
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.mft
File: hSmfDbFMjwpT0kRu_bDMBZwVJL8.mft (raw, json)
Hash identifier: fgB1V+e643Dsy+43kAAikHj2ckgmRLSV4wWbog3o0EI=
Subject key identifier: D4:15:CE:63:F9:FE:47:F5:83:49:6B:51:0A:36:8F:97:5F:E5:7E:9A
Authority key identifier: 85:29:9F:0D:B1:4C:8F:0A:53:D2:44:6E:FD:B0:CC:05:9C:15:24:BF
Certificate issuer: /CN=A911C9E8/serialNumber=85299F0DB14C8F0A53D2446EFDB0CC059C1524BF
Certificate serial: 022B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSmfDbFMjwpT0kRu_bDMBZwVJL8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.mft
Manifest number: 0225
Signing time: Wed 19 Aug 2026 03:21:33 +0000
Manifest this update: Wed 19 Aug 2026 03:21:32 +0000
Manifest next update: Wed 26 Aug 2026 03:21:32 +0000
Files and hashes: 1: hSmfDbFMjwpT0kRu_bDMBZwVJL8.crl (hash: 818cvmcqt4Jjus8VhWe/t2TDE2Hd0IvM47yPy3DeGMw=)
2: E39F4ED65C2411EEB54C4F43C4F9AE02.roa (hash: pkyGN44AS4SLdJe1nEC0cgptqJqFo9Jz+8yVjeVwyog=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.crl
rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSmfDbFMjwpT0kRu_bDMBZwVJL8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 03:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 555 (0x22b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C9E8, serialNumber=85299F0DB14C8F0A53D2446EFDB0CC059C1524BF
Validity
Not Before: Aug 19 03:21:32 2026 GMT
Not After : Aug 26 03:21:32 2026 GMT
Subject: CN=6a85213d-667a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:17:73:cf:76:dc:84:c7:4c:f3:4b:d1:97:99:
9c:1e:6b:97:04:e1:70:42:23:77:f6:eb:39:f9:0e:
5a:2f:d4:ea:f3:60:57:41:8e:fa:63:ba:ab:a3:a5:
3b:f3:ef:fa:c4:3d:bf:b4:e0:12:e6:43:42:3f:a7:
56:5c:93:ac:9b:53:e3:29:81:01:48:2b:f9:1a:61:
d0:39:f6:eb:0e:25:2d:55:6c:55:4e:5d:96:e5:e3:
ab:f9:5d:2c:b3:d1:37:28:e5:db:4e:60:11:ff:c2:
f8:a2:d3:95:65:73:f5:0a:d5:7d:86:b7:c8:9d:3f:
b7:e8:4d:a1:fb:21:19:4e:d6:79:d3:d7:6a:eb:69:
98:0e:79:90:2c:92:71:70:1a:e9:91:58:45:e6:cd:
1c:2b:5f:ae:fd:f0:2c:37:c3:14:c9:dc:9d:b4:54:
ab:de:94:2b:2e:ba:9b:c6:d7:fb:39:50:e9:ea:28:
ea:e0:69:48:7a:a7:b4:3c:bd:53:66:73:2b:31:eb:
68:f2:e7:b2:06:8e:5c:c3:d1:0d:68:23:6a:7f:33:
c6:18:af:a8:12:4a:dd:e3:d8:ef:f1:04:c9:c8:c1:
b2:37:a6:cd:42:29:76:6b:e6:a9:e8:82:65:55:fe:
a0:cf:be:3a:8f:b8:cb:22:c5:b3:0b:c3:ea:1a:0b:
cf:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:15:CE:63:F9:FE:47:F5:83:49:6B:51:0A:36:8F:97:5F:E5:7E:9A
X509v3 Authority Key Identifier:
keyid:85:29:9F:0D:B1:4C:8F:0A:53:D2:44:6E:FD:B0:CC:05:9C:15:24:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSmfDbFMjwpT0kRu_bDMBZwVJL8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:90:42:4b:99:ec:c4:08:fa:82:67:35:52:f0:06:bf:ea:a3:
40:2c:1f:f8:e7:06:70:5e:65:20:b5:f0:17:dd:78:16:aa:77:
24:3c:8b:1f:3c:06:7a:a4:72:26:86:e0:bd:11:3f:0e:61:8b:
a1:cf:80:1d:89:63:c2:74:04:61:78:ac:a8:1d:6e:41:bf:a1:
e7:24:dd:9b:86:f8:94:96:63:7b:aa:d3:e4:fc:e4:2a:11:67:
ac:cb:d4:a7:15:94:48:5b:b3:a0:40:9c:af:cb:0a:18:f0:1b:
66:ac:d9:dd:f0:08:bf:34:b1:84:fe:d6:01:0c:b5:a5:ca:bf:
a0:4d:dc:b1:9a:f3:c7:13:85:f1:5b:55:0f:c1:72:de:09:5a:
28:15:fa:84:06:e4:2d:e3:7b:55:03:95:d7:26:54:86:62:3e:
31:15:94:fa:33:c6:63:ab:70:2b:13:66:07:b5:0d:56:19:b8:
ad:a4:45:12:fa:1a:1a:42:45:71:a7:90:b2:da:1c:30:b4:79:
9a:31:7f:2d:8d:d1:1c:c1:18:fa:04:c9:a8:ef:ae:8e:89:a2:
5b:26:4a:1c:29:9c:c7:16:25:b0:9f:30:f7:1e:59:2b:3c:bc:
77:80:2a:d9:63:09:77:83:8e:80:fc:cf:c4:a5:48:d7:ac:31:
66:23:0c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:27:46 2026 by rpki-client