
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft
File: HC-QzT9RuKzQAhDjV96agctF0XE.mft (raw, json)
Hash identifier: 2ewPch48oYHgGG5DmHahUHN23Hj7lGi5AK6YUBrhTyg=
Subject key identifier: 8A:A5:33:DA:61:4E:A5:10:3C:81:E7:B6:9D:52:73:37:3A:22:F1:0B
Authority key identifier: 1C:2F:90:CD:3F:51:B8:AC:D0:02:10:E3:57:DE:9A:81:CB:45:D1:71
Certificate issuer: /CN=A915B01D/serialNumber=1C2F90CD3F51B8ACD00210E357DE9A81CB45D171
Certificate serial: 1E8F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft
Manifest number: 1E7E
Signing time: Wed 20 May 2026 16:03:58 +0000
Manifest this update: Wed 20 May 2026 16:03:58 +0000
Manifest next update: Wed 27 May 2026 16:03:58 +0000
Files and hashes: 1: HC-QzT9RuKzQAhDjV96agctF0XE.crl (hash: UgfTl6qLEwzme4x4jLIVUHtkm/vSJpB4NK/42wrcCvw=)
2: DE95A942581611EE878B2E54C4F9AE02.roa (hash: e4hMYlDnHNsGyWnAsIxka4q6i/J4idktm6GuEoIlVXk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.crl
rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 16:03:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7823 (0x1e8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B01D, serialNumber=1C2F90CD3F51B8ACD00210E357DE9A81CB45D171
Validity
Not Before: May 20 16:03:58 2026 GMT
Not After : May 27 16:03:58 2026 GMT
Subject: CN=6a0ddb6e-4d73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:01:ce:88:7e:82:e7:2b:ed:47:80:04:90:dc:
81:94:d1:5a:66:d4:ff:fc:ff:7f:1c:e9:1c:c3:f8:
95:56:a2:46:70:84:2f:30:ee:83:b2:65:02:87:11:
38:65:5f:b1:04:72:77:da:1a:f4:49:c7:9e:b8:86:
a3:64:3c:f1:0f:5d:2a:0a:f6:7c:ba:fa:ef:7c:a7:
63:bf:06:ed:89:41:b5:e2:0a:82:4d:f8:48:b9:68:
76:ef:b8:1f:99:d3:40:e9:97:71:db:c4:1a:5b:dd:
85:af:7b:db:8f:53:ca:56:37:c5:b3:d7:d4:cd:83:
b2:e7:25:4b:86:99:a1:8c:78:4c:a0:f7:ae:b1:b2:
20:c6:cd:bf:50:a4:38:52:c9:86:bd:ed:31:43:eb:
60:18:02:0b:25:da:ad:7e:bc:a0:a7:13:4f:d5:df:
d2:6a:81:f6:b4:cd:32:f2:72:d0:7d:31:fa:c7:ce:
e6:83:79:96:14:85:7d:4e:3d:d4:e7:8a:1b:ef:ea:
00:7c:53:c4:3b:29:b9:18:00:4e:a8:bf:1d:f5:a4:
29:d0:a0:65:d0:9c:3f:f3:75:6d:fe:ad:9b:78:87:
3a:c9:fe:0b:c5:16:90:55:1d:e9:29:44:13:dd:df:
b7:5d:06:bd:a3:11:33:0b:d4:db:ae:4a:46:51:05:
c0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A5:33:DA:61:4E:A5:10:3C:81:E7:B6:9D:52:73:37:3A:22:F1:0B
X509v3 Authority Key Identifier:
keyid:1C:2F:90:CD:3F:51:B8:AC:D0:02:10:E3:57:DE:9A:81:CB:45:D1:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:ec:78:e1:a8:1f:52:23:57:19:34:32:c3:75:9f:8d:1d:2c:
de:f6:a9:93:b8:e5:bc:6f:04:7e:7f:9e:d9:8b:6f:a9:a0:4e:
92:70:97:19:28:a6:6c:11:05:0e:17:e9:d3:45:39:00:09:d7:
27:86:a2:84:f3:7c:73:fb:ed:a0:5b:08:69:ee:eb:18:c1:58:
f3:f2:52:ac:ad:f4:c4:e3:34:57:27:26:55:a0:83:2e:18:b3:
6a:c1:17:d0:66:2d:7c:70:ef:fd:72:cd:f7:7f:cb:c7:3c:67:
18:16:fc:4d:7a:cb:1e:eb:c6:2f:50:8e:92:5f:58:37:2c:cf:
0d:55:b4:fa:5f:b1:8c:1e:68:a3:ec:e0:fd:eb:4a:ef:b1:36:
09:6f:de:4f:3c:b5:cf:8c:01:42:02:93:f6:a8:8a:c5:3e:ec:
65:a5:41:0c:6d:b0:de:76:2e:ec:2e:ad:88:5c:9d:e6:0d:0a:
3f:5a:4e:f3:e8:79:40:27:5d:1a:7c:13:8d:62:cd:e8:6b:d6:
67:8c:34:7e:27:27:21:43:e4:b7:63:cd:eb:67:4d:4b:34:2b:
3b:d8:82:13:60:c5:ec:e0:01:b4:d1:3b:e5:e6:fe:0c:7f:8e:
86:da:85:fc:c6:e6:3b:a8:7b:b1:6c:c0:a6:36:66:63:12:5b:
8b:21:10:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:39:24 2026 by rpki-client