
$ rpki-client -vvf rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.mft
File: H_jK4i0tckq70cLRJft9t7T4Sv8.mft (raw, json)
Hash identifier: 2zFFVkyxCiHP7w+rksgia3Pyl8lIuR77ULP9GVDtz54=
Subject key identifier: 98:B7:25:06:22:E8:A8:BF:21:75:7D:1B:A3:F4:97:5F:B9:AF:4B:10
Authority key identifier: 1F:F8:CA:E2:2D:2D:72:4A:BB:D1:C2:D1:25:FB:7D:B7:B4:F8:4A:FF
Certificate issuer: /CN=A915670F/serialNumber=1FF8CAE22D2D724ABBD1C2D125FB7DB7B4F84AFF
Certificate serial: 5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_jK4i0tckq70cLRJft9t7T4Sv8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.mft
Manifest number: 5B
Signing time: Fri 17 Jul 2026 09:25:41 +0000
Manifest this update: Fri 17 Jul 2026 09:25:40 +0000
Manifest next update: Fri 24 Jul 2026 09:25:40 +0000
Files and hashes: 1: H_jK4i0tckq70cLRJft9t7T4Sv8.crl (hash: DggJEo7C8OoZSHsMdBEJ3kNtzJs87rfT3M1cj1jCBRA=)
2: E342A7D0F9D911F0908C8513676F56BC.roa (hash: rFk76m5fW9CYOpE5VZsRNzUgbtpqshwPbQBMeshiV/E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.crl
rsync://rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_jK4i0tckq70cLRJft9t7T4Sv8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 09:25:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93 (0x5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915670F, serialNumber=1FF8CAE22D2D724ABBD1C2D125FB7DB7B4F84AFF
Validity
Not Before: Jul 17 09:25:40 2026 GMT
Not After : Jul 24 09:25:40 2026 GMT
Subject: CN=6a59f515-2984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4e:90:43:d0:86:78:0c:0c:a9:01:28:99:24:
8f:66:89:e8:4d:2a:79:14:71:69:77:0a:a3:5e:45:
f2:84:1c:ea:90:bc:e0:1e:b0:61:a0:e0:fe:b7:f4:
e9:45:81:41:bb:85:c4:37:74:e1:70:c1:69:fd:d2:
5f:41:da:c7:02:7d:6c:d8:e6:54:ff:85:8e:02:97:
29:81:40:90:a0:9b:93:0b:da:9f:23:84:ab:3e:5e:
1e:0b:44:30:01:4f:b6:59:57:f8:8f:15:a7:e5:d1:
7c:57:00:8d:1e:99:1f:65:b6:e2:95:cb:a0:9e:77:
6b:4f:a7:46:32:d7:65:96:d7:a7:c8:7b:d2:db:f5:
33:9a:2c:66:ce:21:f3:a8:b4:4f:9a:90:bc:71:83:
db:9b:ff:6f:35:ab:f3:c3:7d:bd:22:47:00:0b:db:
23:97:87:4a:7a:34:57:cd:52:3a:53:9f:9c:c7:27:
64:e4:fb:5c:9b:1c:46:c9:8b:ac:c9:11:7b:5a:f6:
80:f9:bf:cc:1d:2f:84:4c:07:2b:8f:e0:b9:cf:1f:
3d:e0:fe:f0:ab:e5:08:c4:2d:0f:3a:25:b2:2b:16:
c5:5f:c7:95:5b:82:a2:50:02:91:c3:70:fc:ac:a3:
7c:d8:80:90:f1:45:93:78:f4:21:07:b4:0c:d7:43:
62:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B7:25:06:22:E8:A8:BF:21:75:7D:1B:A3:F4:97:5F:B9:AF:4B:10
X509v3 Authority Key Identifier:
keyid:1F:F8:CA:E2:2D:2D:72:4A:BB:D1:C2:D1:25:FB:7D:B7:B4:F8:4A:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_jK4i0tckq70cLRJft9t7T4Sv8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:63:28:2c:44:4a:e8:12:4e:65:34:14:06:dd:1d:ce:65:9e:
77:a2:b6:4d:60:5b:b0:55:26:e8:29:c0:52:55:18:e9:52:33:
54:26:d1:e6:90:32:89:e5:28:c5:f5:a1:5e:f5:1e:95:c2:44:
ba:2e:ba:5b:fc:68:56:72:9d:32:f8:2a:7d:35:d6:54:dc:a5:
7d:bb:cf:86:d3:15:11:9f:36:10:8f:8d:e9:1e:73:f3:37:e7:
85:c0:9d:c0:e4:10:17:b7:d6:00:44:fa:9a:bd:68:16:ad:0a:
dd:df:d9:ef:4a:c1:30:94:a8:52:bf:e6:54:43:fa:6f:ec:94:
35:3a:f3:32:ca:06:db:f7:4c:08:27:10:6d:36:94:44:a1:ce:
fd:bd:66:49:2b:a9:14:40:de:39:19:c3:ec:0c:1f:54:a5:f2:
29:60:94:d8:c5:2a:08:a9:27:dc:f6:8a:a2:ef:82:2e:e7:08:
12:72:d7:ca:f0:00:1c:71:06:60:76:05:ae:47:97:2f:91:56:
96:68:5d:37:1a:5f:84:91:74:51:04:73:d3:ae:37:b7:cb:54:
ec:3d:6a:b1:a5:e5:17:2a:fa:09:bc:e5:55:53:ca:5f:7b:50:
0d:a6:85:d6:9d:20:7b:ee:6a:7c:75:09:1f:99:bf:93:0f:05:
e7:57:81:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 09:27:44 2026 by rpki-client