
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BC71/91BE2BC03F0511F1BE3FC0C2C9833773/hRLpaZVqy30-dg7ZhuG-6j-KwPg.mft
File: hRLpaZVqy30-dg7ZhuG-6j-KwPg.mft (raw, json)
Hash identifier: rW9Ptf/OhhOE/y4kYoigV2yUsb/48nhuJXCVrztgeCw=
Subject key identifier: B5:34:5A:07:EC:6F:B2:7A:BF:2F:EA:C0:49:51:DC:43:87:3B:CD:18
Authority key identifier: 85:12:E9:69:95:6A:CB:7D:3E:76:0E:D9:86:E1:BE:EA:3F:8A:C0:F8
Certificate issuer: /CN=A915BC71/serialNumber=8512E969956ACB7D3E760ED986E1BEEA3F8AC0F8
Certificate serial: 39
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRLpaZVqy30-dg7ZhuG-6j-KwPg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BC71/91BE2BC03F0511F1BE3FC0C2C9833773/hRLpaZVqy30-dg7ZhuG-6j-KwPg.mft
Manifest number: 34
Signing time: Mon 27 Jul 2026 11:01:36 +0000
Manifest this update: Mon 27 Jul 2026 11:01:35 +0000
Manifest next update: Mon 03 Aug 2026 11:01:35 +0000
Files and hashes: 1: hRLpaZVqy30-dg7ZhuG-6j-KwPg.crl (hash: 6SirtjEZRD+8yHHzfQd8CAHFMksTTLaywxgsBKH2+bc=)
2: 04DF866C3F0611F1B36B08F4C9833773.roa (hash: ox5XcIpV2S9UAzm7R4v0XD8a/1yL0AoCYGD4B4pq/A8=)
3: 2BC7F9083F0611F1ADBFCBF4C9833773.roa (hash: fjBBp9RAWRX1PPIA5V4SattdM60ZaCT18eTtLAtSLSY=)
4: VOwD2XwATr-c2sXH9st_AxV1K78.asa (hash: b+lmi/ZHvjZionERqzvs5ZBjeHGTFVv1O4Vs+9Qq7Ag=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915BC71/91BE2BC03F0511F1BE3FC0C2C9833773/hRLpaZVqy30-dg7ZhuG-6j-KwPg.crl
rsync://rpki.apnic.net/member_repository/A915BC71/91BE2BC03F0511F1BE3FC0C2C9833773/hRLpaZVqy30-dg7ZhuG-6j-KwPg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRLpaZVqy30-dg7ZhuG-6j-KwPg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 11:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57 (0x39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BC71, serialNumber=8512E969956ACB7D3E760ED986E1BEEA3F8AC0F8
Validity
Not Before: Jul 27 11:01:35 2026 GMT
Not After : Aug 3 11:01:35 2026 GMT
Subject: CN=6a673a90-f0db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3f:46:c6:66:31:ae:90:57:96:37:d4:6c:fd:
04:b2:9f:f0:2d:24:99:11:2c:67:4c:6e:5f:fd:e3:
70:82:ef:e5:5a:4b:30:a0:bc:4d:a7:06:6c:95:02:
1a:23:d9:6c:8c:bb:7f:62:35:ce:ef:ec:7b:00:68:
a2:88:76:97:5e:79:83:52:d5:0e:2c:47:9a:3d:49:
d0:65:51:52:9c:0f:4b:d9:a3:5b:21:46:3f:de:bb:
84:23:04:32:53:18:34:e6:8c:bd:fe:bb:62:cf:b0:
9e:e2:30:f3:9f:fa:4d:62:f4:7a:5d:67:de:a7:7f:
b1:c8:74:09:c3:ad:1e:ec:72:bd:25:f3:41:c2:a8:
be:5c:ae:28:ab:dc:d7:3c:d4:e7:ac:35:93:01:4e:
08:08:58:0b:dd:f7:45:12:c7:29:4f:d4:8a:e5:fa:
f9:f3:9f:1c:a4:e6:10:22:c6:12:e8:75:06:9e:5b:
20:1c:ae:71:3e:70:c9:1b:37:fc:7d:b8:9e:f6:1c:
f8:9e:43:ee:9f:c1:87:d4:5e:94:23:e1:27:d7:ba:
e3:c5:d9:b7:c0:75:99:4e:92:7c:35:a8:d4:72:8c:
c0:98:43:7e:5e:25:ee:2c:4d:4c:8d:d7:13:29:60:
d6:99:1d:e4:8f:9c:ea:6e:92:ad:1f:50:8d:7f:6a:
1b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:34:5A:07:EC:6F:B2:7A:BF:2F:EA:C0:49:51:DC:43:87:3B:CD:18
X509v3 Authority Key Identifier:
keyid:85:12:E9:69:95:6A:CB:7D:3E:76:0E:D9:86:E1:BE:EA:3F:8A:C0:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BC71/91BE2BC03F0511F1BE3FC0C2C9833773/hRLpaZVqy30-dg7ZhuG-6j-KwPg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRLpaZVqy30-dg7ZhuG-6j-KwPg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC71/91BE2BC03F0511F1BE3FC0C2C9833773/hRLpaZVqy30-dg7ZhuG-6j-KwPg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:05:73:f6:72:52:6a:13:ad:39:87:48:de:b5:5e:68:b6:7a:
f7:de:5c:f7:18:5a:e4:8c:cc:9e:ee:7d:74:65:72:7f:84:6a:
e2:ad:35:27:f8:2a:7d:ed:ef:b1:01:9e:d5:2a:37:82:82:d0:
07:4c:4a:b0:75:cf:02:d1:5c:8b:5a:ae:0f:f4:18:1b:6c:cf:
99:03:9b:00:4e:ba:83:e1:72:91:1e:c8:6d:cc:e5:35:32:c3:
8d:13:25:02:d3:8b:bf:99:f8:30:ff:d6:03:0a:56:cd:91:b1:
77:5a:bf:18:35:8f:ae:5d:00:d0:30:4c:94:3c:60:04:2a:fe:
6d:9c:35:54:45:1c:1a:ae:fe:d6:13:e4:21:dd:11:c9:9d:d8:
3d:8f:37:aa:37:70:3c:90:0c:42:53:06:8c:07:a6:50:2a:72:
37:b7:66:b9:c3:83:df:0c:ab:c5:81:b8:b3:82:c7:b3:dc:1d:
4e:ee:96:60:81:30:62:2d:65:93:2a:da:f2:96:36:a3:7e:6b:
69:b1:3c:f9:95:3f:71:df:3b:41:2d:de:36:36:22:24:3a:ee:
fd:7a:6f:57:0a:3e:32:77:3f:7c:db:b7:de:e9:e2:96:57:55:
4f:d2:e1:bb:ca:69:9f:12:e3:dd:57:f6:dd:77:37:83:2f:d3:
c6:64:a1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 07:36:44 2026 by rpki-client