
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C876/E4C0C416109011F180BBBFFF333D8C67/rHwA15xPocI9OeJl5UPWJa-xcZE.mft
File: rHwA15xPocI9OeJl5UPWJa-xcZE.mft (raw, json)
Hash identifier: iO55XTx99bjEsE8be1jfbM+krBSV/MK7DULbI47CxI8=
Subject key identifier: 11:7D:E4:08:E5:BB:65:26:86:3F:F7:2D:E0:FA:6E:BD:86:14:61:A7
Authority key identifier: AC:7C:00:D7:9C:4F:A1:C2:3D:39:E2:65:E5:43:D6:25:AF:B1:71:91
Certificate issuer: /CN=A917C876/serialNumber=AC7C00D79C4FA1C23D39E265E543D625AFB17191
Certificate serial: 7E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHwA15xPocI9OeJl5UPWJa-xcZE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C876/E4C0C416109011F180BBBFFF333D8C67/rHwA15xPocI9OeJl5UPWJa-xcZE.mft
Manifest number: 7A
Signing time: Tue 13 Oct 2026 08:30:39 +0000
Manifest this update: Tue 13 Oct 2026 08:30:38 +0000
Manifest next update: Tue 20 Oct 2026 08:30:38 +0000
Files and hashes: 1: rHwA15xPocI9OeJl5UPWJa-xcZE.crl (hash: op+BkDsJKSKYaJr0c5wKWN9gl4P1fDzWi4YLp/w4y7Q=)
2: AA5A77DE109211F1ADAE0457353D8C67.roa (hash: jc5OClYgMksYJNVDPr4GTz5NxRC+DAHLWpkP7eRJs/c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C876/E4C0C416109011F180BBBFFF333D8C67/rHwA15xPocI9OeJl5UPWJa-xcZE.crl
rsync://rpki.apnic.net/member_repository/A917C876/E4C0C416109011F180BBBFFF333D8C67/rHwA15xPocI9OeJl5UPWJa-xcZE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHwA15xPocI9OeJl5UPWJa-xcZE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 08:30:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126 (0x7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C876, serialNumber=AC7C00D79C4FA1C23D39E265E543D625AFB17191
Validity
Not Before: Oct 13 08:30:38 2026 GMT
Not After : Oct 20 08:30:38 2026 GMT
Subject: CN=6acdec2e-63cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c8:1e:45:37:11:83:19:bc:13:76:c8:bc:99:
8d:95:9e:eb:6f:bf:45:b5:61:30:b7:a0:18:bd:06:
2a:8b:d8:70:99:f3:4f:5b:dc:7f:5a:88:17:c0:eb:
32:e4:cf:7e:32:5f:c9:62:ad:a7:0f:51:aa:21:06:
46:d1:22:88:9f:86:10:5c:36:fb:02:19:c2:78:f7:
b1:af:f4:db:9d:0f:ae:31:5b:17:57:ed:1f:9f:40:
48:a8:76:46:fc:2a:77:36:85:be:2d:d3:a7:54:db:
1a:63:7a:a8:c8:aa:da:08:ac:96:fd:a6:c2:a3:37:
d9:ca:c6:a1:db:fb:71:27:24:a1:df:be:c4:35:c7:
48:be:40:fa:3c:52:1d:7d:9c:da:ad:55:ac:9f:c0:
32:7b:48:5d:b9:7e:57:5f:27:36:b4:41:b2:31:ea:
c7:73:0c:a6:00:b9:4d:2a:79:f5:2c:4f:b8:f7:10:
49:da:85:f7:1b:cb:d3:74:5f:4b:90:e9:aa:95:d0:
5d:c5:d1:cd:9b:d5:25:bd:d4:21:09:7c:f6:23:d9:
bf:5b:8c:df:0b:2f:30:f9:3f:b1:5d:f7:42:67:40:
72:b2:99:c0:f1:6c:9d:57:c4:f7:21:f2:2f:4a:ab:
06:2b:02:9d:4c:35:55:a6:b9:1b:bc:a0:d5:8b:6a:
29:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:7D:E4:08:E5:BB:65:26:86:3F:F7:2D:E0:FA:6E:BD:86:14:61:A7
X509v3 Authority Key Identifier:
keyid:AC:7C:00:D7:9C:4F:A1:C2:3D:39:E2:65:E5:43:D6:25:AF:B1:71:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C876/E4C0C416109011F180BBBFFF333D8C67/rHwA15xPocI9OeJl5UPWJa-xcZE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHwA15xPocI9OeJl5UPWJa-xcZE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C876/E4C0C416109011F180BBBFFF333D8C67/rHwA15xPocI9OeJl5UPWJa-xcZE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:86:a2:d2:ed:e0:8c:9c:da:dd:2c:14:31:07:cf:65:aa:d8:
ac:08:46:9a:f1:66:cf:a6:fa:b4:47:91:13:61:ac:29:44:38:
fe:0d:fb:50:f0:bc:a2:f5:29:0c:c5:2f:af:98:9d:fd:63:13:
1d:bf:a0:66:b7:32:2c:a9:05:36:7d:77:78:34:44:53:c7:19:
6c:f1:ff:70:73:a6:7a:1f:18:e9:f0:ab:cf:58:d6:f7:e9:66:
33:ab:2a:ef:4c:01:52:eb:ec:7d:7c:db:8b:d9:70:d0:1f:f1:
05:af:86:2b:41:3c:eb:d0:e7:8d:6d:9b:95:22:00:1f:6d:ff:
97:ef:e8:6b:32:bb:20:7c:2c:85:83:e1:34:72:f8:ff:e6:e4:
63:5a:b8:cb:a2:14:b8:4c:f6:af:b8:31:01:54:80:89:95:d5:
08:63:0c:8c:d8:47:7d:0b:96:21:06:c1:e6:f5:a7:45:28:b9:
8b:2c:8f:20:5a:7e:a5:9d:21:b1:8a:60:67:bb:8d:d0:f3:cb:
39:1e:cc:21:62:bd:fc:de:43:dd:c0:ce:d7:c2:6a:0f:c2:e8:
68:32:95:0d:78:18:8d:75:4c:66:36:eb:d9:aa:40:62:d0:9b:
d0:eb:02:41:ab:d5:75:d5:2d:22:06:8c:65:a6:69:8f:58:66:
de:78:6f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 00:03:45 2026 by rpki-client