
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.mft
File: HSQuN7enRsN-RUFFarAJiztXPPw.mft (raw, json)
Hash identifier: xhUVLAOASHX4Jt6yrQq6QhB1sjd8J4ipoefiNO4bilw=
Subject key identifier: 8B:35:3E:86:CA:17:DC:2D:6C:9C:1F:AC:DB:79:3F:CC:C5:63:36:54
Authority key identifier: 1D:24:2E:37:B7:A7:46:C3:7E:45:41:45:6A:B0:09:8B:3B:57:3C:FC
Certificate issuer: /CN=A9142EA4/serialNumber=1D242E37B7A746C37E4541456AB0098B3B573CFC
Certificate serial: C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSQuN7enRsN-RUFFarAJiztXPPw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.mft
Manifest number: BF
Signing time: Wed 15 Jul 2026 08:16:52 +0000
Manifest this update: Wed 15 Jul 2026 08:16:51 +0000
Manifest next update: Wed 22 Jul 2026 08:16:51 +0000
Files and hashes: 1: HSQuN7enRsN-RUFFarAJiztXPPw.crl (hash: jRfiOfpqe9y7cASNfnsb1oGhqtwH4HRCC23EnL3PlIo=)
2: 96E040E063B211F09B18DA38C4F9AE02.roa (hash: TJexH2mJnGHPHwiqib8qKUREb69KfASR/45xsIgcTsw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.crl
rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSQuN7enRsN-RUFFarAJiztXPPw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 08:16:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 200 (0xc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142EA4, serialNumber=1D242E37B7A746C37E4541456AB0098B3B573CFC
Validity
Not Before: Jul 15 08:16:51 2026 GMT
Not After : Jul 22 08:16:51 2026 GMT
Subject: CN=6a5741f3-0ec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0b:ba:c1:ea:e5:94:0e:4b:7b:7e:52:5c:58:
5a:63:cc:0b:3b:b3:8a:1f:21:6e:bd:3f:c4:e5:15:
78:40:f2:e2:d0:fa:e8:49:8c:65:60:28:1f:2c:e8:
c5:1a:98:2f:74:42:3c:45:f4:cc:a2:94:24:ac:21:
bc:39:8e:28:a6:bf:55:8c:1b:e2:d5:20:a7:91:b2:
39:96:b9:e9:d0:4f:ae:a3:06:bf:b8:e9:19:4e:21:
37:b6:f9:0d:08:1d:12:6f:05:e5:e1:ea:b5:4d:fd:
74:e3:f8:d3:55:c1:9e:f3:a5:96:93:7b:ab:b0:20:
db:42:e1:c8:9a:83:fd:48:70:a5:0a:9d:d3:4e:bc:
8f:40:24:e4:0e:82:53:18:73:52:99:21:10:3d:ca:
e4:a8:f8:0b:0b:a0:44:ca:78:cb:db:9c:55:c3:5e:
eb:e5:9a:cb:ba:f5:80:5e:ba:79:96:82:a6:3d:6f:
f0:e9:80:51:35:c5:37:93:e3:ec:35:cc:8b:b6:e0:
ce:75:d3:aa:ca:dc:49:50:e9:9e:9c:78:60:22:1b:
92:a8:28:0c:5f:f5:5d:88:cf:96:3b:4b:9d:ad:e8:
95:c9:68:c2:0d:6c:f1:63:29:c5:ce:18:e1:d3:1a:
eb:bb:27:3b:dc:50:8b:0a:3e:85:57:58:d0:91:95:
b3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:35:3E:86:CA:17:DC:2D:6C:9C:1F:AC:DB:79:3F:CC:C5:63:36:54
X509v3 Authority Key Identifier:
keyid:1D:24:2E:37:B7:A7:46:C3:7E:45:41:45:6A:B0:09:8B:3B:57:3C:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSQuN7enRsN-RUFFarAJiztXPPw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:27:34:ce:2b:0d:f4:c7:36:99:a3:e3:ac:1d:1e:f7:ce:bb:
a8:7e:6e:d4:0c:1c:28:49:12:ae:88:47:67:41:5a:4b:e7:dd:
06:59:30:2b:ee:f1:f1:68:9a:87:4e:59:aa:5c:bf:43:29:ff:
6b:bd:b6:9f:e9:7f:bd:8c:21:a0:f1:7d:aa:04:c9:22:67:cf:
f5:a9:72:ab:42:63:37:d8:01:ac:ee:3a:3a:a9:f8:4f:74:05:
84:7d:4d:68:78:22:43:f4:00:6c:8a:7a:a1:7e:4b:06:21:ce:
02:1c:c3:00:5d:28:c3:18:93:bf:0f:e9:91:44:e3:76:5d:fc:
ff:19:1c:fb:1f:e4:16:24:c1:72:bd:c7:1b:3c:ea:30:81:12:
26:41:93:2f:da:38:09:a0:bb:63:f0:e6:1d:55:d4:d0:9e:48:
c9:af:a1:73:03:85:49:13:17:98:9e:4e:a5:52:15:76:d4:c4:
0c:1c:1d:ea:b6:eb:33:50:b4:07:d7:d7:11:b9:7f:59:d3:d4:
6e:2a:94:df:8e:e6:4b:25:0e:5f:50:b1:1c:35:8f:b3:5f:1f:
ad:9b:0e:7b:37:83:54:8d:92:15:a6:4f:55:94:22:68:cd:f1:
7d:f6:f1:a4:ec:19:76:ae:81:1d:e9:9a:51:4f:ce:64:46:91:
26:e8:6c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 16 06:33:08 2026 by rpki-client