
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft
File: H5ogKJzpMW5ls9tyToxzYGyPhks.mft (raw, json)
Hash identifier: nKzgX/YK5AUD3vbslkC6zzamOqYB2ajfGC5jCWNQ3Qk=
Subject key identifier: 6A:6E:89:A8:4A:2E:66:83:21:80:18:53:08:2C:58:BD:57:3D:D8:60
Authority key identifier: 1F:9A:20:28:9C:E9:31:6E:65:B3:DB:72:4E:8C:73:60:6C:8F:86:4B
Certificate issuer: /CN=A914BF33/serialNumber=1F9A20289CE9316E65B3DB724E8C73606C8F864B
Certificate serial: 0D45
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft
Manifest number: 0D2B
Signing time: Tue 06 Oct 2026 18:24:41 +0000
Manifest this update: Tue 06 Oct 2026 18:24:40 +0000
Manifest next update: Tue 13 Oct 2026 18:24:40 +0000
Files and hashes: 1: H5ogKJzpMW5ls9tyToxzYGyPhks.crl (hash: xKhict39pUwVD/VTqFZe0NLX3+SLRpXZt0Os01zusmo=)
2: 67827BDC0B8511EA97C80D52C4F9AE02.roa (hash: 7CjBAuah6/o6TO56EaGyhTraMGUdKeiH/EG6F7J9nYY=)
3: 172E487A416911ECB6B11742C4F9AE02.roa (hash: lJfLPhd1kAAzDWL/Ne5AiMPNOkxSubYVAGKuzG/T5pk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.crl
rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 18:24:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3397 (0xd45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BF33, serialNumber=1F9A20289CE9316E65B3DB724E8C73606C8F864B
Validity
Not Before: Oct 6 18:24:40 2026 GMT
Not After : Oct 13 18:24:40 2026 GMT
Subject: CN=6ac53ce8-e17d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e3:14:3e:4d:1e:a3:cc:84:ad:b2:64:ad:51:
64:1f:03:d9:32:35:3d:e0:d4:8b:a2:08:b8:1b:38:
1d:39:09:75:ed:93:d7:e1:21:c2:08:be:ab:3a:6f:
c3:90:41:ef:4b:a6:42:f1:8d:3e:96:02:9f:49:b8:
80:ae:4f:52:2a:87:7e:2f:d8:a4:91:c8:d1:96:6d:
cc:29:5e:02:3a:10:fd:06:0a:ac:50:43:fd:ab:22:
72:7c:dd:f1:75:29:6d:ca:b8:dc:6a:f2:16:ec:b6:
e8:3a:6e:cb:3e:96:40:84:58:69:50:af:61:63:93:
5f:44:86:5c:e5:61:4e:ba:a2:b6:fb:64:f7:a5:97:
c0:2e:89:19:27:03:ee:d7:de:50:5f:01:f5:ef:c5:
02:93:67:3e:0d:72:8b:2c:49:01:40:56:6c:eb:de:
85:21:3e:65:09:70:f6:ef:23:c9:3b:d6:08:80:6e:
7a:06:b7:03:d5:ac:36:97:a0:43:78:33:a5:12:a1:
30:23:1f:79:ab:5a:17:75:5c:bd:a0:13:10:4f:6d:
83:f5:de:50:41:51:4b:79:2d:f6:2a:78:0a:46:9b:
2a:87:1e:ba:a9:c2:3d:fa:8e:49:bb:ca:70:21:fc:
b7:ea:4b:2e:2f:bc:d5:8d:9c:e2:2a:92:10:48:f3:
cc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:6E:89:A8:4A:2E:66:83:21:80:18:53:08:2C:58:BD:57:3D:D8:60
X509v3 Authority Key Identifier:
keyid:1F:9A:20:28:9C:E9:31:6E:65:B3:DB:72:4E:8C:73:60:6C:8F:86:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:1c:c1:84:07:b9:4b:2d:a8:b1:b8:44:3b:7f:d8:ce:29:5e:
74:c0:7a:99:20:bb:08:17:01:ee:74:16:3e:37:d4:db:52:6c:
d2:ee:a6:20:b8:2d:17:b2:41:13:14:0d:a2:07:a1:8d:df:c9:
40:a1:46:74:ee:f7:e5:80:f0:34:e8:2e:1e:92:d1:26:c7:c3:
c0:dc:eb:b3:ab:03:f5:6f:71:5d:74:68:ea:55:b4:4b:97:6f:
d0:71:02:20:17:ae:f8:df:ae:7b:09:f2:85:83:5d:13:f2:7c:
fe:f6:b0:4f:97:06:81:83:26:d1:51:3b:9f:99:6d:91:62:54:
b7:0e:04:6b:01:9e:1c:a6:ec:e9:33:cf:43:d9:46:ef:25:24:
18:b4:6d:5c:9b:9a:e9:d5:a2:2f:0e:ad:e1:3b:bc:60:fa:0a:
47:10:4f:b9:52:94:b4:88:9f:74:cf:a2:6b:d3:bc:ee:bf:9b:
3c:34:89:6a:7c:75:f7:9a:e1:94:40:8e:e1:03:eb:12:00:0b:
80:0e:0b:f8:ab:c9:8d:d2:d5:c8:84:d0:98:f4:50:5d:42:23:
e5:d5:e7:f4:21:21:5a:29:f9:4f:04:88:8f:ed:4d:48:10:3c:
fb:c4:5e:23:3d:7a:ec:54:42:99:8e:f4:4e:b9:78:9c:08:5f:
ab:14:5d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 16:06:16 2026 by rpki-client