:42:4f:9c:d8:33:a8:50:4a:
df:f0:3d:f1:36:42:66:62:5b:09:43:62:b9:61:0c:78:37:02:
75:4a:05:78:25:40:59:f9:24:a3:fc:fe:43:33:64:4a:e0:f3:
af:93:3b:f9:ed:70:38:7b:47:09:c2:64:80:f0:dc:75:56:10:
40:66:8c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:27:31 2026 by rpki-client