
$ rpki-client -vvf rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft
File: H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft (raw, json)
Hash identifier: yoBKgCwWmZ4a4VBcX2Avav+auUlAlbwoIHdRjIFMka4=
Subject key identifier: 2A:1F:73:62:A9:43:42:27:6A:CC:7E:E6:A0:F5:26:2A:F6:F6:19:78
Authority key identifier: 1F:63:3F:72:D1:C6:78:16:C2:06:4A:56:E5:38:3C:D9:54:DD:C0:E5
Certificate issuer: /CN=A91764E1/serialNumber=1F633F72D1C67816C2064A56E5383CD954DDC0E5
Certificate serial: 01D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2M_ctHGeBbCBkpW5Tg82VTdwOU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft
Manifest number: 01C0
Signing time: Tue 23 Jun 2026 04:04:50 +0000
Manifest this update: Tue 23 Jun 2026 04:04:49 +0000
Manifest next update: Tue 30 Jun 2026 04:04:49 +0000
Files and hashes: 1: H2M_ctHGeBbCBkpW5Tg82VTdwOU.crl (hash: mWVrKGHGmHcw3Hg89tpnT2z8iWnsIR7jj9t9OEoLiT8=)
2: 30A1B4D0C67E11EEB4008058C4F9AE02.roa (hash: 1afV/Wp2zXvrGPdZywlVFm2mfGMyxkWyHsB9FTJiBqA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.crl
rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2M_ctHGeBbCBkpW5Tg82VTdwOU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 04:04:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 465 (0x1d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91764E1, serialNumber=1F633F72D1C67816C2064A56E5383CD954DDC0E5
Validity
Not Before: Jun 23 04:04:49 2026 GMT
Not After : Jun 30 04:04:49 2026 GMT
Subject: CN=6a3a05e1-3835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f0:8e:f6:3b:1d:ea:2f:18:d7:ab:95:be:36:
14:f9:89:79:4e:c0:b6:85:d5:ed:10:f7:db:f0:eb:
82:80:d5:46:46:4a:ba:b0:29:91:2a:91:9f:39:75:
85:97:9b:2a:7e:bc:07:ac:e4:71:c9:3c:a1:7a:5e:
5b:fb:ad:d5:c2:4d:01:93:0b:23:46:ac:24:64:b0:
f7:de:a6:a9:05:0e:a7:06:8a:60:79:43:16:1d:df:
c3:6f:33:0b:bd:5a:ef:73:1d:76:5e:e7:27:8a:d7:
a8:21:f3:ac:04:39:c3:87:79:c8:30:08:ad:48:02:
66:fd:35:26:f5:9f:fa:62:25:d4:78:5d:5d:74:b7:
42:71:a4:3f:96:b6:c6:3c:5b:89:30:f8:99:27:44:
1f:4e:f3:f2:7a:83:01:33:da:9c:1e:74:74:e9:e7:
58:3b:10:a9:f5:05:87:9d:b5:5a:fb:c4:84:19:44:
b6:6f:20:18:76:4c:9c:fe:a1:bf:45:87:5a:da:83:
ff:65:d2:c8:a0:e0:38:3f:ec:cb:79:65:f0:7a:f8:
27:84:66:79:88:4e:65:62:1f:4d:ad:f5:64:78:cf:
5f:02:8e:26:a6:33:6d:2f:b1:f6:c8:d1:67:82:55:
ec:28:a9:4c:b1:7c:16:80:bf:da:47:33:38:13:75:
12:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:1F:73:62:A9:43:42:27:6A:CC:7E:E6:A0:F5:26:2A:F6:F6:19:78
X509v3 Authority Key Identifier:
keyid:1F:63:3F:72:D1:C6:78:16:C2:06:4A:56:E5:38:3C:D9:54:DD:C0:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2M_ctHGeBbCBkpW5Tg82VTdwOU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:a9:99:c2:6c:7c:dd:93:f3:86:d7:93:a4:30:5c:59:3b:3c:
04:37:6b:d0:9c:80:58:4b:21:f7:97:ec:87:1e:5b:b6:62:63:
12:38:82:e5:b6:4a:68:dc:bb:6b:3f:62:c7:c4:06:f2:bb:dc:
27:c1:cf:e2:10:2f:20:be:65:89:f5:1d:81:cb:c3:6d:01:ed:
87:50:b1:76:b9:29:2a:7b:45:01:8a:f9:56:b3:a3:8a:a4:ba:
8d:ed:51:de:7d:c3:e3:6a:08:f8:3f:97:10:f9:49:2f:38:e3:
ca:7f:c7:34:5a:ea:07:ce:b9:bd:26:6f:3e:6a:2f:fb:d8:04:
34:63:74:ee:45:72:e9:a3:5e:c0:24:57:ef:9e:ff:16:2c:4b:
62:1b:17:db:0a:ff:ac:9e:a0:57:08:38:2a:e5:87:b9:45:c3:
ca:45:c2:6e:38:6a:a0:bc:95:7c:e4:3e:96:f7:cc:df:34:13:
51:7f:22:ef:f6:d2:70:7c:d2:22:34:4e:d5:dc:69:f0:da:a0:
a1:fe:27:07:b4:9b:7c:c9:38:1d:e8:ed:b7:4f:79:45:77:b6:
67:ca:1c:f3:66:c9:3f:5d:54:d4:7a:d3:9f:5c:22:bb:e4:4f:
68:26:fa:86:bf:0f:52:62:b9:64:e8:32:9f:c1:df:95:93:44:
74:21:94:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:15:48 2026 by rpki-client