
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft
File: cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft (raw, json)
Hash identifier: UouNnI9s9QvAKfHPUosNB+46KN8Wq/vcCVPyZw2ZEGs=
Subject key identifier: F8:85:54:4F:BB:93:37:FD:60:24:2F:B1:4D:2D:1E:FE:10:15:C0:C5
Authority key identifier: 70:2F:A1:AE:96:82:B2:B2:2E:CD:D9:A5:30:12:F0:E6:F1:BA:1B:9C
Certificate issuer: /CN=A917B540/serialNumber=702FA1AE9682B2B22ECDD9A53012F0E6F1BA1B9C
Certificate serial: 027A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft
Manifest number: 0271
Signing time: Sat 05 Sep 2026 01:55:52 +0000
Manifest this update: Sat 05 Sep 2026 01:55:52 +0000
Manifest next update: Sat 12 Sep 2026 01:55:52 +0000
Files and hashes: 1: cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl (hash: vcqMdHLUJZ1GF/rMQKYqe9xmv8wuzyF/URapdvyyjVw=)
2: 1966C856FB9E11ED8309FC1DC4F9AE02.roa (hash: 2qm8xc9Dh6l4WZzdxSvQg3OKbuj7hzzJ5qxge8M4c/o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl
rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 01:55:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 634 (0x27a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B540, serialNumber=702FA1AE9682B2B22ECDD9A53012F0E6F1BA1B9C
Validity
Not Before: Sep 5 01:55:52 2026 GMT
Not After : Sep 12 01:55:52 2026 GMT
Subject: CN=6a9b76a8-cb42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:18:66:4b:98:af:fd:ff:2a:6a:a9:4e:56:60:
14:19:b8:4a:28:7f:ef:1d:06:a3:db:f7:1b:16:e6:
d6:9f:92:9d:f6:b8:fa:95:f3:5e:cd:5a:56:c3:2d:
77:71:16:64:61:10:68:e8:d7:8b:07:52:88:11:e9:
fe:7e:1f:33:bf:02:1f:91:02:c1:f9:5a:21:08:66:
96:e1:df:4a:af:8f:44:7e:ff:fd:dc:e9:01:16:0b:
5b:57:2e:28:28:79:0e:9e:8d:f0:43:3a:4b:49:21:
f8:9f:61:b5:7e:44:19:5a:4b:1f:2e:b4:77:6e:84:
9a:d3:6e:1b:81:44:ae:19:73:d1:c7:96:fa:36:80:
53:83:3c:2d:cd:f3:78:c1:82:ff:3c:ec:81:1f:7b:
51:8a:03:5b:27:1b:b8:21:5a:c1:b0:3b:b6:c3:e6:
f4:a2:f4:b3:5b:a9:fb:27:4a:44:ed:3e:94:24:5b:
d7:ea:62:d3:28:74:7d:37:e0:24:7b:26:5a:5d:62:
50:32:2a:61:bf:05:1e:08:12:3b:c3:f7:ae:14:88:
4c:83:5e:61:9e:00:fc:90:b4:ba:79:c4:ca:04:17:
13:33:87:31:65:5b:8b:1c:4c:39:2e:c5:6c:d0:39:
8c:46:5e:46:97:ed:98:1a:e2:74:b5:c7:08:a3:1f:
bc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:85:54:4F:BB:93:37:FD:60:24:2F:B1:4D:2D:1E:FE:10:15:C0:C5
X509v3 Authority Key Identifier:
keyid:70:2F:A1:AE:96:82:B2:B2:2E:CD:D9:A5:30:12:F0:E6:F1:BA:1B:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:70:2b:f6:32:7e:2e:14:6d:e2:87:12:cf:65:1d:c4:1c:5e:
