
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919337F/1B5BF7FE27AA11F1B751955AB7EE528E/hRn_LGgILMZHuCh2C0t7FJXshMs.mft
File: hRn_LGgILMZHuCh2C0t7FJXshMs.mft (raw, json)
Hash identifier: 2QQLwbBvAMhjXCkY8Xpzv0tZLimZ2AdlfyQKr7UkdSc=
Subject key identifier: AC:5F:6A:98:F7:E3:9B:B5:72:00:10:29:EA:FD:36:23:FC:60:5F:CE
Authority key identifier: 85:19:FF:2C:68:08:2C:C6:47:B8:28:76:0B:4B:7B:14:95:EC:84:CB
Certificate issuer: /CN=A919337F/serialNumber=8519FF2C68082CC647B828760B4B7B1495EC84CB
Certificate serial: 74
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hRn_LGgILMZHuCh2C0t7FJXshMs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919337F/1B5BF7FE27AA11F1B751955AB7EE528E/hRn_LGgILMZHuCh2C0t7FJXshMs.mft
Manifest number: 72
Signing time: Mon 26 Oct 2026 17:54:19 +0000
Manifest this update: Mon 26 Oct 2026 17:54:18 +0000
Manifest next update: Mon 02 Nov 2026 17:54:18 +0000
Files and hashes: 1: hRn_LGgILMZHuCh2C0t7FJXshMs.crl (hash: Kiu1ZoJazaT0BW1iJ5FTcQ4yvooVPvXy8HK0o3q3QPQ=)
2: DCF45DB827C111F19C6102CF9F833773.roa (hash: FPTt8NhyMNqkEu67QGKBonkFxD218ZDud5EUZD9UlWo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919337F/1B5BF7FE27AA11F1B751955AB7EE528E/hRn_LGgILMZHuCh2C0t7FJXshMs.crl
rsync://rpki.apnic.net/member_repository/A919337F/1B5BF7FE27AA11F1B751955AB7EE528E/hRn_LGgILMZHuCh2C0t7FJXshMs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hRn_LGgILMZHuCh2C0t7FJXshMs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116 (0x74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919337F, serialNumber=8519FF2C68082CC647B828760B4B7B1495EC84CB
Validity
Not Before: Oct 26 17:54:18 2026 GMT
Not After : Nov 2 17:54:18 2026 GMT
Subject: CN=6adf93ca-052c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:93:f4:e9:f3:a4:6b:5c:d0:1d:1d:10:6f:50:
cb:04:28:56:f4:19:dc:38:0d:4f:3a:23:81:78:61:
8e:51:45:d6:7a:2d:86:9d:32:52:d4:4e:b2:67:17:
4a:6a:f1:25:16:f6:7a:35:82:36:07:0c:cf:3e:5e:
53:aa:5e:68:c1:f9:4a:14:70:29:10:a8:be:c6:43:
8a:55:f8:71:87:39:30:de:1c:a5:42:56:b1:76:09:
b2:ee:90:c5:6d:49:9f:0e:91:62:16:e8:ca:ce:f8:
c0:f3:3e:e4:a3:75:8b:a3:8d:6e:08:50:1c:47:0c:
64:b7:83:a4:6e:dd:f7:c8:4b:5d:5e:4d:d6:eb:c5:
1c:8f:7f:49:93:fc:8f:e9:ba:8c:7f:5e:85:da:f2:
88:07:a3:f6:1e:ae:6e:1d:ee:f0:08:29:0c:b3:db:
19:a6:1c:08:b2:bf:71:f9:44:c7:66:0f:4e:a7:98:
df:04:56:2a:0d:00:d8:fd:49:1b:b1:98:39:7c:4a:
90:5e:b4:ac:4b:d9:be:ef:ac:20:6d:a0:0c:69:4d:
2a:ef:72:dc:c3:c9:d2:12:56:86:4d:6a:e9:7b:7e:
91:45:2c:c4:76:1f:c0:ca:fc:8b:fd:0b:17:8e:d4:
ba:6a:4e:ce:b1:f5:48:b3:6e:73:6a:4e:f2:41:26:
23:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:5F:6A:98:F7:E3:9B:B5:72:00:10:29:EA:FD:36:23:FC:60:5F:CE
X509v3 Authority Key Identifier:
keyid:85:19:FF:2C:68:08:2C:C6:47:B8:28:76:0B:4B:7B:14:95:EC:84:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919337F/1B5BF7FE27AA11F1B751955AB7EE528E/hRn_LGgILMZHuCh2C0t7FJXshMs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hRn_LGgILMZHuCh2C0t7FJXshMs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919337F/1B5BF7FE27AA11F1B751955AB7EE528E/hRn_LGgILMZHuCh2C0t7FJXshMs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:0d:28:1d:3e:68:de:ab:41:3d:86:9b:b1:01:9c:3d:62:33:
2f:24:dd:5d:c0:0a:f4:70:03:47:58:39:d7:8d:05:1d:9d:2f:
1f:3a:68:3b:19:14:92:47:cb:ce:5b:d5:3d:e2:2c:97:87:2f:
3c:49:15:98:1e:f3:d1:75:ba:e6:c9:63:90:19:bc:b6:4d:15:
2b:6f:f8:5e:7c:ec:d5:6c:be:bf:c9:f2:07:ac:3c:f8:db:9a:
98:b6:b5:39:90:6b:e4:e2:22:76:ab:60:ca:27:ed:d7:eb:78:
4b:e4:64:e6:a7:51:05:10:32:fb:fd:67:c1:67:76:9d:46:24:
3b:f9:55:81:9e:9a:a4:9a:ae:2c:d3:ba:da:28:66:a3:61:bc:
0d:65:70:9b:d2:c4:7a:e8:6e:5a:96:3f:82:25:07:8f:3d:d7:
d3:05:da:9a:79:65:79:40:56:00:5e:26:0b:42:bb:bc:89:61:
90:cc:0f:5a:fb:df:e8:ad:d5:da:7f:9d:de:7c:33:db:46:7a:
6f:88:9f:25:90:36:86:4b:34:65:a8:a2:cc:8c:d3:3c:4e:4a:
65:5d:e4:b6:85:77:57:23:77:2f:7b:fa:be:74:c9:28:7c:ed:
46:e7:d2:ba:87:05:e4:9b:a4:98:61:75:4f:f6:71:00:bf:c0:
9a:9e:b3:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:22:23 2026 by rpki-client