
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.mft
File: HdHLvF31vfq7s62vErACVrfxjRI.mft (raw, json)
Hash identifier: 1tYjbJ7AaMpFbTutAS16WX8oGJjMSLLoJ36t1Yn1TyE=
Subject key identifier: 45:42:FE:C6:2D:87:A0:1F:7B:E6:2E:38:C8:6F:24:B6:22:75:28:C8
Authority key identifier: 1D:D1:CB:BC:5D:F5:BD:FA:BB:B3:AD:AF:12:B0:02:56:B7:F1:8D:12
Certificate issuer: /CN=A915ADC4/serialNumber=1DD1CBBC5DF5BDFABBB3ADAF12B00256B7F18D12
Certificate serial: 023B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdHLvF31vfq7s62vErACVrfxjRI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.mft
Manifest number: 0225
Signing time: Wed 23 Sep 2026 03:01:09 +0000
Manifest this update: Wed 23 Sep 2026 03:01:08 +0000
Manifest next update: Wed 30 Sep 2026 03:01:08 +0000
Files and hashes: 1: HdHLvF31vfq7s62vErACVrfxjRI.crl (hash: KaD5PD0c7nf+bXbncBTHefsEFrlHLt9NbTXMpn9iQaA=)
2: AFC9F5324A0F11EF9E51BD7CC4F9AE02.roa (hash: MLgAaYwXB1GgAbwc1lk9vp3Ul9zku5iS1CDVPTfotbE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.crl
rsync://rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdHLvF31vfq7s62vErACVrfxjRI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 03:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 571 (0x23b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915ADC4, serialNumber=1DD1CBBC5DF5BDFABBB3ADAF12B00256B7F18D12
Validity
Not Before: Sep 23 03:01:08 2026 GMT
Not After : Sep 30 03:01:08 2026 GMT
Subject: CN=6ab340f5-ad66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f2:47:89:37:34:fe:74:46:f5:18:0f:7e:8a:
a2:ed:2d:bc:b5:14:86:e5:4d:d7:42:04:01:cd:41:
9c:57:53:78:ec:c9:d1:17:f5:9a:15:fe:17:ad:2b:
88:66:bf:b3:cd:28:c4:94:b0:d5:fc:c2:01:f6:df:
ba:b8:6c:49:38:03:8a:47:17:18:d5:b6:55:58:e8:
2a:a5:9f:f4:5c:52:f7:0a:89:63:b8:36:f6:21:9c:
ff:d4:87:ae:ab:c0:98:79:21:b0:ea:12:14:c2:46:
0e:8b:10:ac:df:87:d2:c1:79:d4:10:1e:b9:b6:7e:
54:86:50:3e:5f:ab:53:52:db:8d:07:74:4e:e5:57:
32:49:e8:67:32:33:37:4c:3b:a5:b4:9d:fb:49:4f:
73:48:87:71:81:3f:f9:c4:bf:30:d3:77:b2:d2:bb:
21:aa:98:fd:fb:f6:81:3b:18:ab:8f:1a:04:21:c2:
1c:f6:dc:4f:f6:c2:e2:56:ca:b8:1b:5a:2a:2e:f0:
21:43:18:49:1f:21:5a:35:eb:80:7d:33:08:1e:73:
dc:5e:cc:c2:79:4f:ab:66:d9:ef:ee:81:19:41:7f:
59:01:ff:a2:57:08:44:73:5a:50:fe:c4:86:51:18:
5d:aa:27:e2:6b:3b:83:aa:db:15:9b:63:69:d7:77:
20:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:42:FE:C6:2D:87:A0:1F:7B:E6:2E:38:C8:6F:24:B6:22:75:28:C8
X509v3 Authority Key Identifier:
keyid:1D:D1:CB:BC:5D:F5:BD:FA:BB:B3:AD:AF:12:B0:02:56:B7:F1:8D:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdHLvF31vfq7s62vErACVrfxjRI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:47:bb:f6:82:52:8d:27:f6:27:83:f8:b3:bd:94:ac:14:56:
cf:9c:2c:8b:91:c3:72:b7:d8:4f:58:78:78:1a:ec:c0:3d:e3:
e8:b8:19:9b:27:21:ae:0e:35:73:4e:39:d4:07:96:20:9b:a4:
66:19:16:28:45:af:fe:37:80:b8:88:01:68:88:7a:3f:5b:74:
ea:03:bc:b0:c0:c8:a1:e3:e0:a6:ff:18:48:3a:6c:e5:61:16:
53:03:99:40:ff:f4:46:dc:80:93:c6:c1:89:40:f1:7b:ec:0a:
4f:b4:44:fa:7f:08:39:2b:89:cc:d0:20:7e:06:9f:da:44:ee:
ab:f4:d3:32:e2:46:69:de:a7:f0:f5:eb:37:99:1e:2d:5b:f8:
13:74:5a:49:40:ad:74:bf:1b:68:33:4f:f4:e9:31:6e:0e:56:
c3:7f:1d:18:f6:ef:26:16:0d:f6:c9:68:35:34:92:1d:5b:05:
f3:25:0c:d5:15:87:3c:ae:39:5a:0a:77:cc:38:4f:7f:d4:b0:
f7:85:13:ba:c2:a7:73:ee:b8:b4:e6:47:3c:2e:ef:e6:ff:5e:
41:44:d0:e3:99:1e:ce:9e:a2:cd:97:64:38:41:6d:20:de:30:
4f:00:83:60:6b:75:9b:4f:95:00:da:06:d5:ee:e4:b5:50:ea:
6f:36:b6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:06:39 2026 by rpki-client