
$ rpki-client -vvf rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft
File: 3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft (raw, json)
Hash identifier: fVPAPxvtRoY4Jg9K0v03mT8oWKMRY6wpZjJf6Ikmnkc=
Subject key identifier: D7:9A:5E:D6:0F:6A:F0:AB:A3:E5:F8:7B:D0:2B:4A:4C:8F:81:35:D3
Authority key identifier: DC:73:81:04:3E:36:43:3D:BA:6C:82:95:32:10:77:A0:2E:8E:87:87
Certificate issuer: /CN=A919CAB7/serialNumber=DC7381043E36433DBA6C8295321077A02E8E8787
Certificate serial: 0763
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HOBBD42Qz26bIKVMhB3oC6Oh4c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft
Manifest number: 0750
Signing time: Mon 27 Jul 2026 08:52:16 +0000
Manifest this update: Mon 27 Jul 2026 08:52:15 +0000
Manifest next update: Mon 03 Aug 2026 08:52:15 +0000
Files and hashes: 1: 3HOBBD42Qz26bIKVMhB3oC6Oh4c.crl (hash: UdBF1+ANp3o/d+UuhDJyLOEDN33GSQvWRhzZqSBiicM=)
2: 2VzLu-saA4O38EKebJmmi6HIejc.asa (hash: FRfKj+Y27rZ38vsV8QEajHa2ffB4BqpfwdGj+2o59oA=)
3: ED905CE8CF6E11ED915AD729C4F9AE02.roa (hash: S/MfSzQzTqgLlxgu9oOyjNXmLNUKb18E7V+8O/9wAzU=)
4: EECD7500CF6E11ED915AD729C4F9AE02.roa (hash: DOXhX1leics2/OlA+16D6wHVTeejyQT2l+nsM3RKbHM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.crl
rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HOBBD42Qz26bIKVMhB3oC6Oh4c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:52:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1891 (0x763)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919CAB7, serialNumber=DC7381043E36433DBA6C8295321077A02E8E8787
Validity
Not Before: Jul 27 08:52:15 2026 GMT
Not After : Aug 3 08:52:15 2026 GMT
Subject: CN=6a671c40-fec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e0:01:1f:df:9c:46:2b:83:ad:bb:0f:ba:af:
6a:cd:02:68:09:f9:19:ae:c5:1e:76:c7:2b:95:dc:
37:0a:3a:7f:f8:1a:da:65:87:f4:64:c9:f5:98:df:
91:7b:6d:bb:ba:4b:9e:5a:8e:ba:81:c2:64:8e:4b:
8c:75:45:ae:41:6c:c5:d6:49:c9:34:5d:5a:90:ad:
86:1e:76:35:ea:7b:cc:ed:f5:d9:8c:9c:93:69:c1:
ea:b5:a5:50:7a:10:32:ea:41:e8:39:bd:8d:15:6e:
ec:5a:ae:a8:a6:6e:54:b2:43:fa:09:64:d1:9d:f3:
49:d0:56:82:49:c8:4c:0e:e6:49:0d:bd:53:1e:92:
a8:28:95:6a:90:93:72:af:16:c5:8c:8d:aa:49:bc:
14:52:86:51:7a:ea:12:b4:43:9b:ae:01:e0:5c:a4:
6b:04:09:f1:39:9b:30:03:d8:55:a5:c3:55:35:47:
1d:e7:34:91:40:6a:59:1b:c9:82:d0:79:ee:6f:3d:
7c:ac:fa:2f:88:de:a4:5f:20:b5:1b:b7:c9:95:3d:
66:2f:9f:0a:06:70:90:6d:2e:d7:c5:aa:26:3b:7e:
01:b6:f6:5c:5a:3c:af:d7:d7:73:f2:46:a2:45:04:
64:29:d0:c5:bf:cc:e5:c1:25:bc:e2:bb:68:90:0d:
76:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:9A:5E:D6:0F:6A:F0:AB:A3:E5:F8:7B:D0:2B:4A:4C:8F:81:35:D3
X509v3 Authority Key Identifier:
keyid:DC:73:81:04:3E:36:43:3D:BA:6C:82:95:32:10:77:A0:2E:8E:87:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HOBBD42Qz26bIKVMhB3oC6Oh4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:ad:70:db:79:15:07:0d:92:f7:0c:5b:2f:aa:3f:91:0b:ed:
3f:da:c6:7b:01:7e:7b:e7:e4:27:b8:01:80:7f:9c:f7:01:60:
88:71:16:96:c0:be:46:b6:7e:00:66:e7:d4:24:50:8f:2b:e2:
8d:73:39:6e:56:55:59:f2:2a:d0:eb:91:ec:03:d6:01:53:b0:
9e:b3:08:53:bc:10:3a:dd:ca:10:b8:6a:c9:2d:fb:25:b4:28:
b1:c8:dc:22:04:60:7f:3a:d0:5b:13:3b:7f:e2:63:d6:e3:1a:
30:e1:69:af:35:9b:43:dd:99:72:e8:c8:3d:d9:0e:03:c7:5f:
c6:59:d6:14:de:9a:c7:5a:81:89:54:04:a0:fa:dd:0f:e3:fb:
91:fc:cc:d7:a8:96:9c:e5:5b:f2:b6:5f:38:5f:68:fe:c6:c2:
83:74:e6:6f:54:97:58:a5:02:f9:1f:a1:10:19:a8:fd:5c:32:
74:aa:98:d5:8a:1e:99:f1:70:45:bb:66:9b:9a:45:5e:4d:00:
b4:ef:7e:bd:44:94:a7:41:37:9c:bc:8f:7e:35:42:c8:10:ee:
21:f0:f4:73:cc:cf:e2:ed:ee:94:ca:74:a7:d2:aa:8d:c9:a3:
3b:46:52:29:9c:96:27:95:7e:55:8e:6c:43:0c:e5:1a:af:f4:
17:9b:da:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:35:03 2026 by rpki-client