
$ rpki-client -vvf rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft
File: Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft (raw, json)
Hash identifier: nljPSKL8W1UeTx9X5CzRubnZRRR5cLzQFbQpH/tcvaA=
Subject key identifier: 3A:AF:F7:C3:CF:76:7D:00:3C:83:4E:C4:7F:44:FB:A2:B6:9D:CB:50
Authority key identifier: 1E:57:B4:3F:04:4D:4A:BA:82:22:A4:09:78:66:14:28:0A:A7:39:A1
Certificate issuer: /CN=A911112F/serialNumber=1E57B43F044D4ABA8222A409786614280AA739A1
Certificate serial: 01FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft
Manifest number: 01E0
Signing time: Thu 23 Jul 2026 04:59:11 +0000
Manifest this update: Thu 23 Jul 2026 04:59:11 +0000
Manifest next update: Thu 30 Jul 2026 04:59:11 +0000
Files and hashes: 1: Hle0PwRNSrqCIqQJeGYUKAqnOaE.crl (hash: tdYG0fQDyqjnEmg5Zd7BHENPxyvdLh6YENatbjx2c5w=)
2: 1CD34B6CEDFC11EE880F6F58C4F9AE02.roa (hash: 843592kmHI2mJyXbkDnRzoJpw2lZFHjhOJjwKGMqHsI=)
3: E4BA0144BA8E11EE91E3AF15C4F9AE02.roa (hash: rTksk/NcwRNUlpEN58oWLKJieEnMmoGQor+Ru3sGYqQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.crl
rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 506 (0x1fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911112F, serialNumber=1E57B43F044D4ABA8222A409786614280AA739A1
Validity
Not Before: Jul 23 04:59:11 2026 GMT
Not After : Jul 30 04:59:11 2026 GMT
Subject: CN=6a619f9f-da1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:af:03:45:fc:dc:48:83:7b:3f:6c:ae:00:8d:
c7:c7:c6:f8:69:7b:92:c5:bb:29:32:bd:da:38:de:
42:4f:d6:de:0d:c9:45:3e:50:0b:ee:2a:2c:a1:6a:
0c:ef:08:7b:25:27:90:a5:47:eb:e5:b7:de:8a:96:
e8:9e:de:a7:c7:f8:c8:9c:41:ac:1b:85:5b:67:38:
d8:f9:46:c9:bc:92:4a:02:ad:0a:62:30:ff:4d:e9:
36:50:5d:35:23:5a:19:66:87:55:26:ee:6e:b1:99:
a0:55:aa:4c:41:5d:5d:4d:58:0d:40:c7:29:38:3a:
81:e8:75:ce:e0:97:38:a9:0b:13:67:77:ca:ea:e7:
bc:1e:30:ab:a8:c6:40:a8:57:b1:d3:7a:c6:df:10:
1e:c3:e7:ac:1c:80:38:86:cf:bb:4e:fd:98:05:96:
33:97:4b:6f:b7:3a:3b:99:c8:2b:6a:f3:21:9c:4e:
38:a0:23:0c:9f:6f:9e:51:bd:e2:dd:d6:c0:d8:06:
10:29:f9:1a:7b:2a:a6:cc:a5:82:9f:a7:df:ed:7d:
03:6e:04:a8:0b:28:80:99:0d:b1:96:5d:09:15:75:
ef:37:5f:ed:fd:33:bb:4f:bc:f5:cf:e8:ca:c1:7e:
0f:ba:ac:b8:e9:0f:5e:bc:82:94:b4:31:d5:75:8b:
0e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:AF:F7:C3:CF:76:7D:00:3C:83:4E:C4:7F:44:FB:A2:B6:9D:CB:50
X509v3 Authority Key Identifier:
keyid:1E:57:B4:3F:04:4D:4A:BA:82:22:A4:09:78:66:14:28:0A:A7:39:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:58:9a:b7:91:d7:c7:35:3a:8a:0d:12:62:c3:27:e2:ad:2a:
1a:6d:f5:b6:eb:07:c7:2c:fb:b9:8f:f8:a1:35:21:65:35:b9:
8b:7f:b1:77:f9:93:cf:f9:8d:1b:80:86:e4:da:71:43:c5:86:
f9:cf:fd:86:21:ac:01:55:ab:27:e2:5e:13:bb:44:40:4d:2b:
36:f7:46:ee:2d:7c:60:40:d3:7c:a4:91:9c:18:41:02:f5:87:
7b:b5:9f:9c:1b:94:72:74:7f:ca:95:56:7a:d6:75:69:02:13:
50:c0:95:43:72:36:2b:8e:7a:54:df:02:64:53:62:9c:ac:f0:
a8:e7:c2:f1:d3:2c:f5:be:10:a0:51:1f:f1:8d:92:e4:51:48:
be:d8:89:cb:4a:6e:ad:ec:e0:fd:c8:6e:c3:0d:43:cd:30:dd:
56:ef:ff:13:c7:8c:87:bb:f0:d1:04:9f:ee:ae:73:02:c3:72:
ed:9c:09:fc:8e:3c:9c:f3:83:fd:a5:1f:b2:5d:16:d3:cf:6f:
f2:b8:7c:d3:1b:6f:63:84:47:dd:29:90:50:9c:6d:cd:2c:2c:
b5:8d:63:2e:ab:7d:17:2e:4f:c4:8e:a3:f8:cf:2c:4e:be:2e:
f5:82:05:9f:b3:84:fd:aa:2f:e3:67:0e:42:80:ba:94:eb:15:
01:53:ab:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:10:46 2026 by rpki-client