
$ rpki-client -vvf rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft
File: Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft (raw, json)
Hash identifier: ldOdnGZ2WbqMZfR+O7i/w3khhvmiQDX8JKOCS3YiF0A=
Subject key identifier: B9:43:3D:C0:F2:30:0D:AF:18:03:1A:B1:3B:9D:03:BC:6D:02:E0:41
Authority key identifier: 1E:DE:5C:6E:00:80:28:BC:D2:AE:33:65:13:81:BD:E1:FD:07:C5:D4
Certificate issuer: /CN=A919BEDB/serialNumber=1EDE5C6E008028BCD2AE33651381BDE1FD07C5D4
Certificate serial: 1C4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft
Manifest number: 1C05
Signing time: Tue 18 Aug 2026 16:21:18 +0000
Manifest this update: Tue 18 Aug 2026 16:21:17 +0000
Manifest next update: Tue 25 Aug 2026 16:21:17 +0000
Files and hashes: 1: Ht5cbgCAKLzSrjNlE4G94f0HxdQ.crl (hash: SB6MEZBtr50jwJxLXxFr8K67TM+fgZ46Ajb9q+u7quQ=)
2: AA54657A880E11ED9BE52B17C4F9AE02.roa (hash: d64wjm9gxbiMp8OVy71nexJK/cOMcYjRyvHzyINqLwQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.crl
rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 16:21:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7247 (0x1c4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919BEDB, serialNumber=1EDE5C6E008028BCD2AE33651381BDE1FD07C5D4
Validity
Not Before: Aug 18 16:21:17 2026 GMT
Not After : Aug 25 16:21:17 2026 GMT
Subject: CN=6a84867e-59c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:db:d1:92:1c:fb:1c:c3:17:7e:82:94:c1:f7:
1f:b0:e2:22:7e:50:5d:42:58:6a:68:b4:72:af:f1:
24:6d:74:58:26:fc:e4:ed:bd:76:25:06:56:14:d6:
27:be:45:2e:d9:5f:fc:7c:62:50:6a:15:ff:22:67:
fc:75:78:45:f9:7e:88:a1:dd:a3:7a:37:fc:a1:57:
f5:f3:d4:26:25:67:d4:4b:4b:fa:f4:45:46:0b:04:
35:77:29:36:3e:b4:54:91:9a:3b:32:05:09:0b:74:
20:a4:34:05:cc:a6:70:94:6d:27:6c:c9:24:6c:79:
3a:df:67:71:9d:e0:43:93:da:ed:ed:40:c2:4c:f4:
af:b9:a0:83:eb:ab:67:2c:fb:d4:de:85:35:15:47:
70:c6:b4:c3:93:59:68:47:f4:3d:34:44:e5:92:af:
03:5d:12:e8:a0:75:04:9b:ec:87:80:39:40:1e:46:
53:de:88:fc:38:10:a3:32:8c:c4:e2:e9:5e:cb:91:
50:f2:4b:cd:66:3a:08:55:74:c0:9b:d6:bd:6b:c2:
bb:ba:17:0a:79:7a:36:7f:b5:2b:57:50:5b:80:2b:
65:74:17:41:ef:b5:18:c4:0b:74:63:40:56:e0:89:
23:6f:55:8a:b8:0c:db:07:25:20:99:16:d3:ea:35:
df:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:43:3D:C0:F2:30:0D:AF:18:03:1A:B1:3B:9D:03:BC:6D:02:E0:41
X509v3 Authority Key Identifier:
keyid:1E:DE:5C:6E:00:80:28:BC:D2:AE:33:65:13:81:BD:E1:FD:07:C5:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d2:80:a1:e1:bf:fd:32:ca:a9:c7:94:a6:f6:53:6b:d8:ac:df:
17:b2:53:f0:57:55:fc:f7:6f:58:c7:93:32:56:bb:8d:a1:e1:
22:7b:29:e3:9a:9c:41:07:ef:ab:b6:5b:4d:65:3b:9e:7e:75:
b3:2d:cf:21:1c:2c:b0:e4:b1:bc:14:ef:8a:67:d5:c0:f7:75:
de:61:a9:7c:b6:8b:29:ac:b3:35:b7:7b:44:34:50:e5:2e:b7:
91:3b:38:e1:b6:2f:72:f9:23:05:03:5f:9b:e2:ed:0d:3e:f7:
43:90:f6:4a:e3:0a:92:72:b0:e8:01:58:34:d5:9e:70:80:f6:
e4:c9:97:ea:af:3b:14:96:44:15:c7:9c:86:5b:9c:e8:25:3c:
89:64:92:42:69:3e:a9:59:52:5e:c7:0f:f6:7d:2e:d7:2c:ae:
32:f3:5c:f5:20:5c:1a:1f:6c:42:c7:33:ff:a9:88:33:f7:ea:
0b:e7:8d:13:9f:cd:b0:18:a5:2c:94:a4:15:7f:e9:e8:e9:02:
01:71:fd:9b:a6:98:2d:db:16:ec:bc:2e:e4:ee:a9:40:ec:cd:
8f:f1:04:8e:9d:03:22:53:0a:63:86:b7:27:65:da:43:19:cb:
9d:81:c1:6f:77:a3:fc:3f:a8:30:7c:2f:a3:01:95:8a:0f:94:
a4:74:fc:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:09 2026 by rpki-client