c8:7a:4d:e5:b0:e9:99:eb:96:43:61:d7:98:93:86:9b:81:bc:
8b:25:36:7f:4a:88:be:e3:f1:d0:a6:8e:fd:32:d4:f9:5b:eb:
d4:f6:96:52:af:d7:b1:b0:ba:6a:a2:2a:b9:8b:04:74:ed:59:
a0:68:e5:f6:fa:d1:4e:82:2c:56:7d:9a:c5:bc:f3:dd:ef:45:
94:af:86:03:26:10:c3:2f:79:bb:3a:fa:bd:61:ec:26:9e:b1:
96:11:8c:07:89:de:16:cf:25:23:f0:91:6f:d9:e3:56:32:e4:
56:29:89:32:53:77:99:83:97:e0:6b:2d:b8:0d:8d:1a:98:bb:
f1:a9:cf:71:35:41:74:48:21:bb:92:91:32:3f:ba:09:7a:6e:
b9:e5:7f:1c:aa:e1:8f:2c:ed:00:b6:68:4c:72:b5:14:cf:27:
6e:e2:ac:0f:70:cf:67:e4:d8:01:bb:34:84:77:a1:b5:87:38:
4e:0a:72:e1:9a:95:2d:32:78:65:15:17:74:5c:b3:53:0d:8e:
fe:c2:e9:b7:b8:10:bb:d4:c0:87:66:e4:ef:c2:18:fa:e9:90:
2f:a2:ee:e1:65:f5:b4:de:84:9d:0e:05:f6:70:17:4b:f5:d9:
ed:07:8c:1e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0I1NDAxMTAvBgNVBAUTKDcwMkZBMUFFOTY4MkIyQjIyRUNERDlBNTMwMTJGMEU2
RjFCQTFCOUMwHhcNMjYwOTA1MDE1NTUyWhcNMjYwOTEyMDE1NTUyWjAYMRYwFAYD
VQQDEw02YTliNzZhOC1jYjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2hhmS5iv/f8qaqlOVmAUGbhKKH/vHQaj2/cbFubWn5Kd9rj6lfNezVpWwy13
cRZkYRBo6NeLB1KIEen+fh8zvwIfkQLB+VohCGaW4d9Kr49Efv/93OkBFgtbVy4o
KHkOno3wQzpLSSH4n2G1fkQZWksfLrR3boSa024bgUSuGXPRx5b6NoBTgzwtzfN4
wYL/POyBH3tRigNbJxu4IVrBsDu2w+b0ovSzW6n7J0pE7T6UJFvX6mLTKHR9N+Ak
eyZaXWJQMiphvwUeCBI7w/euFIhMg15hngD8kLS6ecTKBBcTM4cxZVuLHEw5LsVs
0DmMRl5Gl+2YGuJ0tccIox+8fwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPiFVE+7
kzf9YCQvsU0tHv4QFcDFMB8GA1UdIwQYMBaAFHAvoa6WgrKyLs3ZpTAS8Obxuhuc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjU0MC9EOTdBOTVCQ0Y4
ODAxMUVEQjlBQkZDNTZDNEY5QUUwMi9jQy1ocnBhQ3NySXV6ZG1sTUJMdzV2RzZH
NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NDLWhycGFDc3JJdXpkbWxNQkx3NXZHNkc1dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QjU0MC9EOTdBOTVCQ0Y4ODAxMUVEQjlBQkZDNTZDNEY5QUUwMi9jQy1ocnBhQ3Ny
SXV6ZG1sTUJMdzV2RzZHNXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApXAr9jJ+LhRt4ocSz2UdxBxeyHpN5bDpmeuWQ2HXmJOGm4G8iyU2f0qIvuPx
0KaO/TLU+Vvr1PaWUq/XsbC6aqIquYsEdO1ZoGjl9vrRToIsVn2axbzz3e9FlK+G
AyYQwy95uzr6vWHsJp6xlhGMB4neFs8lI/CRb9njVjLkVimJMlN3mYOX4GstuA2N
Gpi78anPcTVBdEghu5KRMj+6CXpuueV/HKrhjyztALZoTHK1FM8nbuKsD3DPZ+TY
Abs0hHehtYc4Tgpy4ZqVLTJ4ZRUXdFyzUw2O/sLpt7gQu9TAh2bk78IY+umQL6Lu
4WX1tN6EnQ4F9nAXS/XZ7QeMHg==
-----END CERTIFICATE-----
Generated at Sat Sep 5 05:16:14 2026 by rpki-client