
$ rpki-client -vvf rpki.apnic.net/member_repository/A91924F8/71FD1338641111F18113D0D69B47A888/HzX0DDZLiLCJrhL97baBXD8RqQY.mft
File: HzX0DDZLiLCJrhL97baBXD8RqQY.mft (raw, json)
Hash identifier: heHDz8+xXxMv9Kir1Z1Gb7GbsLBanBAvpR13scP7STE=
Subject key identifier: 61:8D:9D:CB:06:AB:5A:D5:55:8F:65:EC:75:9A:63:B3:1A:B2:94:C3
Authority key identifier: 1F:35:F4:0C:36:4B:88:B0:89:AE:12:FD:ED:B6:81:5C:3F:11:A9:06
Certificate issuer: /CN=A91924F8/serialNumber=1F35F40C364B88B089AE12FDEDB6815C3F11A906
Certificate serial: 10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HzX0DDZLiLCJrhL97baBXD8RqQY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91924F8/71FD1338641111F18113D0D69B47A888/HzX0DDZLiLCJrhL97baBXD8RqQY.mft
Manifest number: 0F
Signing time: Fri 03 Jul 2026 10:01:50 +0000
Manifest this update: Fri 03 Jul 2026 10:01:49 +0000
Manifest next update: Fri 10 Jul 2026 10:01:49 +0000
Files and hashes: 1: HzX0DDZLiLCJrhL97baBXD8RqQY.crl (hash: gbMc0a2YNEVKh59/ndv6yZfVVMlCfcFAyhRd1R95vz0=)
2: CA5882E06D4611F1934851767447A888.roa (hash: PfXIGwgTTCIusRlPGqdMeq1XMVW+gcuIfsglflOola4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91924F8/71FD1338641111F18113D0D69B47A888/HzX0DDZLiLCJrhL97baBXD8RqQY.crl
rsync://rpki.apnic.net/member_repository/A91924F8/71FD1338641111F18113D0D69B47A888/HzX0DDZLiLCJrhL97baBXD8RqQY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HzX0DDZLiLCJrhL97baBXD8RqQY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 10 Jul 2026 10:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91924F8, serialNumber=1F35F40C364B88B089AE12FDEDB6815C3F11A906
Validity
Not Before: Jul 3 10:01:49 2026 GMT
Not After : Jul 10 10:01:49 2026 GMT
Subject: CN=6a47888d-6f86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0a:ae:2f:6b:36:7d:c1:9b:a0:7c:ab:19:e9:
21:a0:91:35:2d:86:62:e7:12:19:bb:f9:6d:5b:59:
92:c5:74:79:85:81:34:68:21:c0:c3:f8:ce:9c:ae:
ab:e2:91:1d:76:dc:09:91:38:2a:fd:5f:95:11:f2:
9d:ac:65:2f:0b:63:6e:f1:6a:1a:07:01:44:01:8d:
d9:25:e3:ae:b6:40:73:b8:4e:41:cd:4c:df:0e:80:
b0:36:fd:74:23:82:cf:0b:1c:7e:bd:22:f8:24:dd:
fa:99:46:0d:f1:8f:81:eb:9d:47:c4:6c:4c:c2:f8:
ab:c4:13:7f:5c:38:a0:8f:32:b4:a8:3d:be:b3:05:
70:90:51:c5:94:0f:d6:13:08:71:ed:86:e4:78:20:
f0:a1:e9:37:7d:90:41:ff:a3:0c:32:c6:90:96:46:
ef:6c:2d:a7:7d:41:d9:6e:2d:12:2b:51:62:5f:da:
14:6c:c8:88:92:eb:63:e9:36:03:d8:6c:82:8b:ef:
87:94:a3:76:f7:b2:06:2a:49:9d:50:aa:03:09:8d:
2c:47:d4:35:56:4d:bc:2b:04:52:b6:ae:3a:8c:ea:
75:bd:8a:4f:c4:05:52:f2:fd:76:1e:7f:d1:5f:61:
e5:2c:d6:b2:9c:c1:53:a3:59:4a:77:1c:8c:98:8a:
8f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:8D:9D:CB:06:AB:5A:D5:55:8F:65:EC:75:9A:63:B3:1A:B2:94:C3
X509v3 Authority Key Identifier:
keyid:1F:35:F4:0C:36:4B:88:B0:89:AE:12:FD:ED:B6:81:5C:3F:11:A9:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91924F8/71FD1338641111F18113D0D69B47A888/HzX0DDZLiLCJrhL97baBXD8RqQY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HzX0DDZLiLCJrhL97baBXD8RqQY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91924F8/71FD1338641111F18113D0D69B47A888/HzX0DDZLiLCJrhL97baBXD8RqQY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:2d:ae:f0:39:09:e1:d2:8b:52:8d:87:57:c9:0b:d7:f2:11:
54:ef:68:e0:54:8f:d7:1a:b3:b6:18:ff:6b:75:48:7e:2e:53:
b6:67:52:39:84:c8:5a:9b:93:43:3b:b5:58:be:c9:55:8d:59:
f0:67:ca:86:fc:c1:62:03:dd:3b:26:f8:df:3c:f2:6c:24:41:
3d:b5:27:16:7a:71:84:c0:30:30:12:67:db:52:90:60:88:f7:
6c:82:1a:c4:bf:40:df:b6:c0:39:2d:b4:44:51:99:d8:ec:5b:
f1:34:54:c0:50:05:11:0d:31:4f:b9:f1:2e:5c:85:57:57:17:
0e:89:7a:28:ee:59:68:97:cc:f0:e2:d6:48:a8:79:4f:ea:0c:
b9:3b:b5:83:10:e4:16:09:fa:2c:6a:39:f2:07:52:db:3b:52:
f1:6d:18:6c:64:38:5b:fb:58:12:e7:bf:34:1d:11:f1:b4:2f:
de:88:69:53:cd:ea:35:8b:f8:42:19:2f:c2:f7:9c:3a:00:15:
33:7f:ce:82:ec:1f:6b:a4:2f:e7:bc:3e:ed:b9:24:c9:15:5a:
32:f3:d0:e7:b1:d3:07:0f:bc:f0:a0:65:0c:27:ab:a6:44:b2:
0f:f8:a2:0a:8c:11:8d:38:70:88:f4:2a:d6:7f:7d:d0:01:ba:
61:3b:e9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 07:50:01 2026 by rpki-client