
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft
File: HT2u99J4g3Pt38sa1cTCNWxXre0.mft (raw, json)
Hash identifier: akoYXz+ZhVFJzioPzprHdcmswf+siXVJY6G7mABXDWI=
Subject key identifier: 3F:17:8E:8C:B2:00:E3:95:A4:A7:E0:B5:FF:A6:2A:F7:98:2C:9C:62
Authority key identifier: 1D:3D:AE:F7:D2:78:83:73:ED:DF:CB:1A:D5:C4:C2:35:6C:57:AD:ED
Certificate issuer: /CN=A91F0578/serialNumber=1D3DAEF7D2788373EDDFCB1AD5C4C2356C57ADED
Certificate serial: 0139
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft
Manifest number: 012B
Signing time: Mon 27 Jul 2026 07:45:39 +0000
Manifest this update: Mon 27 Jul 2026 07:45:39 +0000
Manifest next update: Mon 03 Aug 2026 07:45:39 +0000
Files and hashes: 1: HT2u99J4g3Pt38sa1cTCNWxXre0.crl (hash: +VlvF43L1BeOgTU4QdRQ18hj9cUyXyFUy9bQboq8vHc=)
2: A22E9E42CF3D11EFB2075D13C4F9AE02.roa (hash: QhYXroPd+KBbNk/Tc/bCNExY+7W0cu8INv3BcwAJYmQ=)
3: 8B349526E61B11EFA5CFAA1CC4F9AE02.roa (hash: DfxQYn473L3GRcLQOcasHyVtEcw9/bAiZQ1Qjo4k8zI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.crl
rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 07:45:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 313 (0x139)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0578, serialNumber=1D3DAEF7D2788373EDDFCB1AD5C4C2356C57ADED
Validity
Not Before: Jul 27 07:45:39 2026 GMT
Not After : Aug 3 07:45:39 2026 GMT
Subject: CN=6a670ca3-f891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:75:e3:9e:09:91:52:e8:ff:90:37:8e:89:81:
2d:8b:c2:cd:1b:16:2a:23:a2:71:23:00:84:2a:84:
40:f3:91:a9:6c:d4:25:c9:7c:e0:d1:b9:42:10:30:
b1:c0:a8:f2:dd:a8:e2:b6:68:8e:0d:f8:c8:64:b0:
02:36:24:14:71:e8:04:50:b5:e0:e3:f2:68:eb:3f:
60:7b:92:56:3e:d7:ce:09:43:df:2b:b2:66:94:1e:
06:e7:18:7a:cc:89:1a:7d:ba:68:ad:1d:e3:f7:84:
49:10:78:8b:49:73:cd:1b:33:35:71:b7:ef:6a:7b:
f2:74:1c:91:86:0a:01:cf:5a:5a:95:cd:cd:d9:18:
38:32:40:2e:15:13:a6:d7:26:7f:35:9f:ae:0c:5c:
9d:e3:65:0d:fc:57:9b:84:10:84:a1:77:a2:2f:bf:
08:87:28:72:7e:14:da:72:8a:b9:98:99:53:e3:8d:
44:00:09:43:eb:7e:82:47:87:49:2f:1e:08:f6:26:
cd:1e:a4:47:85:8d:66:3b:48:63:7a:5f:64:11:e7:
b2:8f:9c:bf:cc:b9:ee:97:94:cf:3d:20:45:dd:dd:
78:0b:5f:41:8f:3f:99:f3:8b:36:81:c4:01:5a:e7:
2d:d8:94:5e:19:e2:5a:da:ef:cb:fe:fd:49:8f:ee:
31:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:17:8E:8C:B2:00:E3:95:A4:A7:E0:B5:FF:A6:2A:F7:98:2C:9C:62
X509v3 Authority Key Identifier:
keyid:1D:3D:AE:F7:D2:78:83:73:ED:DF:CB:1A:D5:C4:C2:35:6C:57:AD:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:2b:0a:c0:83:0d:42:c0:1f:54:74:63:9f:22:e9:80:a5:6a:
d3:68:07:ab:da:66:6a:23:ef:37:6e:bc:eb:3e:c3:03:d0:8d:
69:19:36:af:ef:ab:cc:31:9a:b5:52:5d:09:8b:d5:18:59:cb:
30:98:59:86:45:e1:c0:55:7b:de:a8:4b:2f:3e:92:b6:46:e2:
1b:9c:21:3c:f7:80:a8:eb:99:4b:2f:ec:7e:98:4f:71:30:04:
18:c7:83:a4:2a:c8:da:51:08:3e:0f:6a:c8:c8:33:63:6c:77:
17:f7:c4:4c:18:15:78:99:32:dc:4d:a3:a7:3d:d8:96:08:76:
af:a6:b2:d8:52:29:f0:80:c1:15:fd:59:c7:3d:81:fb:d3:6b:
81:e0:f0:f1:e9:ea:04:cd:0b:58:e3:2a:0d:9f:ba:ed:1f:ce:
3f:1a:43:3a:1e:97:5c:1a:ae:6a:b3:29:5d:b9:bf:eb:83:69:
be:e2:ed:e0:60:cd:41:57:45:8b:d0:b7:16:1a:90:17:84:12:
fd:22:fe:7d:10:a8:8f:0b:98:8b:94:c2:a3:30:c5:1c:20:a3:
1e:4f:d5:26:26:70:12:36:57:dc:8a:35:f0:fa:8b:62:a6:94:
af:43:4a:a4:af:6b:f7:4c:1a:7a:55:9c:e2:69:5b:07:b4:7a:
3b:cb:af:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:19:34 2026 by rpki-client