
$ rpki-client -vvf rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft
File: HJuixf6owDTaVR_a3GKlOnoC5ds.mft (raw, json)
Hash identifier: 3FeDAGQ62Yoi+FZxwXEHoy+bH1mSM3QtaDz3C7u215o=
Subject key identifier: 44:7D:2B:EE:0D:78:3E:90:25:EA:4F:C4:64:A8:76:EA:6C:0B:17:80
Authority key identifier: 1C:9B:A2:C5:FE:A8:C0:34:DA:55:1F:DA:DC:62:A5:3A:7A:02:E5:DB
Certificate issuer: /CN=A9193D86/serialNumber=1C9BA2C5FEA8C034DA551FDADC62A53A7A02E5DB
Certificate serial: 0A52
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft
Manifest number: 0A30
Signing time: Thu 06 Aug 2026 19:35:29 +0000
Manifest this update: Thu 06 Aug 2026 19:35:28 +0000
Manifest next update: Thu 13 Aug 2026 19:35:28 +0000
Files and hashes: 1: HJuixf6owDTaVR_a3GKlOnoC5ds.crl (hash: 9K+FD0Im5v6t2lB7MdF6JTw/sXahg0nwaCzEwQIsJDU=)
2: 79C02FB0CC8511EC8D238672C4F9AE02.roa (hash: PEyE0w8+UrcKJlHY3jaK16cYhVK4lg74ijcsWV2DoxU=)
3: 52FC6006A19911EA96035C38C4F9AE02.roa (hash: WcxNaiIGqzItQBb7CYbwvBMMYMGcLD8tEl0Q7aIbezo=)
4: 7B136C42CC8511EC8D238672C4F9AE02.roa (hash: f4XaB+bRmsoNFuDMRRMiph6D0qfKs6SQvSg9M2XJC3I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.crl
rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 13 Aug 2026 19:35:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2642 (0xa52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193D86, serialNumber=1C9BA2C5FEA8C034DA551FDADC62A53A7A02E5DB
Validity
Not Before: Aug 6 19:35:28 2026 GMT
Not After : Aug 13 19:35:28 2026 GMT
Subject: CN=6a74e200-b552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:0f:4b:f0:d9:96:2d:81:ef:d5:fc:98:c3:21:
4c:2b:9b:3f:ab:2e:de:e8:a0:27:47:40:ff:6f:d3:
5e:64:8b:f4:fc:dc:06:d5:0a:25:a8:5f:f7:69:0d:
8a:84:d0:08:36:c3:fe:16:44:db:6d:7f:01:5e:8d:
a1:97:9b:b7:af:e2:34:74:5d:1e:5e:e3:a7:ab:07:
13:10:67:90:42:f2:01:db:22:cd:ac:ca:94:ee:0c:
bb:2a:d1:f8:da:04:0d:3c:e0:7e:fc:8c:4f:fd:c3:
c6:6c:84:cf:95:9a:97:ee:0b:64:c1:3d:cd:ef:e0:
db:be:92:1b:22:c3:33:96:30:a6:01:90:75:c4:93:
ef:23:e4:77:77:22:68:2e:88:03:6b:1c:50:89:8e:
73:45:04:c0:a1:73:89:1d:ff:be:52:f9:a8:27:11:
cc:30:ad:f1:49:ac:87:0e:42:81:2c:0f:cf:a3:c6:
22:5c:df:8e:01:49:ac:84:35:39:ac:51:59:8b:3b:
3a:9d:ff:06:7d:78:05:7a:7a:4d:ff:19:83:12:00:
89:c2:e5:ce:f0:83:6a:b2:bc:f0:c2:d1:af:05:ad:
a5:33:94:ef:62:4a:28:01:e0:5c:25:55:de:f4:ac:
12:4b:99:1e:b6:62:b7:51:8a:fc:9d:20:5c:b4:15:
ff:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:7D:2B:EE:0D:78:3E:90:25:EA:4F:C4:64:A8:76:EA:6C:0B:17:80
X509v3 Authority Key Identifier:
keyid:1C:9B:A2:C5:FE:A8:C0:34:DA:55:1F:DA:DC:62:A5:3A:7A:02:E5:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:39:32:d9:a3:e7:81:4c:f2:79:c1:7d:08:64:d8:d7:22:67:
4d:6f:42:cd:7f:ba:1e:cb:8d:fb:69:38:8e:0b:70:62:ac:1d:
f7:39:0d:f6:ab:24:56:07:31:6e:52:13:69:6e:5f:78:0b:a3:
a4:32:2f:bc:d1:ca:2d:a1:f3:f8:c8:be:91:76:3e:c1:25:5b:
38:81:26:fd:63:40:26:8e:bc:f8:36:33:7e:bc:04:0d:9d:a2:
13:bf:c3:88:55:8e:86:cb:4d:11:0d:a2:d0:22:c8:d9:7d:0d:
4d:dc:89:1b:43:f1:3c:af:44:94:76:90:99:91:16:05:a4:d5:
3e:a3:41:bf:6f:01:b7:e9:61:d9:80:5b:eb:13:77:e1:b3:03:
1f:9e:85:e2:38:d3:bd:97:32:29:4c:bd:ff:e3:5b:49:a9:98:
f9:18:32:13:f1:50:df:43:41:ca:88:38:65:f1:8c:a5:eb:06:
48:38:47:50:a7:23:af:b5:e4:1c:30:5c:2c:2d:94:56:01:77:
2a:06:dc:c6:c0:b7:9c:22:d8:5b:48:83:fe:6b:1d:e4:59:a5:
1e:e8:a1:5d:94:43:94:03:56:df:97:cd:04:7f:50:18:e5:0b:
94:5f:8d:b7:60:bf:02:61:41:b0:94:7e:71:1c:e3:3f:b1:25:
09:38:0a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 07:22:57 2026 by rpki-client