
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft
File: H5ogKJzpMW5ls9tyToxzYGyPhks.mft (raw, json)
Hash identifier: vkLf7GKluz7z43HW2aDYUfXtCsNQKtj21uwyM0QbTkM=
Subject key identifier: E0:AC:B4:7F:3F:23:F0:E4:80:42:2C:59:BF:40:5D:AC:20:19:01:D2
Authority key identifier: 1F:9A:20:28:9C:E9:31:6E:65:B3:DB:72:4E:8C:73:60:6C:8F:86:4B
Certificate issuer: /CN=A914BF33/serialNumber=1F9A20289CE9316E65B3DB724E8C73606C8F864B
Certificate serial: 0D14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft
Manifest number: 0CFA
Signing time: Thu 02 Jul 2026 18:30:01 +0000
Manifest this update: Thu 02 Jul 2026 18:30:01 +0000
Manifest next update: Thu 09 Jul 2026 18:30:01 +0000
Files and hashes: 1: H5ogKJzpMW5ls9tyToxzYGyPhks.crl (hash: rGIOsMG8Dn71FMVZY7S8koDB/2OjkYK6LCLiZT8CsSY=)
2: 67827BDC0B8511EA97C80D52C4F9AE02.roa (hash: 7CjBAuah6/o6TO56EaGyhTraMGUdKeiH/EG6F7J9nYY=)
3: 172E487A416911ECB6B11742C4F9AE02.roa (hash: lJfLPhd1kAAzDWL/Ne5AiMPNOkxSubYVAGKuzG/T5pk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.crl
rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 Jul 2026 18:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3348 (0xd14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BF33, serialNumber=1F9A20289CE9316E65B3DB724E8C73606C8F864B
Validity
Not Before: Jul 2 18:30:01 2026 GMT
Not After : Jul 9 18:30:01 2026 GMT
Subject: CN=6a46ae29-0eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9d:bf:de:b5:2c:c7:a8:72:46:68:8e:bf:83:
60:82:91:bb:1c:b2:b5:07:c7:a9:a1:e2:f4:7a:a2:
dc:55:72:c7:4f:77:fc:96:fe:f8:45:55:bb:a9:d3:
e2:37:6e:95:bd:04:fa:ea:1f:8f:7e:3b:b3:4a:3d:
20:c7:f6:7f:49:d6:f2:87:69:7a:95:20:92:36:61:
e8:e7:d4:54:b0:89:45:16:a8:e6:e2:c3:ea:a2:9b:
af:0b:16:2a:e3:74:99:19:5b:c7:ef:96:14:7a:24:
4e:b3:1b:28:df:aa:82:bb:90:4b:a4:20:49:a5:06:
29:72:ac:cf:ea:61:1c:9c:bb:d0:d9:62:76:3b:9e:
15:32:42:91:1b:4e:9d:ef:ec:a0:6f:81:57:ea:1d:
12:f9:ed:6c:73:ba:6b:1d:e6:e6:21:cc:36:ef:9b:
37:8c:ef:7f:89:53:ff:34:f4:41:bf:ec:9a:8d:d0:
ae:88:a8:ea:22:67:02:03:4b:1b:05:8b:c5:86:f8:
9d:85:ad:99:b1:87:67:95:2b:8a:d9:0c:20:5a:6f:
12:38:93:5c:2b:c4:93:42:32:85:29:f4:5b:77:2b:
eb:65:a5:86:8b:bc:bf:25:76:c5:b7:70:02:61:50:
6e:3f:52:81:3a:3b:b3:5b:28:4b:85:38:1d:22:c2:
3c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:AC:B4:7F:3F:23:F0:E4:80:42:2C:59:BF:40:5D:AC:20:19:01:D2
X509v3 Authority Key Identifier:
keyid:1F:9A:20:28:9C:E9:31:6E:65:B3:DB:72:4E:8C:73:60:6C:8F:86:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:7a:aa:78:c6:ed:41:f4:e6:5b:b6:cd:55:b3:85:25:72:27:
