
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft
File: HC-QzT9RuKzQAhDjV96agctF0XE.mft (raw, json)
Hash identifier: 23R6DZbBBV56oQXYaxlEFy54Hllq7YZGexoOIxDYlCg=
Subject key identifier: EE:7B:95:54:A0:6E:54:83:6A:62:E3:03:F2:77:9B:29:57:8C:43:A5
Authority key identifier: 1C:2F:90:CD:3F:51:B8:AC:D0:02:10:E3:57:DE:9A:81:CB:45:D1:71
Certificate issuer: /CN=A915B01D/serialNumber=1C2F90CD3F51B8ACD00210E357DE9A81CB45D171
Certificate serial: 1EC0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft
Manifest number: 1EAE
Signing time: Tue 18 Aug 2026 16:10:04 +0000
Manifest this update: Tue 18 Aug 2026 16:10:03 +0000
Manifest next update: Tue 25 Aug 2026 16:10:03 +0000
Files and hashes: 1: HC-QzT9RuKzQAhDjV96agctF0XE.crl (hash: ZxudhFLOj6f7V7x3pWSgIqhasOd+V/db0oQlnjyk1PM=)
2: DE95A942581611EE878B2E54C4F9AE02.roa (hash: w+6KOPKF7OqR8NogCX5qW17+ARn7zv6tlxxb0zjTuqA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.crl
rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 16:10:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7872 (0x1ec0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B01D, serialNumber=1C2F90CD3F51B8ACD00210E357DE9A81CB45D171
Validity
Not Before: Aug 18 16:10:03 2026 GMT
Not After : Aug 25 16:10:03 2026 GMT
Subject: CN=6a8483dc-52c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9a:a2:1c:94:02:b7:4a:d4:41:a6:4d:7a:de:
e7:37:b8:60:a2:0f:a3:a5:df:23:84:57:59:25:24:
8f:e3:7f:42:c0:6b:25:9b:ef:6c:43:45:7f:7c:d3:
09:5b:58:e8:5e:a0:d7:1d:4b:d2:45:b6:47:d0:bd:
e4:92:d9:51:46:d1:bd:a1:62:ac:ff:e8:9b:e4:71:
44:e5:47:42:ec:de:50:54:16:25:da:d0:e4:42:85:
87:8c:77:fb:28:34:31:85:11:9c:b0:be:8f:6c:1e:
9a:c0:1b:72:07:48:d6:84:ff:1e:48:30:69:ea:29:
ef:af:a0:4d:53:e7:20:2f:10:2b:ec:2e:2a:bb:a9:
b0:b4:27:47:fa:90:2f:df:eb:5c:b5:17:12:56:55:
8b:b1:86:50:1b:4b:4a:e0:6b:92:a4:c2:86:0f:93:
28:4b:d1:27:6a:b7:7c:6b:e2:98:1e:b6:17:b0:f1:
4e:ee:9d:16:d2:8b:a8:7f:9d:ce:4c:db:e0:2e:6f:
27:a7:bd:cd:ca:92:28:4f:f6:b5:cd:8c:6a:ed:3b:
27:d9:82:57:2b:7a:74:db:ff:7a:38:c5:3d:88:0d:
e7:c8:79:51:62:66:dc:05:4f:d1:45:fe:3c:88:a5:
82:32:63:99:a1:52:ca:96:c3:7c:47:5a:b2:7a:e2:
e4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:7B:95:54:A0:6E:54:83:6A:62:E3:03:F2:77:9B:29:57:8C:43:A5
X509v3 Authority Key Identifier:
keyid:1C:2F:90:CD:3F:51:B8:AC:D0:02:10:E3:57:DE:9A:81:CB:45:D1:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:10:2a:b2:16:3e:b0:a2:c3:3d:27:dd:fd:ef:81:23:00:2b:
f2:b1:48:16:70:f5:22:3e:42:d4:2b:f6:1c:5f:93:e3:bb:aa:
18:b1:38:9b:30:a2:41:ad:cd:a0:1b:0c:77:b3:31:dd:c2:98:
07:e8:f8:d7:9d:78:26:c9:39:4a:c9:42:91:25:cf:7b:aa:96:
c3:9c:aa:3f:09:82:a4:0e:6e:e0:c2:0f:73:a0:24:41:c6:80:
f5:89:2b:d6:a2:f4:71:5e:56:de:07:aa:9b:0b:44:1b:c2:fa:
7f:b8:d3:d3:7a:5b:55:65:df:52:a0:80:cc:de:03:87:8e:13:
c8:96:08:6e:c2:3c:fb:00:a8:42:2e:f8:52:6d:98:f3:37:0a:
ab:72:d4:7c:d0:c7:67:1b:85:ae:fb:63:ae:60:05:5a:c6:af:
03:f2:5a:2f:8b:9a:30:3c:4f:85:83:f2:8d:17:7a:86:03:c0:
af:a9:71:03:70:f9:ea:c3:16:1d:17:b8:3d:c2:de:e5:46:f1:
a2:36:c6:52:0e:8a:35:75:6d:f0:84:21:2b:ea:3a:ca:5a:d7:
59:12:36:e5:39:e7:c1:2b:22:6b:1f:af:54:8f:3b:59:8f:1c:
60:09:9d:7c:e1:43:c0:28:8e:8d:e1:20:a4:28:83:5c:2f:7c:
8f:bd:89:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:39 2026 by rpki-client