
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/HdG4aHiGkkxGExFgUO6Q6dSUJp4.mft
File: HdG4aHiGkkxGExFgUO6Q6dSUJp4.mft (raw, json)
Hash identifier: Mv7dT1W7w+VZwixHeERik98NQqK0sWgbyKw2lY+7HKo=
Subject key identifier: 92:3B:61:8E:B2:67:DF:03:AD:6F:D2:99:83:FB:31:8F:29:65:3F:27
Authority key identifier: 1D:D1:B8:68:78:86:92:4C:46:13:11:60:50:EE:90:E9:D4:94:26:9E
Certificate issuer: /CN=A911D848/serialNumber=1DD1B8687886924C4613116050EE90E9D494269E
Certificate serial: 0164
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdG4aHiGkkxGExFgUO6Q6dSUJp4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/HdG4aHiGkkxGExFgUO6Q6dSUJp4.mft
Manifest number: 0155
Signing time: Thu 23 Jul 2026 07:32:13 +0000
Manifest this update: Thu 23 Jul 2026 07:32:12 +0000
Manifest next update: Thu 30 Jul 2026 07:32:12 +0000
Files and hashes: 1: HdG4aHiGkkxGExFgUO6Q6dSUJp4.crl (hash: YIcK13w+CLJc7mhI6V5zkLqAAT2gGIs/ZO1BSvUeLAk=)
2: F0C8DB1CA54E11EF8592FD66C4F9AE02.roa (hash: W9u5qlB4WlP9CIfe+lgCw0P7bcpuJCWbMFYa3TvAgqM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/HdG4aHiGkkxGExFgUO6Q6dSUJp4.crl
rsync://rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/HdG4aHiGkkxGExFgUO6Q6dSUJp4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdG4aHiGkkxGExFgUO6Q6dSUJp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:32:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 356 (0x164)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D848, serialNumber=1DD1B8687886924C4613116050EE90E9D494269E
Validity
Not Before: Jul 23 07:32:12 2026 GMT
Not After : Jul 30 07:32:12 2026 GMT
Subject: CN=6a61c37c-d78a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:45:2c:7d:e8:a6:30:5b:dc:28:7e:4c:75:24:
8a:52:d0:0d:8d:ad:db:c8:fe:30:43:9a:dc:7d:68:
5d:7d:fc:02:c2:a4:1b:2e:7a:b9:e4:84:da:f7:13:
6b:b1:6f:8a:6d:f8:f4:5d:5e:12:2f:05:17:b4:9f:
53:57:13:72:1f:05:2b:cb:9d:5a:f0:d0:a7:0c:a2:
fa:d6:80:97:12:48:ef:25:6a:4e:af:18:6d:9d:06:
bf:08:36:0c:a5:33:c3:84:6a:26:24:29:f5:50:25:
8e:c3:7e:79:c7:86:9f:0e:ca:f2:a9:fe:60:e3:de:
1a:0e:b4:63:6d:07:1e:88:e5:de:8b:31:80:ad:7c:
2b:0d:54:92:b9:49:d4:10:fd:46:df:be:ab:4f:8a:
52:a4:3e:d1:0c:f7:9a:00:4b:e9:2b:de:11:3f:9d:
fd:0b:13:9f:9f:7f:57:fb:c4:5e:f4:cd:38:e0:23:
ad:63:92:f3:97:0a:d4:63:50:d5:20:7a:92:e7:8b:
ba:cc:80:9f:91:b4:7b:cd:8c:95:0f:54:94:b0:69:
9a:47:58:82:c6:b2:af:b5:84:71:cf:ab:f2:7e:31:
1a:2f:36:1b:f2:99:62:3a:a0:1f:b6:ed:c2:70:0e:
00:86:6d:94:8e:dc:c8:cf:62:f4:2f:16:6c:de:31:
04:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:3B:61:8E:B2:67:DF:03:AD:6F:D2:99:83:FB:31:8F:29:65:3F:27
X509v3 Authority Key Identifier:
keyid:1D:D1:B8:68:78:86:92:4C:46:13:11:60:50:EE:90:E9:D4:94:26:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/HdG4aHiGkkxGExFgUO6Q6dSUJp4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdG4aHiGkkxGExFgUO6Q6dSUJp4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/HdG4aHiGkkxGExFgUO6Q6dSUJp4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:66:4d:d1:52:33:91:75:24:f5:5d:12:0f:5d:bf:9c:2e:8b:
9d:de:40:04:d4:15:12:54:1c:9b:4b:fe:9a:ba:9e:a9:04:00:
79:89:33:d7:0a:74:67:e2:46:61:78:8f:09:45:49:58:9d:90:
ca:98:a1:0d:e3:73:7f:9c:65:9b:64:d1:b1:dc:af:13:62:d2:
a9:5b:1d:20:02:f4:58:0c:ab:fc:73:20:ce:dd:c1:96:d4:d3:
7e:47:f2:fa:a4:a4:a5:71:29:bb:f7:b5:0d:90:46:b3:4c:ac:
a6:bb:a0:5e:f9:69:ff:7b:d5:4a:15:39:43:a7:70:8f:6f:79:
d3:17:de:e8:84:dd:f0:99:c3:86:b6:44:c2:b9:c0:d4:77:b8:
53:ee:4c:54:4a:c7:75:a0:e0:4d:70:31:25:84:13:8a:06:54:
b5:7a:31:c3:79:46:b7:af:78:e3:2c:de:cd:9f:c9:d6:b9:11:
a4:41:8c:bc:f6:3b:10:5e:a5:91:9d:11:56:3d:09:ee:ab:a9:
85:ff:cb:40:a0:6f:e4:cd:d3:e9:8c:02:91:4e:77:10:de:41:
57:01:df:55:88:4c:18:57:41:f2:be:57:44:7e:27:1d:15:fe:
4b:46:5d:c6:59:62:cf:29:f7:ab:1e:d9:39:95:41:b6:15:92:
58:82:8b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:52:28 2026 by rpki-client