
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft
File: HHswV26xhQjvJ3nE71u1ckkt0pk.mft (raw, json)
Hash identifier: IH7f1q8kRluIGliQ7u+K2l+lcFf1WBc8dghqwRBe2O0=
Subject key identifier: 33:C3:1D:77:46:35:6D:AA:18:6C:DB:D8:EC:87:CA:55:29:F7:9C:51
Authority key identifier: 1C:7B:30:57:6E:B1:85:08:EF:27:79:C4:EF:5B:B5:72:49:2D:D2:99
Certificate issuer: /CN=A911F5CA/serialNumber=1C7B30576EB18508EF2779C4EF5BB572492DD299
Certificate serial: 01BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHswV26xhQjvJ3nE71u1ckkt0pk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft
Manifest number: 01AC
Signing time: Tue 21 Jul 2026 05:35:12 +0000
Manifest this update: Tue 21 Jul 2026 05:35:11 +0000
Manifest next update: Tue 28 Jul 2026 05:35:11 +0000
Files and hashes: 1: HHswV26xhQjvJ3nE71u1ckkt0pk.crl (hash: rp5XeONttz4dDNHlDHPQ9DS4p8tmJDECbfVc4aYv9Ak=)
2: E3A9EC4C025011EFB3CEFA09C4F9AE02.roa (hash: 1zV+/1R8NXTU00HPSWjbCXmTRWs8S22JUS1CXgvAzR4=)
3: 7E933D0427B711EF8867AA49C4F9AE02.roa (hash: GCQF0mtb8Gekl6O8/+EeLV+4PjQyO396ilHkXd+2kuw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.crl
rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHswV26xhQjvJ3nE71u1ckkt0pk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 05:35:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 442 (0x1ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F5CA, serialNumber=1C7B30576EB18508EF2779C4EF5BB572492DD299
Validity
Not Before: Jul 21 05:35:11 2026 GMT
Not After : Jul 28 05:35:11 2026 GMT
Subject: CN=6a5f0510-fc92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:51:5e:97:3f:72:0d:0d:52:c0:f9:6c:7b:b7:
ce:54:90:b1:07:2d:07:06:64:5a:54:8f:09:a8:5c:
cd:b1:bb:75:fc:98:cd:2c:e1:77:e1:89:a0:e1:3d:
5c:07:f4:a3:72:41:fb:7b:33:fa:0e:6f:db:fe:fa:
05:b4:2a:41:89:4f:c8:59:31:83:9f:59:70:44:65:
d9:36:a3:a1:13:3d:8c:f7:8a:6f:a2:7a:14:ad:fa:
2a:5c:1c:38:3e:dc:e8:4f:e4:63:44:5c:b0:e1:2d:
45:79:ae:b8:b4:4d:1b:33:3c:a1:5a:bd:6c:4c:aa:
8b:b9:1c:98:39:50:7d:82:e4:42:4d:2a:d9:b1:05:
5c:38:a0:0f:f9:32:b9:88:03:9d:d5:63:b0:eb:3a:
25:2d:07:fc:33:e2:bd:07:ef:11:9e:b1:66:0a:c9:
b7:df:8c:d4:e8:5a:72:2b:16:d4:00:29:84:5a:cf:
4c:a4:b4:bd:3d:11:67:f9:ee:5f:9a:82:9f:69:6d:
79:3e:11:7c:e9:6b:ce:1a:26:60:9d:d0:00:b7:31:
7e:36:0c:10:04:55:8f:10:7e:f0:81:b3:35:ff:1e:
df:db:6f:f2:b6:2d:12:d5:33:1d:bd:0e:d2:09:40:
e1:01:06:60:d8:64:3c:d9:4d:8c:d0:d4:17:07:df:
b7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C3:1D:77:46:35:6D:AA:18:6C:DB:D8:EC:87:CA:55:29:F7:9C:51
X509v3 Authority Key Identifier:
keyid:1C:7B:30:57:6E:B1:85:08:EF:27:79:C4:EF:5B:B5:72:49:2D:D2:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHswV26xhQjvJ3nE71u1ckkt0pk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:aa:f0:69:9f:24:ed:0c:e2:aa:cd:c1:e3:d2:49:c3:25:95:
c8:d7:db:1f:35:91:78:4e:65:d1:a7:c8:6f:18:d7:68:35:67:
3d:a0:2a:9e:a2:e4:59:f0:e6:85:83:6d:bd:4c:0b:7b:73:a1:
f2:47:c0:30:0c:7c:6b:c7:13:f4:79:39:a5:e2:32:6f:b0:5f:
45:2c:2d:15:b5:fb:1e:37:a4:08:bc:94:3e:0f:8c:01:fb:4e:
fc:3c:ca:43:31:29:17:64:64:57:14:c2:57:37:02:1d:e5:ed:
4c:57:a1:86:e1:4c:9b:2f:51:06:52:38:46:92:c0:80:88:2f:
a0:26:58:e6:58:27:ad:f0:a5:3a:fb:6d:ef:4c:4b:5b:b6:3e:
b6:3b:13:89:48:83:bb:30:80:df:6e:ef:f8:97:24:32:34:78:
0d:68:26:0c:ab:7a:22:06:7b:b2:8b:6f:b4:e0:c6:80:67:a9:
82:c6:6f:7c:f3:41:cc:e8:57:c7:30:72:a5:7c:f0:db:6c:96:
0e:76:b2:30:98:4f:a0:aa:d6:bd:e8:93:fd:d2:98:5c:cc:fb:
32:50:44:56:53:fc:60:86:62:73:e4:19:9a:fc:8b:1b:6c:04:
22:a4:a3:ce:12:ed:81:cd:86:be:d3:1e:27:75:3e:62:0c:be:
c1:a0:09:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:33:33 2026 by rpki-client