
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.mft
File: h7HuPp7irRoRPyeipU4sC41a-zQ.mft (raw, json)
Hash identifier: skBNNBC8YsdvIjEiSjXcPzMXA/Opt3wgt7+UJ+LzhUg=
Subject key identifier: 42:A3:45:AC:70:50:22:BD:6F:24:60:6C:F8:DF:6D:E8:D9:6A:12:61
Authority key identifier: 87:B1:EE:3E:9E:E2:AD:1A:11:3F:27:A2:A5:4E:2C:0B:8D:5A:FB:34
Certificate issuer: /CN=A91CF9F5/serialNumber=87B1EE3E9EE2AD1A113F27A2A54E2C0B8D5AFB34
Certificate serial: 0168
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7HuPp7irRoRPyeipU4sC41a-zQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.mft
Manifest number: 015F
Signing time: Fri 19 Jun 2026 05:07:42 +0000
Manifest this update: Fri 19 Jun 2026 05:07:42 +0000
Manifest next update: Fri 26 Jun 2026 05:07:42 +0000
Files and hashes: 1: h7HuPp7irRoRPyeipU4sC41a-zQ.crl (hash: nkZ6lWH2zaBntBc/Q0ZloE7+CxdD1XHKO0vG1T5Yg4o=)
2: 2FAD450250E411F0A6B4892AC4F9AE02.roa (hash: 5FVZeeMmHHgD5LWgKUCAHIiyRLhCr4xloYA6n+HE21g=)
3: 56EC0F5EABD411F0ADCDD73CC4F9AE02.roa (hash: LRGLmwGa2a/I5gvOrv+UPiIF3N2WlDmpx8kIsDZcKzI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.crl
rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7HuPp7irRoRPyeipU4sC41a-zQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Jun 2026 05:07:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 360 (0x168)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CF9F5, serialNumber=87B1EE3E9EE2AD1A113F27A2A54E2C0B8D5AFB34
Validity
Not Before: Jun 19 05:07:42 2026 GMT
Not After : Jun 26 05:07:42 2026 GMT
Subject: CN=6a34ce9e-9bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d9:a3:e9:4a:8f:c9:79:1a:d2:f0:ee:7c:6a:
5a:69:91:75:1d:bb:d8:92:05:0c:2a:60:07:76:8c:
c9:35:e6:01:aa:e8:b9:d2:68:1f:59:2f:0b:8b:61:
a0:31:de:5e:31:2c:bd:4b:a2:42:9e:99:25:c7:4c:
a9:fe:b3:8e:5d:35:4c:3d:ff:f0:61:05:dd:18:7c:
54:f2:52:ac:99:58:ef:f2:3f:af:b5:a9:90:ff:b0:
ad:10:a4:b9:2d:a3:06:19:ae:56:36:bd:06:f5:94:
d7:3d:1e:65:35:4d:b9:23:ff:d5:1c:ff:8e:a1:d3:
61:6c:ea:0a:a9:e5:bd:3c:6f:f8:d7:b7:d5:f0:87:
9a:b2:de:6d:e7:aa:0d:84:c2:b8:76:59:79:47:eb:
46:d0:b5:b5:1b:b6:06:9a:37:5c:66:1c:85:bb:23:
60:57:6f:20:67:89:d2:c5:6f:00:14:1f:8d:41:33:
f9:f5:e0:16:dd:ea:ea:7b:45:cd:17:8f:6b:09:87:
cc:fa:c7:eb:2b:84:ba:46:24:c6:ae:87:29:b6:27:
e8:45:b3:2d:a5:50:1f:72:94:ab:37:37:36:e2:ec:
b8:1d:66:78:bf:de:20:84:44:cc:6d:0d:dd:7e:c9:
9e:08:f0:c5:d4:a1:97:03:a8:26:78:fe:9d:ff:48:
fb:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A3:45:AC:70:50:22:BD:6F:24:60:6C:F8:DF:6D:E8:D9:6A:12:61
X509v3 Authority Key Identifier:
keyid:87:B1:EE:3E:9E:E2:AD:1A:11:3F:27:A2:A5:4E:2C:0B:8D:5A:FB:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7HuPp7irRoRPyeipU4sC41a-zQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:ca:f0:00:a0:aa:0b:c6:f4:2a:85:41:06:6f:97:4e:ff:72:
3b:58:e2:54:38:2c:bb:1e:44:de:d1:7e:19:09:dd:f1:4d:e0:
e0:c7:1f:2e:00:fd:d0:d7:38:c4:96:34:f4:db:3a:04:a1:38:
0f:0e:e6:8d:51:32:9c:ec:65:85:39:0d:18:17:91:ee:39:e5:
33:d2:38:6c:f2:d7:22:09:8e:31:b2:73:70:a3:ca:fd:e6:73:
0b:ef:81:f4:17:f6:19:23:e4:c8:bb:85:d2:ad:75:9c:f9:42:
a9:82:74:44:2a:2e:33:47:6e:b6:77:13:e4:c3:a9:f8:fe:50:
e9:cb:6d:56:9f:1b:01:1f:3d:de:d7:98:6f:d2:5f:fd:27:b1:
8e:dc:63:be:05:0b:d2:76:17:67:4c:43:29:18:c8:1c:c9:de:
e6:e3:62:b3:3e:c9:cf:ee:0e:a7:3b:dc:8d:e3:04:29:2a:7c:
ad:be:66:45:c2:80:e8:9c:9e:18:93:46:4c:59:19:e8:a0:8e:
a6:94:be:1b:cc:03:f9:b2:b6:6b:ea:cd:fc:aa:60:02:f5:40:
65:c4:d1:e6:ee:04:bd:8a:de:2d:ae:ad:10:3e:bc:78:82:80:
8a:12:af:78:ea:b4:34:d2:98:0a:90:dd:78:48:0a:9a:c9:f8:
6c:74:3a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 04:03:35 2026 by rpki-client