
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/hTkiUckhyp9RnbkRxagKd9_jVMQ.mft
File: hTkiUckhyp9RnbkRxagKd9_jVMQ.mft (raw, json)
Hash identifier: SklBinFICzKSiCxOW5Xv4+et39XlQzt7S0CG0vLoDt8=
Subject key identifier: 87:E8:E5:BF:60:2A:4B:E5:71:E0:7B:07:46:E4:F0:7F:B4:14:19:C7
Authority key identifier: 85:39:22:51:C9:21:CA:9F:51:9D:B9:11:C5:A8:0A:77:DF:E3:54:C4
Certificate issuer: /CN=A915B358/serialNumber=85392251C921CA9F519DB911C5A80A77DFE354C4
Certificate serial: 83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hTkiUckhyp9RnbkRxagKd9_jVMQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/hTkiUckhyp9RnbkRxagKd9_jVMQ.mft
Manifest number: 81
Signing time: Thu 03 Sep 2026 08:00:29 +0000
Manifest this update: Thu 03 Sep 2026 08:00:29 +0000
Manifest next update: Thu 10 Sep 2026 08:00:29 +0000
Files and hashes: 1: hTkiUckhyp9RnbkRxagKd9_jVMQ.crl (hash: o3sC32Tvs5otCaa1byxumCBw8kzM2pzWLFZEasVcouU=)
2: B1078FAAF1C411F0A342834F396F56BC.roa (hash: +jzkYrDbV9l56QxlBYuE37I0us4Fnv7wiflNV5QShGE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/hTkiUckhyp9RnbkRxagKd9_jVMQ.crl
rsync://rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/hTkiUckhyp9RnbkRxagKd9_jVMQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hTkiUckhyp9RnbkRxagKd9_jVMQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131 (0x83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B358, serialNumber=85392251C921CA9F519DB911C5A80A77DFE354C4
Validity
Not Before: Sep 3 08:00:29 2026 GMT
Not After : Sep 10 08:00:29 2026 GMT
Subject: CN=6a99291d-9371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:af:31:e5:e3:bd:03:74:0d:e8:09:83:e0:1f:
a0:ef:a5:2f:c5:f6:63:91:af:59:98:bb:0a:57:c4:
62:32:27:c5:b2:e3:16:ff:7f:a1:f5:9e:c3:ce:8e:
88:1f:98:b8:3c:4a:57:80:5f:de:a4:4d:e6:43:70:
eb:fb:54:40:d6:91:a6:d0:c7:b6:06:60:3f:08:de:
f3:9f:94:a3:7b:0c:52:9d:ef:3c:1d:6a:5f:5f:6c:
5e:b5:b3:38:03:1d:4c:e4:c0:13:0d:9a:fd:91:4d:
3c:a1:13:3e:2c:c4:ec:05:18:ec:72:ad:0b:46:8d:
69:c2:fc:7d:34:07:8c:10:76:f0:3a:0b:8b:32:ea:
3e:7d:ca:c2:ce:66:7d:32:1d:45:52:52:12:a4:55:
fd:0c:ad:b3:6f:14:1f:15:52:02:b4:7b:1a:71:c9:
61:a5:22:8d:31:82:b0:15:79:4c:8a:70:fa:d0:12:
11:aa:a6:19:15:84:34:c3:ac:f1:9d:f2:87:0f:e9:
2e:ab:e8:0f:48:8b:43:ea:4f:78:16:c6:b8:11:52:
a0:11:45:0d:61:b3:15:ea:d8:30:80:fa:54:f7:c1:
72:e3:c0:54:5b:da:fe:bd:98:69:80:2a:5c:31:9f:
c3:5b:92:2b:de:76:1d:d5:5c:2e:63:c1:a6:ca:fd:
de:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E8:E5:BF:60:2A:4B:E5:71:E0:7B:07:46:E4:F0:7F:B4:14:19:C7
X509v3 Authority Key Identifier:
keyid:85:39:22:51:C9:21:CA:9F:51:9D:B9:11:C5:A8:0A:77:DF:E3:54:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/hTkiUckhyp9RnbkRxagKd9_jVMQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hTkiUckhyp9RnbkRxagKd9_jVMQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/hTkiUckhyp9RnbkRxagKd9_jVMQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:39:f1:43:f5:ad:e6:2b:92:ff:60:91:4b:9c:4f:41:b1:50:
c6:a4:74:e8:89:72:bb:43:36:6a:01:d3:af:03:6f:44:9d:16:
58:c5:05:c3:4c:17:7f:89:27:d9:b8:b7:79:a9:ae:28:f8:8e:
89:fa:db:7b:79:66:fd:2a:c8:fa:16:bb:6d:df:d2:20:f3:49:
df:ec:eb:b2:47:ba:c9:a3:1e:83:8f:a4:e6:70:6b:e2:11:b2:
f4:1d:bc:de:93:dd:73:1d:06:24:01:0b:76:46:57:c0:f7:46:
36:b2:ea:b5:22:38:80:11:1e:39:72:a2:2e:82:f7:96:19:74:
db:93:47:9a:d3:66:b9:18:3f:8a:e7:df:c9:61:a5:ad:d7:f2:
f8:80:3e:b5:c8:12:dd:56:6c:af:18:64:67:c3:5b:58:0c:5b:
48:85:d8:3f:2d:93:a2:f3:f1:8f:ca:0f:66:7c:90:b9:a3:36:
b4:43:49:a5:4a:96:a7:f1:93:07:55:61:35:bb:5f:b7:55:63:
9b:9d:4e:81:80:b0:07:c6:b5:0d:10:18:d6:b4:6d:eb:d4:63:
e2:df:98:fc:b3:6c:0b:64:26:f3:fe:dd:25:78:b2:ed:9f:e5:
35:17:e1:d5:df:c5:78:60:29:e3:94:43:34:db:3e:35:19:f3:
60:d5:c0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:44:20 2026 by rpki-client