
$ rpki-client -vvf rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft
File: SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft (raw, json)
Hash identifier: HF4Qnn6sDf6oR/6ymX2UNz7QZVeaI8QLjFI+uiXwgHU=
Subject key identifier: 19:FF:DA:7A:35:B8:A6:20:09:E4:85:B3:B9:19:AB:93:53:6B:DB:C3
Authority key identifier: 4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB
Certificate issuer: /CN=A91896D4/serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB
Certificate serial: 02C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft
Manifest number: 02A7
Signing time: Fri 03 Jul 2026 02:12:19 +0000
Manifest this update: Fri 03 Jul 2026 02:12:19 +0000
Manifest next update: Fri 10 Jul 2026 02:12:19 +0000
Files and hashes: 1: SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl (hash: 4Xa9DZP4haZw6gBLWYWBI+H9BPuX8zdy19JBZgOaYhU=)
2: C93A47F63ABB11EE8A78BE4CC4F9AE02.roa (hash: kt58U+JdwwoWOrJfOurK3ZzukKhfcE+5o9qCOQ61N04=)
3: CD23AE8C403011EEA773CE47C4F9AE02.roa (hash: 3thOWBScBaW27emyNgWIB6Tm9y3isPfdf3d0Ik133Zg=)
4: 6985BF0062D611EEB5C5721CC4F9AE02.roa (hash: RnuV+1DoXIf2HDUvOKaEZgCO7oWGACeQmNMNZ7oeAtg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl
rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 10 Jul 2026 02:12:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 707 (0x2c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91896D4, serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB
Validity
Not Before: Jul 3 02:12:19 2026 GMT
Not After : Jul 10 02:12:19 2026 GMT
Subject: CN=6a471a83-3820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:44:fe:c2:86:6b:5d:cb:a3:1b:c7:fe:f8:05:
78:52:dc:df:f0:16:b8:bd:b8:3e:ce:46:7b:fd:3d:
11:df:0a:3c:4b:87:a8:a2:f7:36:67:f9:6b:05:0f:
01:e7:ed:f9:6c:ec:45:56:76:34:9f:05:a4:73:63:
d3:5d:89:ab:82:0a:0f:0f:49:9c:84:e6:1e:e6:8b:
69:37:90:ee:02:4d:c1:62:5b:25:bc:9a:4c:f1:7f:
6b:ac:54:ae:b3:89:c7:a7:f4:3a:d5:34:ad:f0:f7:
c2:83:4a:c6:33:7a:ad:16:7f:4d:d7:7c:e7:eb:0e:
27:c3:38:d7:37:ae:d2:54:8d:34:6b:41:9b:a8:05:
f1:96:d5:84:8f:e1:d9:75:df:25:a5:d6:df:be:19:
86:60:e2:55:64:df:f7:7c:36:fc:86:3a:89:c3:09:
de:a6:8a:c6:44:fa:12:85:82:5d:bf:01:12:06:02:
b7:82:60:13:6c:df:e0:a7:fe:80:69:91:ff:96:13:
c1:60:0d:44:28:56:9a:cf:ea:da:6b:71:07:62:d8:
c5:09:04:25:9a:cd:56:55:ad:ec:cd:58:57:85:e6:
08:20:b9:60:b1:b7:08:57:ba:e1:c3:5b:74:da:23:
2d:f3:6a:d0:76:94:3e:94:35:58:93:ab:e3:18:63:
27:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:FF:DA:7A:35:B8:A6:20:09:E4:85:B3:B9:19:AB:93:53:6B:DB:C3
X509v3 Authority Key Identifier:
keyid:4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c1:96:5c:dc:48:7f:9d:85:c5:0d:60:64:be:9e:7e:86:9e:cc:
dc:9b:19:d5:41:92:4b:cc:6f:94:c5:da:eb:20:bc:d3:36:15:
1d:9a:24:7a:97:ec:5b:f5:9b:5f:56:55:30:9f:ca:a6:88:f1:
63:8c:26:e1:4e:c9:8f:ca:30:70:fa:bf:a3:ea:d8:83:6d:b9:
f6:a2:e5:02:6d:c2:fa:e9:34:81:df:9f:c7:20:76:1b:f1:c1:
3b:db:a4:d6:78:74:fb:d8:01:6f:9b:3e:8b:8d:91:0b:84:d9:
fa:0e:4e:23:cf:21:64:7f:62:34:58:8f:8a:5f:20:a0:8d:a0:
ee:c7:50:43:ba:c5:86:0a:27:6d:4a:e0:ab:99:06:34:38:0f:
01:b9:3c:ce:3b:21:41:d3:ef:57:01:f8:76:9d:d5:24:74:2c:
02:61:42:2b:57:e0:63:a3:be:0f:2b:0c:0b:66:7e:79:c4:bd:
0b:ae:5f:1b:f1:e9:47:69:27:75:b4:4a:86:a0:e5:97:e7:81:
03:79:00:51:cb:40:0d:96:27:5e:75:d2:02:47:e0:5e:0c:3e:
e8:e2:32:be:5b:f0:8a:2b:51:25:1f:51:6a:d1:6f:98:85:a3:
12:b5:6a:ac:9b:e0:da:10:ac:de:5a:ba:1c:c8:32:f4:ea:01:
cd:3f:ad:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 21:45:34 2026 by rpki-client