
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.mft
File: Hhb4PQxAM115a-W6IckMvumXWbw.mft (raw, json)
Hash identifier: YqUrbm7ObSMaQqd07riLwirHyklN2IiQe7kB5Ur6q5c=
Subject key identifier: 3F:12:3E:7E:1A:41:E8:C7:D4:E2:7C:97:CE:25:1B:9D:93:CF:7F:F6
Authority key identifier: 1E:16:F8:3D:0C:40:33:5D:79:6B:E5:BA:21:C9:0C:BE:E9:97:59:BC
Certificate issuer: /CN=A91D5606/serialNumber=1E16F83D0C40335D796BE5BA21C90CBEE99759BC
Certificate serial: 07A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.mft
Manifest number: 077E
Signing time: Sun 26 Jul 2026 22:22:55 +0000
Manifest this update: Sun 26 Jul 2026 22:22:54 +0000
Manifest next update: Sun 02 Aug 2026 22:22:54 +0000
Files and hashes: 1: Hhb4PQxAM115a-W6IckMvumXWbw.crl (hash: iaX/YM/zdU/sc2UwBl6itz4ck7zO3UrmYfi/m612xco=)
2: 1745A0504D7F11EE8487CA3CC4F9AE02.roa (hash: 92S13xMUtTa9ngZEJpHZILOhTqRPbqcQrnmdTEujx6o=)
3: 7E11B25E632A11EEA4BAF91FC4F9AE02.roa (hash: WeQVo7fwV+V9bl8424+RhWXTOrNJfa47Vs9LGPlEi9s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.crl
rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 22:22:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1957 (0x7a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5606, serialNumber=1E16F83D0C40335D796BE5BA21C90CBEE99759BC
Validity
Not Before: Jul 26 22:22:54 2026 GMT
Not After : Aug 2 22:22:54 2026 GMT
Subject: CN=6a6688bf-c470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:eb:83:95:45:93:70:e3:ab:2a:71:fe:de:91:
bc:01:16:5b:70:4a:ec:1c:5d:d6:78:26:41:59:36:
71:3e:61:2f:e2:4f:ce:31:8d:b7:5c:e2:6f:00:ee:
74:d8:65:a1:30:b5:8f:55:5d:a3:19:db:af:cc:b4:
55:d7:c6:ac:4a:84:44:c1:6c:42:cf:dc:32:82:35:
d2:7a:1a:15:51:c0:d7:62:40:cf:8e:8b:36:7b:d7:
ed:7d:40:3a:08:40:c9:b3:c4:88:e1:e3:7b:d1:2c:
c5:d0:4a:0d:35:65:2c:22:69:01:15:ce:d9:5a:a9:
98:83:69:3c:c1:97:f2:24:6b:0f:a1:cd:23:2c:70:
90:10:1c:a3:76:3c:44:1a:d5:d0:f5:9b:7f:74:ab:
b2:19:86:3a:b5:eb:9c:43:4e:7b:73:80:d1:b8:0a:
ae:d9:0f:5c:48:98:2d:c4:a5:5e:21:92:ea:64:b8:
75:06:e2:bd:33:96:23:34:0a:bd:73:6c:b8:ad:b0:
63:94:8c:55:c4:71:ca:12:8c:d9:11:4f:e5:e2:75:
54:d6:7a:59:a0:b7:c4:a2:52:56:c1:09:bd:83:92:
fc:39:aa:a4:24:13:db:1d:ee:95:df:16:4b:e8:89:
f6:5d:96:b3:75:48:a7:71:d8:78:2b:7a:0f:b7:b2:
5e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:12:3E:7E:1A:41:E8:C7:D4:E2:7C:97:CE:25:1B:9D:93:CF:7F:F6
X509v3 Authority Key Identifier:
keyid:1E:16:F8:3D:0C:40:33:5D:79:6B:E5:BA:21:C9:0C:BE:E9:97:59:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:7e:d9:5c:2d:37:53:a5:c0:c1:86:a6:f7:41:ed:83:41:79:
f5:33:d7:1b:3e:55:dd:6d:44:bc:72:f7:01:99:51:b4:54:92:
f2:e6:40:67:eb:13:68:e9:62:45:8b:bf:35:b8:c1:2f:70:64:
89:f4:4e:ce:46:9a:e9:cd:1c:d7:8e:ab:20:9f:f3:ca:46:7f:
4b:64:6f:06:e1:a8:af:43:96:2a:e2:70:52:32:fc:83:39:80:
b4:c5:1f:3e:61:a6:5b:32:e5:5b:d6:15:1f:ce:6b:07:f1:b2:
00:63:d3:9a:84:3b:3d:05:36:f9:e0:bf:09:af:2b:7f:b3:71:
ab:54:b2:97:fc:91:52:52:8a:72:88:08:12:77:bd:9d:86:7c:
74:bd:58:6f:e5:6e:a9:ef:7a:99:6e:40:6c:a2:a4:81:e9:7b:
35:bc:47:60:b6:e2:c9:c6:cb:f6:c1:3d:dc:24:ac:39:93:9f:
d9:ae:1b:72:86:4c:0c:19:ab:a3:a1:cb:90:e1:a0:2a:53:e7:
c6:19:56:65:9e:4d:8c:c9:cd:bc:0a:12:ad:2d:74:ff:ae:6a:
2a:d0:ff:82:b9:50:e1:bf:75:2c:bb:56:1a:1e:a5:24:17:6a:
66:bc:f9:31:68:30:b8:80:06:9e:31:10:ff:b4:f8:b0:6f:f4:
2b:46:6d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:40:06 2026 by rpki-client