
$ rpki-client -vvf rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft
File: Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft (raw, json)
Hash identifier: c77YGeZPyToCGzQ+qnR9zApeRjI/XSE0c3u1NTH9Wmg=
Subject key identifier: 0C:4D:73:E7:BF:39:9A:E7:94:4E:F9:F4:C8:81:77:90:DD:94:ED:4A
Authority key identifier: 1E:57:B4:3F:04:4D:4A:BA:82:22:A4:09:78:66:14:28:0A:A7:39:A1
Certificate issuer: /CN=A911112F/serialNumber=1E57B43F044D4ABA8222A409786614280AA739A1
Certificate serial: 020B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft
Manifest number: 01EE
Signing time: Thu 13 Aug 2026 03:10:54 +0000
Manifest this update: Thu 13 Aug 2026 03:10:53 +0000
Manifest next update: Thu 20 Aug 2026 03:10:53 +0000
Files and hashes: 1: Hle0PwRNSrqCIqQJeGYUKAqnOaE.crl (hash: cqh4z+8doGN2i+Hb1i0Iz9xuJbMC63AZsE0OB2sL4Sc=)
2: E4BA0144BA8E11EE91E3AF15C4F9AE02.roa (hash: iqaS3icVBFe6oN0R9kFZcl1A7QFED95YhIwyEQkQS7A=)
3: I6EMITbdbbtYS2DaFB7z6D3cHJI.asa (hash: Yav+cOpKKjkqf5HMRAS1rzua0gM0lLJrV53w7pLrmYY=)
4: 1CD34B6CEDFC11EE880F6F58C4F9AE02.roa (hash: QfBvMFXb01H+L9wRFqEZ8QQruIPOAvtkWuxmOgFpE0c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.crl
rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 20 Aug 2026 03:10:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 523 (0x20b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911112F, serialNumber=1E57B43F044D4ABA8222A409786614280AA739A1
Validity
Not Before: Aug 13 03:10:53 2026 GMT
Not After : Aug 20 03:10:53 2026 GMT
Subject: CN=6a7d35bd-4525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a3:c0:52:f9:f8:93:75:34:9b:2c:1c:df:f6:
3a:fd:ce:5d:64:8b:00:7b:0b:a6:6e:7f:9c:07:59:
ad:05:17:15:99:24:2b:8e:66:16:e1:76:71:e0:2e:
21:b4:a6:ed:66:53:52:5d:bd:c7:da:b6:06:34:b8:
03:84:2c:c1:c6:4b:f5:e4:8b:4b:4c:f4:76:b7:b2:
80:4f:0d:49:22:30:cb:34:b3:01:c8:10:23:58:d7:
e5:2e:78:5c:ea:61:33:27:fe:57:73:34:dc:22:6e:
e0:8b:3f:33:2e:a7:ed:46:71:00:9a:ee:c7:50:7b:
52:b5:21:91:97:c8:99:ad:de:c3:51:5c:c6:16:57:
68:98:c7:93:9f:24:e6:e0:6d:6e:c7:51:9e:a4:63:
9d:b5:03:ec:00:ca:81:5a:9e:01:0a:c9:c1:5e:b4:
87:38:81:d8:f7:87:36:ac:39:fa:cb:14:71:23:75:
37:a5:a7:60:56:19:3d:c8:38:ad:d9:57:cb:c0:d5:
9c:95:cf:b2:c2:de:16:fb:cc:51:eb:18:41:38:1b:
bc:fe:c1:7a:4c:3e:0a:b3:11:c2:a6:b8:97:c1:3b:
d4:c6:4e:43:bb:98:cb:09:1f:31:00:77:a9:2f:35:
9e:44:ab:44:db:f9:8d:fa:cc:1f:b1:9f:e8:b8:e9:
c3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:4D:73:E7:BF:39:9A:E7:94:4E:F9:F4:C8:81:77:90:DD:94:ED:4A
X509v3 Authority Key Identifier:
keyid:1E:57:B4:3F:04:4D:4A:BA:82:22:A4:09:78:66:14:28:0A:A7:39:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:25:77:46:8a:5a:8c:11:4b:17:f6:e2:1e:39:cc:c5:33:7e:
44:6e:16:ca:1b:78:a2:71:3c:97:3b:39:25:d0:01:c5:4a:f2:
71:35:13:4e:f3:07:82:59:75:78:c0:8d:4f:56:55:d2:65:13:
a7:67:e8:6f:c8:b1:9f:c3:b1:f9:b4:b9:dd:88:39:af:25:78:
ef:17:d0:14:8d:43:cc:51:22:ac:09:f9:1f:e3:ae:dc:9c:da:
81:a9:a3:cc:4b:38:89:19:94:7b:7c:d5:f4:c7:3b:67:d5:62:
b8:9a:96:ea:71:26:6e:3b:f4:57:5f:b7:43:a6:3f:70:eb:9f:
65:44:60:f3:41:69:c9:ac:4b:63:b2:b4:33:90:cc:db:71:6b:
e6:a6:06:40:66:fe:a5:3b:a8:54:2d:da:c8:05:26:53:04:ab:
e7:76:7a:8c:91:d8:d8:2c:28:06:74:cc:48:9a:51:bd:df:25:
84:a1:44:6b:3b:94:73:a1:54:60:17:4d:9a:32:b9:00:01:4f:
aa:4d:43:45:d4:c4:ac:0a:0f:da:8e:92:aa:f0:b7:5d:1e:eb:
f2:68:8c:82:f7:7f:2e:e0:fa:61:1f:48:e5:19:5f:49:ab:09:
40:19:52:e8:ae:03:3e:39:08:1d:3b:74:22:50:49:79:85:20:
9e:83:34:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 09:02:53 2026 by rpki-client