
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft
File: H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft (raw, json)
Hash identifier: A2YASBpp53uWyG6oEYmpYEF/5Anz6dpQWELd8xhk9Qk=
Subject key identifier: 7A:BB:C9:6F:84:26:EA:C8:56:BE:EF:BD:7B:98:02:8E:34:78:04:05
Authority key identifier: 1F:4D:CE:34:39:B1:F4:03:5F:FF:8C:71:CE:35:9E:5D:20:E6:9A:24
Certificate issuer: /CN=A91F8282/serialNumber=1F4DCE3439B1F4035FFF8C71CE359E5D20E69A24
Certificate serial: 011B
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/H03ONDmx9ANf_4xxzjWeXSDmmiQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft
Manifest number: 0113
Signing time: Fri 21 Aug 2026 06:01:25 +0000
Manifest this update: Fri 21 Aug 2026 06:01:25 +0000
Manifest next update: Fri 28 Aug 2026 06:01:25 +0000
Files and hashes: 1: H03ONDmx9ANf_4xxzjWeXSDmmiQ.crl (hash: zeJFLoVDMKY4rRNZ7e3Vy9oqTnzk+7mpJ/iLKnH0ksE=)
2: 0664C974FEF811EFB0C52572C4F9AE02.roa (hash: VTTmes8N3+DkLFdnT/jEg6MX9n3Ds/jhDY1DgH8WfVo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.crl
rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/H03ONDmx9ANf_4xxzjWeXSDmmiQ.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 28 Aug 2026 06:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 283 (0x11b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8282, serialNumber=1F4DCE3439B1F4035FFF8C71CE359E5D20E69A24
Validity
Not Before: Aug 21 06:01:25 2026 GMT
Not After : Aug 28 06:01:25 2026 GMT
Subject: CN=6a87e9b5-f896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:95:b6:42:bc:51:f8:03:7b:97:f6:df:02:2a:
db:40:36:f2:19:5f:11:f7:cc:dc:b7:95:bc:cc:8e:
80:b8:46:37:db:b0:16:f7:c5:b8:71:ee:ea:23:26:
bb:3f:6c:8c:5e:07:cb:02:af:9b:6b:9e:70:9e:cf:
b7:c2:db:fd:e0:be:c1:9b:40:ba:a4:17:0f:5f:3a:
41:5c:c4:29:b4:e5:70:b6:6f:0c:e7:74:45:84:53:
62:dd:d7:27:03:64:01:33:7a:b8:1b:e8:5a:92:22:
ee:9a:bd:b0:b2:9c:2c:60:cb:f2:4b:5e:62:5f:ae:
b4:f2:c8:ec:6a:39:fb:bb:e3:20:29:e0:e8:a1:35:
2c:88:ec:03:cd:45:13:09:e9:96:26:56:c2:76:92:
de:18:a0:32:f3:c7:14:6f:64:d4:a8:9c:33:6b:3e:
5c:73:a8:30:16:d3:f2:e3:49:bb:5d:38:f4:ce:cc:
c2:3b:34:58:d1:c1:0f:55:4d:42:29:77:90:1a:04:
90:21:cb:f0:01:b1:2d:c4:a6:7f:55:96:27:92:c0:
bc:9d:aa:ef:70:b1:18:ef:a6:8f:16:cd:ae:39:e5:
89:c0:72:7e:26:65:a0:56:96:3f:cb:ee:07:93:b7:
5c:ce:e4:8e:87:a4:38:33:22:60:59:4e:d4:f9:a3:
87:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:BB:C9:6F:84:26:EA:C8:56:BE:EF:BD:7B:98:02:8E:34:78:04:05
X509v3 Authority Key Identifier:
keyid:1F:4D:CE:34:39:B1:F4:03:5F:FF:8C:71:CE:35:9E:5D:20:E6:9A:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/H03ONDmx9ANf_4xxzjWeXSDmmiQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:90:72:23:23:05:a9:d7:37:fe:18:07:ac:f5:b3:cf:ef:e0:
96:e4:3e:98:0d:d8:ea:f4:2c:64:57:3a:6f:96:7d:0b:1a:67:
7b:4c:d0:a9:3a:97:bb:8b:97:1b:96:16:82:1e:49:d9:0a:09:
b7:d9:ec:84:4a:a8:4a:75:53:65:bc:d3:b5:94:10:2f:66:bf:
cc:e5:4d:e6:bb:5f:e6:81:b0:d5:77:bc:3d:f4:df:bf:20:5b:
ad:03:31:89:1b:32:4c:76:ba:09:7b:f6:ed:81:3b:24:87:66:
ad:3e:07:2b:4a:23:0c:c2:29:b5:7f:68:f2:0a:7b:60:58:0d:
e7:44:a8:fd:4d:d4:26:51:5d:fa:08:ee:4c:f0:29:d1:cd:2f:
fa:ca:40:7e:a9:88:38:4f:d8:7a:e7:c4:d6:a9:1b:9d:45:58:
3f:b6:ba:20:37:25:c7:6f:7a:31:63:e9:39:73:57:27:51:81:
8f:79:fe:e3:95:dd:40:03:bc:4c:88:5f:7f:b9:d1:ef:01:8f:
6d:4a:5b:e1:25:7c:0d:44:d4:66:82:6b:e5:d1:ad:44:be:3b:
a7:50:da:c3:50:89:34:c4:20:b2:54:17:dc:a1:56:89:21:05:
f6:4b:0f:c0:93:68:6c:d9:e3:59:80:cc:a6:fe:b4:2a:20:e0:
33:c4:ef:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 06:48:26 2026 by rpki-client