cc:e6:ab:20:31:59:11:fa:e2:b1:d8:7a:13:0f:29:48:fe:9d:
57:c3:8c:0d:9a:56:de:83:b3:cb:20:34:c9:f8:a8:6d:a9:ed:
4b:9a:be:dc:bb:05:18:25:24:03:b0:5c:47:93:b7:fc:ed:59:
0c:4d:1c:d4:32:2e:14:ff:cd:b1:41:68:e2:fa:55:87:70:c1:
dc:32:22:72:ab:16:c8:da:38:e3:d1:6f:39:d1:62:44:04:ba:
74:c2:a1:e6:07:be:39:c6:07:e5:c7:f6:f7:0d:a3:ff:ba:c5:
ff:2f:7a:ec:8f:ee:c4:fd:e1:e3:8d:b6:d0:93:3b:de:c6:a1:
2c:22:55:9c:ea:56:eb:b2:8c:51:72:4e:3e:4e:51:ac:bf:3d:
9f:13:c1:f5:ec:8e:79:c1:d3:9d:46:80:7a:0f:52:e4:f5:b8:
e1:fd:e7:1f:52:85:29:2d:6c:08:5e:78:a4:1f:9f:d8:49:f7:
b4:77:88:b4:68:57:10:b8:18:b9:44:f6:90:b2:3f:6c:21:39:
86:53:94:d8:c1:eb:f2:a6:79:a1:11:a4:bc:f4:a7:ee:aa:0b:
e7:38:87:1b:26:1a:95:79:8b:34:c0:c3:76:eb:66:dc:21:b5:
95:d6:1f:5f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDRQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEJGMzMxMTAvBgNVBAUTKDFGOUEyMDI4OUNFOTMxNkU2NUIzREI3MjRFOEM3MzYw
NkM4Rjg2NEIwHhcNMjYwNzAyMTgzMDAxWhcNMjYwNzA5MTgzMDAxWjAYMRYwFAYD
VQQDEw02YTQ2YWUyOS0wZWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxZ2/3rUsx6hyRmiOv4NggpG7HLK1B8epoeL0eqLcVXLHT3f8lv74RVW7qdPi
N26VvQT66h+PfjuzSj0gx/Z/Sdbyh2l6lSCSNmHo59RUsIlFFqjm4sPqopuvCxYq
43SZGVvH75YUeiROsxso36qCu5BLpCBJpQYpcqzP6mEcnLvQ2WJ2O54VMkKRG06d
7+ygb4FX6h0S+e1sc7prHebmIcw275s3jO9/iVP/NPRBv+yajdCuiKjqImcCA0sb
BYvFhvidha2ZsYdnlSuK2QwgWm8SOJNcK8STQjKFKfRbdyvrZaWGi7y/JXbFt3AC
YVBuP1KBOjuzWyhLhTgdIsI8FQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOCstH8/
I/DkgEIsWb9AXawgGQHSMB8GA1UdIwQYMBaAFB+aICic6TFuZbPbck6Mc2Bsj4ZL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkYzMy80NjA2NjFEQzBC
ODMxMUVBOTcxQTg2NERDNEY5QUUwMi9INW9nS0p6cE1XNWxzOXR5VG94ellHeVBo
a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0g1b2dLSnpwTVc1bHM5dHlUb3h6WUd5UGhrcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QkYzMy80NjA2NjFEQzBCODMxMUVBOTcxQTg2NERDNEY5QUUwMi9INW9nS0p6cE1X
NWxzOXR5VG94ellHeVBoa3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUXqqeMbtQfTmW7bNVbOFJXInzOarIDFZEfrisdh6Ew8pSP6dV8OMDZpW3oOz
yyA0yfiobantS5q+3LsFGCUkA7BcR5O3/O1ZDE0c1DIuFP/NsUFo4vpVh3DB3DIi
cqsWyNo449FvOdFiRAS6dMKh5ge+OcYH5cf29w2j/7rF/y967I/uxP3h44220JM7
3sahLCJVnOpW67KMUXJOPk5RrL89nxPB9eyOecHTnUaAeg9S5PW44f3nH1KFKS1s
CF54pB+f2En3tHeItGhXELgYuUT2kLI/bCE5hlOU2MHr8qZ5oRGkvPSn7qoL5ziH
GyYalXmLNMDDdutm3CG1ldYfXw==
-----END CERTIFICATE-----
Generated at Sat Jul 4 09:31:53 2026 by rpki-client