
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5EB9/9F25AC0A751711F188B09F1E72A30FBC/hcB2_Z7Aaao764dTTpR6icQ9lso.mft
File: hcB2_Z7Aaao764dTTpR6icQ9lso.mft (raw, json)
Hash identifier: f520wz9kly4RFt7pauEyohhdVf8yz5ErH45zf1D0qQU=
Subject key identifier: AA:18:9C:46:06:0D:71:95:96:48:76:5C:A0:E6:EF:72:57:CE:A3:31
Authority key identifier: 85:C0:76:FD:9E:C0:69:AA:3B:EB:87:53:4E:94:7A:89:C4:3D:96:CA
Certificate issuer: /CN=A91E5EB9/serialNumber=85C076FD9EC069AA3BEB87534E947A89C43D96CA
Certificate serial: 0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcB2_Z7Aaao764dTTpR6icQ9lso.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5EB9/9F25AC0A751711F188B09F1E72A30FBC/hcB2_Z7Aaao764dTTpR6icQ9lso.mft
Manifest number: 09
Signing time: Fri 17 Jul 2026 10:30:21 +0000
Manifest this update: Fri 17 Jul 2026 10:30:21 +0000
Manifest next update: Fri 24 Jul 2026 10:30:21 +0000
Files and hashes: 1: hcB2_Z7Aaao764dTTpR6icQ9lso.crl (hash: 4anxzLMkeC7xGaWfWP1lDAPcc+4D0RUgbgjtyb4OJoQ=)
2: 6681AA1A751811F1800E092372A30FBC.roa (hash: 5JMpNNlty75w+8UJcE4/wOIgirIQlenHvY9/D//OZuA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5EB9/9F25AC0A751711F188B09F1E72A30FBC/hcB2_Z7Aaao764dTTpR6icQ9lso.crl
rsync://rpki.apnic.net/member_repository/A91E5EB9/9F25AC0A751711F188B09F1E72A30FBC/hcB2_Z7Aaao764dTTpR6icQ9lso.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcB2_Z7Aaao764dTTpR6icQ9lso.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 10:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5EB9, serialNumber=85C076FD9EC069AA3BEB87534E947A89C43D96CA
Validity
Not Before: Jul 17 10:30:21 2026 GMT
Not After : Jul 24 10:30:21 2026 GMT
Subject: CN=6a5a043d-86f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f8:58:af:3b:2b:10:5f:be:f0:93:cf:08:f7:
ea:0e:b7:04:cc:30:03:fe:4e:d4:e7:b9:98:94:4a:
76:0c:8a:f0:a1:10:ba:06:c4:af:00:23:0c:69:fe:
78:d1:b5:d9:9f:5e:bb:6c:4c:88:4c:16:4a:db:76:
c4:d9:87:ca:cd:06:74:fd:2d:50:cb:f1:d9:43:dd:
4d:02:37:25:d5:7f:e8:45:4d:3b:56:8a:67:2f:4b:
11:f0:b3:1d:89:3e:41:34:61:3d:ce:02:ce:d7:64:
59:83:6c:0e:b2:f9:9d:5d:74:bf:2d:8c:26:97:2b:
b2:94:3a:12:dc:e5:ad:8a:c0:d3:b6:6a:5e:5a:f1:
60:be:3b:f4:40:19:a2:e6:b3:b2:d5:00:d5:e1:20:
62:f7:48:23:58:53:a0:6a:21:ac:c2:53:d6:ed:04:
4e:6f:43:80:09:b1:31:54:67:78:88:5f:fb:19:98:
21:ed:10:0e:73:69:77:33:9a:fa:06:3d:73:e8:27:
65:25:a3:6c:bd:73:4c:fc:51:06:cb:c4:d4:83:b4:
1b:ea:fc:10:49:20:8d:b2:99:6f:54:18:92:4b:dd:
f7:1d:2e:1e:71:b1:89:ea:9c:9d:d6:9e:93:ad:65:
bc:c0:5b:a9:a1:19:77:28:72:6b:75:9c:f5:42:cc:
10:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:18:9C:46:06:0D:71:95:96:48:76:5C:A0:E6:EF:72:57:CE:A3:31
X509v3 Authority Key Identifier:
keyid:85:C0:76:FD:9E:C0:69:AA:3B:EB:87:53:4E:94:7A:89:C4:3D:96:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5EB9/9F25AC0A751711F188B09F1E72A30FBC/hcB2_Z7Aaao764dTTpR6icQ9lso.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcB2_Z7Aaao764dTTpR6icQ9lso.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5EB9/9F25AC0A751711F188B09F1E72A30FBC/hcB2_Z7Aaao764dTTpR6icQ9lso.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
be:59:83:29:1e:10:af:8a:c1:9e:9c:b1:19:ff:4a:a7:2a:d8:
26:73:23:19:42:7d:6f:17:2c:57:4a:2e:4d:f0:94:09:d8:e0:
87:94:96:b7:06:8c:25:bc:31:1f:8e:9f:4b:a6:4b:72:00:21:
55:65:22:12:b9:c7:32:cb:c0:82:bd:cd:be:db:d1:9e:50:57:
42:b9:a4:0d:b7:8a:2b:37:fd:06:b5:34:09:f4:aa:44:d0:20:
d3:0c:f0:b1:c8:91:dc:9e:a1:05:54:78:d6:10:90:8f:6d:f0:
4e:cc:04:e8:76:ed:8d:de:b5:58:ea:a5:bc:4a:69:90:a8:a9:
ad:b7:05:e0:3e:39:e0:5d:68:e5:94:b3:0d:49:11:d5:aa:13:
ae:c5:93:2d:5a:fe:4f:20:f5:5d:4f:ae:12:f2:5c:3f:47:91:
a9:db:6b:06:23:87:79:53:50:1e:7b:6a:7a:84:1c:b2:d7:f8:
65:a6:f1:ad:8d:b7:17:06:e2:07:72:08:b9:92:db:69:ad:62:
13:1b:f1:1e:9a:cb:d1:f0:0b:d9:e5:30:59:d8:f5:a7:a9:ac:
79:d8:3e:3b:8f:c5:10:af:b4:d6:59:56:f3:dd:4f:91:60:2d:
4f:07:06:ba:39:69:2d:ab:f2:06:f3:4d:16:78:60:a9:30:57:
ba:af:88:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:09:35 2026 by rpki-client