
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft
File: HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft (raw, json)
Hash identifier: qJ4pXpaRTPaofX/F62oXkQHIgbjFw1X7geit048NC38=
Subject key identifier: 11:A6:C8:96:D5:D6:D3:70:4C:E2:23:A0:C1:9E:A7:8B:AC:3C:3C:A3
Authority key identifier: 1F:12:EC:2D:43:95:F9:5A:AC:C6:0C:62:EC:DD:82:85:7E:D3:04:12
Certificate issuer: /CN=A91FDD2C/serialNumber=1F12EC2D4395F95AACC60C62ECDD82857ED30412
Certificate serial: 083C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft
Manifest number: 0832
Signing time: Sun 26 Jul 2026 21:44:37 +0000
Manifest this update: Sun 26 Jul 2026 21:44:37 +0000
Manifest next update: Sun 02 Aug 2026 21:44:37 +0000
Files and hashes: 1: HxLsLUOV-Vqsxgxi7N2ChX7TBBI.crl (hash: VEd9vrtF7dhe4GBV1JCfDMupUhOzWrDmwMu4OVh2Sq8=)
2: D9BD904224B611EBAE734152C4F9AE02.roa (hash: 4sy5bo4x5IejnxnpTcgGrJIpJDDeVrJ7W1QqzKsRoZ4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.crl
rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 21:44:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2108 (0x83c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDD2C, serialNumber=1F12EC2D4395F95AACC60C62ECDD82857ED30412
Validity
Not Before: Jul 26 21:44:37 2026 GMT
Not After : Aug 2 21:44:37 2026 GMT
Subject: CN=6a667fc5-6e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:54:f1:10:5c:cc:fe:fb:91:a1:50:0a:d5:c5:
f5:cb:76:f1:01:5e:b7:6c:f1:a0:e7:1b:a8:d7:8e:
47:6b:95:54:a4:34:e1:03:03:7c:09:f6:03:e6:a7:
bb:a2:8c:b6:22:0a:e7:9c:45:a0:b7:99:e9:19:a4:
c7:9f:99:79:e7:27:5c:ae:d9:2f:1a:35:1e:aa:22:
42:52:b7:12:5c:eb:8c:ab:c9:21:b2:a4:cd:2c:f6:
bb:b4:c6:95:6b:96:82:a2:86:e0:38:7b:1d:97:d1:
e2:9a:64:6d:f9:8b:b9:3a:20:2a:02:6e:28:d4:c7:
69:3e:cc:8d:9c:66:5a:96:8d:aa:36:f3:03:ed:92:
87:ac:6b:3d:4d:7a:57:79:84:77:04:44:dd:ba:8d:
c3:62:06:84:dd:ca:90:6a:db:21:f7:cd:c5:a2:82:
22:eb:8a:ca:28:4e:b9:b1:3e:2c:48:90:31:b4:0c:
a8:b9:ab:db:dd:41:22:cc:e2:48:36:f3:a5:15:79:
86:66:99:39:0d:07:da:5e:c1:65:73:26:74:5e:36:
84:6a:f6:50:95:b2:5c:b6:4e:29:6f:ae:71:ec:51:
61:f5:e9:b9:0f:7e:94:cb:b7:fd:1b:e1:10:01:56:
68:9e:8c:35:9b:5c:f5:4e:98:c1:9b:97:64:b6:04:
ab:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A6:C8:96:D5:D6:D3:70:4C:E2:23:A0:C1:9E:A7:8B:AC:3C:3C:A3
X509v3 Authority Key Identifier:
keyid:1F:12:EC:2D:43:95:F9:5A:AC:C6:0C:62:EC:DD:82:85:7E:D3:04:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:d5:6d:6b:86:dd:47:6b:8a:6a:ef:4f:77:1c:3a:09:c2:6e:
35:21:a0:92:e0:c2:88:ae:d1:b9:92:f8:68:09:e0:27:c8:f8:
0b:18:0b:60:f8:42:19:61:49:6f:a5:b7:ec:9c:81:35:50:0b:
ef:56:52:26:c6:c9:29:2e:c3:62:f2:13:c4:a1:46:74:a3:60:
cd:d2:76:44:2e:08:9d:47:d0:08:ec:2c:6e:21:5d:9e:a7:f9:
ed:39:65:5a:8c:00:b9:b9:f3:9c:cb:6d:06:9a:bc:31:29:5f:
2a:33:c3:42:15:65:40:18:40:6a:77:56:93:11:1f:41:59:f8:
f6:a8:cb:6d:42:27:0f:bd:b4:42:f0:f0:f3:89:93:1d:1e:7f:
78:ce:36:c2:33:e2:bb:33:a2:a6:1f:5f:ab:40:9b:8a:aa:39:
51:7e:32:af:88:24:52:0e:6f:27:e3:81:b7:43:d5:1f:e5:ad:
cb:19:da:55:43:82:86:33:8c:8f:88:ee:9e:b9:5c:09:5f:74:
2e:2e:37:e6:29:99:9b:01:8e:06:19:31:4d:bb:d8:7e:2f:b5:
9a:2e:a1:7e:16:0d:0c:e5:6e:91:9f:c2:72:cd:e7:73:73:e1:
45:31:73:fe:50:90:41:6e:ed:47:99:3c:5e:18:96:67:fc:80:
ca:4d:2c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:50:40 2026 by rpki-client