
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/HN4SRMu7llQubIsJo9rBwbRDaNc.mft
File: HN4SRMu7llQubIsJo9rBwbRDaNc.mft (raw, json)
Hash identifier: noKcwFfJFFtcGd1e2LLGaF2/L5EKK4L/sWj3OflceDE=
Subject key identifier: 9F:14:63:AC:FE:D9:5A:EF:C2:35:83:AA:52:B3:15:19:CB:5C:79:21
Authority key identifier: 1C:DE:12:44:CB:BB:96:54:2E:6C:8B:09:A3:DA:C1:C1:B4:43:68:D7
Certificate issuer: /CN=A918A498/serialNumber=1CDE1244CBBB96542E6C8B09A3DAC1C1B44368D7
Certificate serial: 010E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HN4SRMu7llQubIsJo9rBwbRDaNc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/HN4SRMu7llQubIsJo9rBwbRDaNc.mft
Manifest number: 010A
Signing time: Mon 03 Aug 2026 07:25:45 +0000
Manifest this update: Mon 03 Aug 2026 07:25:45 +0000
Manifest next update: Mon 10 Aug 2026 07:25:45 +0000
Files and hashes: 1: HN4SRMu7llQubIsJo9rBwbRDaNc.crl (hash: azuWWS+z+9/GrZ/rNeWWHPhz3Yz2lNUfGBgMs58u3pA=)
2: 62C86698F80A11EFA400AC2FC4F9AE02.roa (hash: U4LLMJ0m7hitnKHAojnOcr6u6PFK2WR9WUoRdlPrdFk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/HN4SRMu7llQubIsJo9rBwbRDaNc.crl
rsync://rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/HN4SRMu7llQubIsJo9rBwbRDaNc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HN4SRMu7llQubIsJo9rBwbRDaNc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Aug 2026 07:25:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 270 (0x10e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A498, serialNumber=1CDE1244CBBB96542E6C8B09A3DAC1C1B44368D7
Validity
Not Before: Aug 3 07:25:45 2026 GMT
Not After : Aug 10 07:25:45 2026 GMT
Subject: CN=6a704279-ff6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bb:b6:12:f9:84:6d:a7:a9:38:62:67:28:42:
72:a0:52:5c:1d:40:de:de:0d:7a:b7:02:f5:fe:96:
d2:ce:be:3e:c9:c2:6a:f1:89:a2:69:73:18:05:b9:
95:b4:28:86:ad:38:41:36:4c:da:8d:d6:49:8b:d5:
30:cd:37:1f:f6:da:19:e3:2c:cf:b0:ec:e1:48:df:
d6:73:0b:f5:1e:d9:2c:08:54:aa:b7:1c:e1:bd:e1:
4d:b5:d9:d5:da:11:54:9c:c4:93:0e:3a:af:12:b1:
40:05:7c:ab:1a:bc:04:bc:a1:9b:14:50:80:06:94:
cb:7c:3f:ea:b6:a2:7a:29:5a:3c:ab:02:d5:d3:ce:
1c:00:fc:45:41:58:9a:94:b4:e5:b3:a1:93:aa:ee:
d2:cc:96:66:16:3e:ce:a3:3a:8f:c4:c4:aa:35:44:
ab:8b:bc:62:6f:4f:34:f7:00:4d:d5:a7:d6:b8:71:
bd:16:1e:51:18:31:b5:4c:11:7a:90:28:3b:e3:85:
c6:54:75:bc:df:7e:cf:a1:6d:53:7e:bd:f7:a6:4f:
1b:c8:b9:ff:e7:d9:25:e7:fe:fb:dc:51:3c:db:b5:
30:27:ee:4a:68:f4:a0:f5:f4:f4:82:06:e9:45:1e:
90:2a:43:1b:99:d9:92:5b:14:d5:c7:5c:83:ed:ff:
34:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:14:63:AC:FE:D9:5A:EF:C2:35:83:AA:52:B3:15:19:CB:5C:79:21
X509v3 Authority Key Identifier:
keyid:1C:DE:12:44:CB:BB:96:54:2E:6C:8B:09:A3:DA:C1:C1:B4:43:68:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/HN4SRMu7llQubIsJo9rBwbRDaNc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HN4SRMu7llQubIsJo9rBwbRDaNc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/HN4SRMu7llQubIsJo9rBwbRDaNc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:97:06:4d:5a:ef:b8:8b:0c:78:e9:6d:d0:87:31:3b:19:c2:
0c:d8:72:91:ec:99:17:aa:6f:9d:80:b0:3c:39:23:ed:dd:12:
89:d5:4c:71:31:15:40:19:1d:03:c7:8f:64:33:f6:3e:ad:6d:
c7:9e:24:35:22:32:85:2a:5e:e7:2b:9b:65:0b:d2:01:89:cf:
45:6b:2e:9a:c1:35:4b:3f:b9:f7:67:5b:29:56:ab:a9:04:e8:
b4:41:fa:04:94:4d:d4:f5:a0:1e:36:3b:87:d1:2d:71:71:32:
b5:84:94:0d:12:bb:ea:8e:86:c8:26:80:39:c2:c1:ab:bc:10:
1f:ef:95:84:ee:f9:2d:cd:5d:c7:26:9a:f5:bb:85:62:d8:6d:
58:1c:fe:ba:35:3b:34:6e:f2:81:56:9a:48:d8:31:a2:de:d1:
d3:a0:20:f2:bc:3d:89:6d:14:f6:8a:86:f3:0e:7d:dd:87:fa:
8b:2b:14:e2:be:ff:e4:ee:f8:72:9d:84:9e:ee:26:29:f6:97:
31:90:78:01:ea:68:f7:85:e9:18:ec:ff:80:f5:48:65:59:e8:
fc:73:e3:85:ce:23:bf:7d:de:b5:30:fa:66:76:8a:3b:b0:ca:
01:3c:51:88:a8:cf:f7:a5:9f:71:2d:2f:5c:df:3a:1b:3e:09:
16:f8:81:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 23:48:04 2026 by rpki-client