
$ rpki-client -vvf rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft
File: SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft (raw, json)
Hash identifier: BbRE9cy7K8BV3p5d29UXX3hJ0dUgZEPE4F+z8ix5lFY=
Subject key identifier: F6:6C:B5:65:0C:83:F0:F9:8A:BF:0F:76:3B:31:C3:DD:BD:41:46:DE
Authority key identifier: 4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB
Certificate issuer: /CN=A91896D4/serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB
Certificate serial: 02E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft
Manifest number: 02C1
Signing time: Wed 19 Aug 2026 01:59:01 +0000
Manifest this update: Wed 19 Aug 2026 01:59:00 +0000
Manifest next update: Wed 26 Aug 2026 01:59:00 +0000
Files and hashes: 1: SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl (hash: iAkXOjs5T0JrIwv/Az/JdiUfD13bO06kjAuNSd+LYHI=)
2: 6985BF0062D611EEB5C5721CC4F9AE02.roa (hash: 6/kLwjaQTkfCHWvYXKjLY2hQmFGD0WNaPnlHmvGEMbA=)
3: C93A47F63ABB11EE8A78BE4CC4F9AE02.roa (hash: Xwy5hs9BSxRi/nZDE8KfLOA+0gda1wu307kRI5bsu6E=)
4: CD23AE8C403011EEA773CE47C4F9AE02.roa (hash: pRc/IkNgce55Dz1RZWzogGzWAIJpPYBAulESUbUA178=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl
rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 01:58:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 736 (0x2e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91896D4, serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB
Validity
Not Before: Aug 19 01:59:00 2026 GMT
Not After : Aug 26 01:59:00 2026 GMT
Subject: CN=6a850de5-bcae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a8:53:91:1b:a4:e3:d9:8f:67:a3:58:dd:c0:
c2:95:8e:da:97:28:5e:b2:2a:1a:b4:9d:4c:32:46:
8f:94:4c:8e:c2:e3:57:d5:1a:30:97:9d:3f:c6:de:
0d:ab:10:2e:52:fc:87:1b:13:94:93:5f:6a:88:a1:
4f:2c:15:6e:1a:eb:06:6e:f3:f9:00:fb:c1:b2:67:
0e:b9:4d:0d:98:b3:0f:e3:41:7d:f1:e1:f7:d6:b6:
0d:59:16:74:b6:c6:58:2c:27:e3:ae:12:57:ce:af:
89:31:bb:7b:e0:1b:73:97:ef:a4:a9:61:a2:b8:c0:
55:02:0b:19:3a:be:96:5d:81:69:42:d4:ee:dd:fa:
b4:79:4c:b5:9b:b2:0c:0a:68:ae:f2:9e:fb:1c:91:
97:2c:d4:35:c7:7a:a0:92:c6:55:22:62:95:e8:75:
1c:68:ef:51:b5:41:d9:92:50:66:e4:7c:75:36:b6:
1d:67:56:a7:13:08:ad:c1:1b:17:5b:c7:78:54:b3:
a7:27:a8:de:8e:9c:cf:d0:47:3f:b0:74:b4:6d:a6:
73:c6:25:27:e4:37:f0:71:74:76:24:a4:43:4b:51:
51:7e:a2:70:d1:36:44:a5:23:16:67:91:74:db:0b:
ac:48:fe:8a:2c:30:9e:15:21:23:6c:4e:f1:9e:08:
21:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:6C:B5:65:0C:83:F0:F9:8A:BF:0F:76:3B:31:C3:DD:BD:41:46:DE
X509v3 Authority Key Identifier:
keyid:4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:9f:ef:08:a5:90:45:59:a3:4d:5b:b4:14:2e:4e:88:b4:82:
67:df:22:1b:f3:90:d2:18:14:b7:fe:77:f9:5d:10:0d:c9:33:
11:90:f9:31:18:2c:ce:ac:28:64:73:78:41:f3:6b:d0:d5:61:
5a:1c:cd:32:c3:46:d4:fc:af:0b:8d:3c:c1:c7:01:24:32:95:
2d:11:f0:ab:5a:ab:a0:0e:c0:93:fe:c2:6b:3d:cb:c7:1b:83:
01:c6:b9:98:5e:cb:77:e8:62:48:81:ba:78:ab:b2:cf:ba:8f:
d0:31:38:6c:b9:1f:89:2c:c7:33:82:2d:e6:b0:b6:8b:92:be:
8d:b5:9c:91:bc:9b:e0:22:55:df:78:87:0a:4f:2b:d4:11:1a:
1b:07:bf:4d:49:91:dd:2f:21:21:95:96:bf:5e:39:81:a7:dc:
96:79:90:85:35:76:9b:97:e0:0c:18:8f:f8:c4:ec:7a:02:0f:
ea:41:82:84:a2:14:39:d6:b3:e4:e2:1e:26:45:40:9f:db:6b:
f5:82:20:dc:5d:40:75:c6:4a:5c:9c:b8:cb:2f:55:27:85:34:
58:59:0d:0a:a5:51:89:e6:6c:a1:39:42:6d:19:8b:02:9a:4d:
94:ab:3b:fd:f2:a1:85:57:6d:e2:44:ec:ca:7d:53:10:88:3a:
36:4c:09:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:14:41 2026 by rpki-client