
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD6E/B659794CE29111F096E27D11456F56BC/HuwHjLa6UmYDwgyNmcOnRjHZwU8.mft
File: HuwHjLa6UmYDwgyNmcOnRjHZwU8.mft (raw, json)
Hash identifier: iiMWdtc1HqMSlXXoZjQ10vyimG5032qDaOHHEGH8s2w=
Subject key identifier: 18:6C:BB:AF:D4:4C:D5:2A:C3:51:73:35:7A:C6:4A:B3:FF:D1:E4:D9
Authority key identifier: 1E:EC:07:8C:B6:BA:52:66:03:C2:0C:8D:99:C3:A7:46:31:D9:C1:4F
Certificate issuer: /CN=A911BD6E/serialNumber=1EEC078CB6BA526603C20C8D99C3A74631D9C14F
Certificate serial: 89
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HuwHjLa6UmYDwgyNmcOnRjHZwU8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BD6E/B659794CE29111F096E27D11456F56BC/HuwHjLa6UmYDwgyNmcOnRjHZwU8.mft
Manifest number: 78
Signing time: Fri 17 Jul 2026 09:13:35 +0000
Manifest this update: Fri 17 Jul 2026 09:13:35 +0000
Manifest next update: Fri 24 Jul 2026 09:13:35 +0000
Files and hashes: 1: HuwHjLa6UmYDwgyNmcOnRjHZwU8.crl (hash: AiIVX/Qi5tguuK5uJbIEtmWzhrC9qM/yENR5O7hDQAo=)
2: C6369A92E29211F086FBD344456F56BC.roa (hash: /hMoFkZDEyrOtFoyUNiUcHKPDtAIaxeqfmQ19EP0GNk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BD6E/B659794CE29111F096E27D11456F56BC/HuwHjLa6UmYDwgyNmcOnRjHZwU8.crl
rsync://rpki.apnic.net/member_repository/A911BD6E/B659794CE29111F096E27D11456F56BC/HuwHjLa6UmYDwgyNmcOnRjHZwU8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HuwHjLa6UmYDwgyNmcOnRjHZwU8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 09:13:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137 (0x89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BD6E, serialNumber=1EEC078CB6BA526603C20C8D99C3A74631D9C14F
Validity
Not Before: Jul 17 09:13:35 2026 GMT
Not After : Jul 24 09:13:35 2026 GMT
Subject: CN=6a59f23f-da12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1d:bf:d7:0d:fb:70:d9:f1:76:aa:0b:e3:3e:
74:cb:e2:cf:45:9a:85:c9:6d:21:33:ec:d4:8d:e6:
d8:5a:4a:49:bb:9f:2b:58:88:a4:34:ef:02:47:f0:
30:03:e4:fb:6d:1d:f3:bd:40:3a:c0:bf:70:c1:45:
95:1a:ac:55:52:e3:79:da:35:02:c4:22:46:66:16:
a4:b5:c3:c9:c6:c3:81:e1:21:3e:e8:70:1e:dd:71:
58:32:d2:dd:1f:43:b0:a5:7b:58:de:10:25:8f:66:
9c:b4:f0:90:47:59:5d:de:78:b5:3d:78:74:b6:2e:
10:fa:c0:b7:e3:9d:d8:1f:3a:be:32:7b:e3:cd:de:
a5:3c:26:74:60:c5:36:67:45:39:0a:be:08:25:6d:
b3:3a:84:4b:64:9d:7c:27:b1:e5:a3:e3:01:a8:48:
8a:60:0c:e7:b2:7a:6e:97:5f:b4:5b:2f:28:fb:5c:
77:5e:4d:3d:cd:e1:f2:91:62:91:29:93:6c:fe:c3:
d9:0f:e0:f5:78:a2:2d:1d:44:a3:ab:55:4c:c4:b6:
8c:e3:e7:20:ff:92:19:e6:0d:25:22:5b:30:52:4b:
1c:2d:8f:86:a5:3d:59:f0:b4:90:82:3e:8c:a6:05:
63:7f:b3:fa:61:ba:ec:cc:ae:d9:04:d8:4a:cd:9b:
f7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:6C:BB:AF:D4:4C:D5:2A:C3:51:73:35:7A:C6:4A:B3:FF:D1:E4:D9
X509v3 Authority Key Identifier:
keyid:1E:EC:07:8C:B6:BA:52:66:03:C2:0C:8D:99:C3:A7:46:31:D9:C1:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BD6E/B659794CE29111F096E27D11456F56BC/HuwHjLa6UmYDwgyNmcOnRjHZwU8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HuwHjLa6UmYDwgyNmcOnRjHZwU8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD6E/B659794CE29111F096E27D11456F56BC/HuwHjLa6UmYDwgyNmcOnRjHZwU8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:38:2a:79:1f:29:5c:10:39:81:62:2c:d2:a9:2b:9c:82:66:
ed:26:1c:27:da:0c:c2:5c:10:bd:6f:63:aa:42:20:ca:6a:e1:
6d:51:e6:1f:ea:ed:1c:bc:39:2e:c7:a0:84:1f:89:fd:6b:29:
75:ba:07:5c:9b:7c:fe:d4:29:ea:88:20:5e:0a:5e:2d:b8:86:
ec:fe:96:4b:8c:d3:cd:5b:80:4b:34:6b:8b:41:c0:40:aa:cc:
b8:61:86:f2:d5:0c:15:ea:48:81:33:56:b2:c5:53:86:8b:dc:
cf:3a:b6:68:a0:01:ec:03:02:c5:db:6f:00:8e:15:b1:01:2b:
4f:26:4d:f2:05:61:8f:88:c3:c5:9e:e5:00:9a:c8:8a:ee:ea:
92:aa:e8:b5:92:04:27:7f:8f:bf:7a:a9:14:45:6a:53:3d:cb:
b6:97:01:7f:63:77:da:bc:bd:28:94:5e:c6:58:3d:d1:4f:de:
99:ee:a2:ee:5c:8f:3c:d2:9e:58:e0:c6:95:86:d4:fc:42:30:
c3:07:63:b4:9e:3d:46:2e:a3:28:c1:43:5e:ca:8a:ba:1c:39:
15:53:54:4e:86:df:25:f0:64:10:99:98:22:6e:77:0a:9b:3c:
c8:62:c6:6b:02:86:f3:50:e8:d8:bd:bd:6a:2a:d8:d6:83:6b:
b6:7b:dd:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:30:16 2026 by rpki-client