
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.mft
File: HVvjkVLqbW3wn52ErGmpYbfIOG4.mft (raw, json)
Hash identifier: FDum6r0vjgymOWBI8HorXa24QEnwgtehd+fmkthzdrc=
Subject key identifier: 39:A3:89:59:90:10:DE:5D:CC:6D:02:7A:C7:7B:12:06:84:4C:57:0F
Authority key identifier: 1D:5B:E3:91:52:EA:6D:6D:F0:9F:9D:84:AC:69:A9:61:B7:C8:38:6E
Certificate issuer: /CN=A91F43F2/serialNumber=1D5BE39152EA6D6DF09F9D84AC69A961B7C8386E
Certificate serial: C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVvjkVLqbW3wn52ErGmpYbfIOG4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.mft
Manifest number: C2
Signing time: Mon 27 Jul 2026 09:02:56 +0000
Manifest this update: Mon 27 Jul 2026 09:02:56 +0000
Manifest next update: Mon 03 Aug 2026 09:02:56 +0000
Files and hashes: 1: HVvjkVLqbW3wn52ErGmpYbfIOG4.crl (hash: H3EGQwDje9AN7xFTWONP7eA7pBPQ1V3F1Q6DbGICglI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.crl
rsync://rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVvjkVLqbW3wn52ErGmpYbfIOG4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 194 (0xc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F43F2, serialNumber=1D5BE39152EA6D6DF09F9D84AC69A961B7C8386E
Validity
Not Before: Jul 27 09:02:56 2026 GMT
Not After : Aug 3 09:02:56 2026 GMT
Subject: CN=6a671ec0-7fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ab:58:0a:41:8f:9a:83:19:77:62:c3:aa:5a:
52:98:26:12:3f:36:32:84:7e:18:cb:c8:00:34:ab:
9d:28:60:75:21:27:d6:a7:dd:01:4f:0e:d6:33:5f:
cb:09:54:4f:af:30:9d:68:5f:a3:56:81:54:74:ae:
ce:84:86:27:23:e9:1b:8a:99:e6:c7:e6:69:f3:57:
3a:60:f6:80:98:ac:ca:8e:40:02:d8:1a:81:83:cf:
96:10:40:40:dc:37:c8:e8:c3:e8:0b:33:2f:9e:1f:
72:89:d2:72:68:cd:1e:1d:71:cf:f4:88:d7:a4:a9:
03:6c:b1:18:c5:a0:64:da:1b:1a:a0:9c:31:1d:41:
58:60:ae:49:17:c1:6a:74:39:71:ed:a0:b0:27:79:
57:9e:5e:50:8c:84:1e:4f:b7:96:14:19:03:94:80:
3b:43:75:3c:9b:b8:03:70:68:88:3d:bc:74:94:6e:
53:ee:b9:05:7b:4b:a3:47:9e:a3:4f:1d:b5:4e:be:
23:ee:70:fe:62:09:20:2f:de:e6:4c:0c:db:62:49:
ee:75:27:c1:66:e0:14:7e:4b:f1:1d:bc:a1:1f:88:
ba:99:0f:75:96:3c:b7:78:49:d7:c5:fe:17:93:d1:
a9:e7:d2:80:31:5b:b4:aa:0f:e9:f6:41:b3:ea:44:
0d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A3:89:59:90:10:DE:5D:CC:6D:02:7A:C7:7B:12:06:84:4C:57:0F
X509v3 Authority Key Identifier:
keyid:1D:5B:E3:91:52:EA:6D:6D:F0:9F:9D:84:AC:69:A9:61:B7:C8:38:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVvjkVLqbW3wn52ErGmpYbfIOG4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:ca:ae:9f:68:66:99:8c:c3:29:46:19:be:c6:12:26:5d:48:
73:b0:83:29:9c:a6:87:23:df:4b:ba:06:1d:37:93:7a:57:84:
d6:59:c1:45:a0:3d:86:01:d7:96:64:b6:0b:50:88:58:16:13:
f3:9f:71:e3:e6:d0:5e:be:9c:59:8b:f5:26:b7:00:f2:7f:d7:
2d:57:ed:bf:58:45:e5:2a:f8:d0:8f:36:32:93:12:25:25:81:
44:39:74:13:3c:52:03:d6:55:24:95:80:c2:7a:e9:a1:71:3b:
b1:8a:08:27:cc:de:ef:61:a3:9a:55:fc:f7:97:a1:a1:ba:59:
a1:89:e7:41:a0:89:06:89:aa:b2:cb:63:0e:dd:75:61:e5:71:
8e:e8:d1:b9:ec:63:51:46:ec:bc:0a:5a:29:ed:2a:a7:a0:47:
f4:6e:32:51:58:9e:b7:09:25:db:ec:91:5a:53:cc:fb:07:31:
d2:6e:bf:8d:1c:bd:98:1f:44:99:c2:17:34:00:d3:86:98:92:
da:bd:b0:7b:03:9e:89:b1:01:94:47:97:fd:6a:57:d0:9f:9f:
78:17:b5:0b:2b:92:df:61:fb:12:da:9e:1a:9a:b8:65:41:2c:
06:05:b3:12:44:3b:49:28:f4:8a:0e:ef:73:2c:66:65:af:b6:
29:e9:95:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:36:19 2026 by rpki-client