
$ rpki-client -vvf rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft
File: HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft (raw, json)
Hash identifier: n6J5zANo+pqzDFUwQ0nQPBwneVde5iBO6gG+MGLeIV0=
Subject key identifier: 34:BD:34:AB:8B:40:EF:D1:0C:08:B2:EA:DF:DE:BC:0B:7C:D6:31:9B
Authority key identifier: 1D:3A:9A:8F:C9:7C:FC:D7:AE:84:FF:DC:5A:A0:BB:FB:96:93:DC:97
Certificate issuer: /CN=A913C52D/serialNumber=1D3A9A8FC97CFCD7AE84FFDC5AA0BBFB9693DC97
Certificate serial: 0778
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft
Manifest number: 0774
Signing time: Sat 16 May 2026 21:37:03 +0000
Manifest this update: Sat 16 May 2026 21:37:03 +0000
Manifest next update: Sat 23 May 2026 21:37:03 +0000
Files and hashes: 1: HTqaj8l8_NeuhP_cWqC7-5aT3Jc.crl (hash: doelwvWtUg76JTR3oBM8ZeTFIyx13JoL2nHaWE4NCkk=)
2: FCF8B992679111F09C8F057DC4F9AE02.roa (hash: hP6hvlAGVL2IjCd9PS9GV8LvEVC18omA9yYrbvB5Dqk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.crl
rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 23 May 2026 21:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1912 (0x778)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C52D, serialNumber=1D3A9A8FC97CFCD7AE84FFDC5AA0BBFB9693DC97
Validity
Not Before: May 16 21:37:03 2026 GMT
Not After : May 23 21:37:03 2026 GMT
Subject: CN=6a08e37f-9576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:bf:ee:1b:fe:01:ab:b7:24:15:bd:ad:9f:b6:
1d:3e:8e:6c:73:56:19:b1:cc:07:64:bc:79:3f:3f:
15:5a:5c:47:80:ac:8c:53:da:c5:14:ab:6e:db:b8:
ba:0a:31:de:ca:8b:a8:51:5a:7a:a8:a7:ee:60:46:
35:64:10:e6:ee:ab:f2:a4:fa:71:ef:0d:bf:3b:f1:
5c:b3:6f:3f:ef:24:e9:28:05:63:74:0c:af:18:ce:
38:d1:21:2f:4f:a2:87:21:03:96:c0:15:d7:6d:7f:
e5:42:8c:33:bf:92:11:b5:c6:46:26:aa:10:ad:64:
e6:be:14:96:40:68:4e:3a:ee:bf:40:cb:f6:ea:c5:
de:0e:c2:1b:88:bc:6c:84:47:f2:71:a8:66:5d:41:
12:10:9f:49:88:1c:97:cd:e6:ca:4b:58:82:69:e4:
90:96:29:35:a4:69:fa:95:eb:52:a2:6d:3c:e8:b3:
1a:23:bd:c9:51:66:ef:18:90:14:47:82:a0:5b:5d:
f4:62:81:b4:28:40:57:b0:68:05:55:b7:0f:de:c0:
5f:00:57:ef:38:3c:2f:f9:0f:99:ee:fa:8a:23:a6:
31:3c:c8:e6:28:d3:97:a7:fe:69:60:6a:27:39:30:
fa:14:ae:34:36:5d:30:37:18:96:cc:9a:f2:56:99:
4f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:BD:34:AB:8B:40:EF:D1:0C:08:B2:EA:DF:DE:BC:0B:7C:D6:31:9B
X509v3 Authority Key Identifier:
keyid:1D:3A:9A:8F:C9:7C:FC:D7:AE:84:FF:DC:5A:A0:BB:FB:96:93:DC:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:89:b9:68:e1:eb:b3:b7:ff:fb:7a:31:10:92:42:5c:18:38:
8c:0a:c8:fc:d9:05:a7:6f:cb:e4:62:f9:c7:7c:c4:ac:5d:4e:
14:7f:59:ef:10:e0:4c:9e:f7:ae:66:cd:73:60:a1:a0:77:0a:
e2:38:2d:c1:cd:d0:d6:d7:53:c5:95:56:41:12:09:3b:1e:7e:
19:85:f0:9b:70:79:af:fa:ef:db:24:0f:95:3d:02:57:29:74:
50:cd:9e:a1:33:0c:fe:16:f7:27:52:29:7b:0d:4c:20:46:e3:
f7:17:a7:04:82:72:a6:86:7b:34:7a:3a:15:c1:73:04:a9:e2:
6c:0f:ac:ab:21:2b:fa:6b:85:c8:89:0f:5f:35:f6:83:b0:74:
86:d0:12:a0:ef:6d:ca:86:c3:03:9d:e6:61:76:2c:a1:b3:0c:
92:a7:7b:05:05:2a:5c:61:ac:c6:db:6b:5c:6e:be:41:6b:8a:
b2:96:72:df:c8:59:74:02:17:41:95:08:77:3d:10:c0:6d:15:
2d:db:e2:72:1f:4d:17:52:e8:56:79:50:f6:e4:46:5a:7c:3e:
1e:6b:61:c4:61:46:72:af:87:4b:7c:ef:f5:4b:59:49:6c:f8:
45:c6:5e:20:90:8b:b7:b6:e0:15:6f:a0:4a:82:b7:4f:15:d4:
7d:19:d6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 06:08:45 2026 by rpki-client