
$ rpki-client -vvf rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.mft
File: hm540aRej9EmgIr_fOpPwI59kqg.mft (raw, json)
Hash identifier: yU37ir28Oc2255vcHT9vSTgLNxTCBGXGC6cmfDOgcJw=
Subject key identifier: 53:63:EB:80:73:24:41:67:26:46:85:70:96:C4:72:57:E7:A7:67:B0
Authority key identifier: 86:6E:78:D1:A4:5E:8F:D1:26:80:8A:FF:7C:EA:4F:C0:8E:7D:92:A8
Certificate issuer: /CN=A911CFCE/serialNumber=866E78D1A45E8FD126808AFF7CEA4FC08E7D92A8
Certificate serial: 01A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hm540aRej9EmgIr_fOpPwI59kqg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.mft
Manifest number: 0195
Signing time: Thu 21 May 2026 04:33:29 +0000
Manifest this update: Thu 21 May 2026 04:33:28 +0000
Manifest next update: Thu 28 May 2026 04:33:28 +0000
Files and hashes: 1: hm540aRej9EmgIr_fOpPwI59kqg.crl (hash: vLafy9+hddIuOkgfZ3qgJqTxQpjosGyxYOUmxRyeKxk=)
2: 139B8950382911F1B2EF7ADC9D833773.roa (hash: P2bqkGVObqNOnUM+QM7vP8PUwyN1cBzwKCcHN+WtENk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.crl
rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hm540aRej9EmgIr_fOpPwI59kqg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 04:33:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 423 (0x1a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CFCE, serialNumber=866E78D1A45E8FD126808AFF7CEA4FC08E7D92A8
Validity
Not Before: May 21 04:33:28 2026 GMT
Not After : May 28 04:33:28 2026 GMT
Subject: CN=6a0e8b18-5abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6a:52:18:2a:cc:50:b7:82:d9:ae:ed:b4:6b:
89:f3:31:4c:7f:16:e8:1b:8f:80:12:e9:2e:67:6e:
c7:56:fe:97:42:c9:b2:c0:7d:2d:9a:27:74:e2:12:
5d:07:30:fd:df:f1:d8:9f:4d:31:a7:77:dc:8b:4d:
8d:85:3d:9f:13:c5:d9:b8:89:57:fd:3a:75:ed:1a:
52:36:73:5d:36:67:1d:9f:5c:8f:6f:1c:a1:8f:3c:
17:a0:c1:2b:d4:5d:55:fd:01:63:5f:c0:87:38:35:
a3:bd:d3:06:94:f8:3e:cd:91:f3:ed:8f:41:71:cf:
ee:37:bf:0e:33:80:4e:f0:20:c7:72:bb:e7:b4:5c:
f9:0a:f3:f9:23:1a:10:1e:b1:30:87:ae:35:2f:15:
28:34:8b:0b:34:c8:10:6e:f7:31:3c:17:f1:f6:98:
8b:65:a5:db:36:81:32:dc:c6:da:a1:14:df:7f:6e:
f7:a6:a3:1e:5b:cb:09:65:4c:30:39:30:79:85:6f:
d0:ea:54:cc:81:a7:3a:6d:f3:12:ac:b6:e5:ca:d0:
42:8c:ae:ec:08:79:37:b3:79:00:a7:43:f0:a9:4c:
b0:03:f1:49:e8:9b:7a:1c:b8:77:96:5a:b0:42:dd:
e1:6b:12:15:58:36:f7:81:c0:34:4f:68:ca:8e:35:
d0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:63:EB:80:73:24:41:67:26:46:85:70:96:C4:72:57:E7:A7:67:B0
X509v3 Authority Key Identifier:
keyid:86:6E:78:D1:A4:5E:8F:D1:26:80:8A:FF:7C:EA:4F:C0:8E:7D:92:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hm540aRej9EmgIr_fOpPwI59kqg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:d6:2e:1f:73:2f:40:89:e6:57:9d:38:4a:d6:8f:68:26:50:
5b:61:3f:e3:4d:ec:30:23:21:f5:1c:25:93:26:d5:ea:83:63:
37:ee:14:e3:71:6b:f0:ba:0a:3f:31:05:4d:fa:6e:42:d0:ec:
f1:30:84:38:44:93:ec:e2:21:75:61:49:cd:b0:c6:0c:82:95:
f8:0a:fb:41:db:21:53:8d:ec:b6:39:43:b8:93:00:e7:04:82:
83:2b:46:a5:17:2b:d9:c9:67:52:01:1b:d4:48:b9:0e:cb:3b:
c4:57:bf:da:b1:95:e6:3f:b5:60:0f:35:17:f5:7e:98:19:63:
3b:15:de:7b:0d:34:8b:9e:0c:c3:8c:4b:74:db:cc:ed:d5:36:
1b:86:b6:d4:72:cd:c2:77:63:cc:ab:bf:ae:18:cc:33:cd:67:
5b:56:25:bf:50:fd:14:83:a0:ce:49:54:e9:e2:67:74:6a:97:
f2:82:61:ac:a7:29:cb:a4:00:3a:8f:c5:59:ef:81:fe:03:49:
0b:47:0c:bd:e1:31:b5:81:2c:44:bb:71:2c:96:48:a5:37:13:
92:85:63:e0:3f:b7:fa:14:cf:ca:79:8b:ff:79:e9:f6:df:fa:
c3:ea:31:bc:e3:d3:7a:a2:0d:d4:b8:4d:dd:eb:9f:5c:4c:34:
ea:3d:e2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:54:08 2026 by rpki-client