
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DC94/9C5C8E2C6AB711F188E872EF6247A888/MHhieRqQd5CGxXf5OTGDidaLcag.mft
File: MHhieRqQd5CGxXf5OTGDidaLcag.mft (raw, json)
Hash identifier: YEH5Z/F7yEYZx6d9XpsuFJ9+NTPTSrSROszZXq/4fP8=
Subject key identifier: A9:F3:01:E6:59:C0:C0:3E:4A:48:E8:D0:32:04:94:93:BF:2C:1D:23
Authority key identifier: 30:78:62:79:1A:90:77:90:86:C5:77:F9:39:31:83:89:D6:8B:71:A8
Certificate issuer: /CN=A912DC94/serialNumber=307862791A90779086C577F939318389D68B71A8
Certificate serial: 14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHhieRqQd5CGxXf5OTGDidaLcag.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DC94/9C5C8E2C6AB711F188E872EF6247A888/MHhieRqQd5CGxXf5OTGDidaLcag.mft
Manifest number: 13
Signing time: Thu 23 Jul 2026 11:08:03 +0000
Manifest this update: Thu 23 Jul 2026 11:08:02 +0000
Manifest next update: Thu 30 Jul 2026 11:08:02 +0000
Files and hashes: 1: MHhieRqQd5CGxXf5OTGDidaLcag.crl (hash: KalForKcTHZgSioLwD4vGDf0BhP0YbwdeN3HYGNbdb0=)
2: 4F16B51A6AB811F18EBFB70E6347A888.roa (hash: g04zLld4UYO3F+kCZ6KaWBxSqXKNmClRuSZYSKekq78=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912DC94/9C5C8E2C6AB711F188E872EF6247A888/MHhieRqQd5CGxXf5OTGDidaLcag.crl
rsync://rpki.apnic.net/member_repository/A912DC94/9C5C8E2C6AB711F188E872EF6247A888/MHhieRqQd5CGxXf5OTGDidaLcag.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHhieRqQd5CGxXf5OTGDidaLcag.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 11:08:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DC94, serialNumber=307862791A90779086C577F939318389D68B71A8
Validity
Not Before: Jul 23 11:08:02 2026 GMT
Not After : Jul 30 11:08:02 2026 GMT
Subject: CN=6a61f613-c0e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c3:49:4e:ef:87:c4:e4:79:fe:be:77:65:e9:
e5:a0:1c:aa:dc:ac:69:38:0f:ba:bd:49:d5:b9:9e:
28:3c:f8:c2:bf:5f:36:59:e1:dd:f9:e7:98:35:47:
e1:08:23:e9:3b:b2:9d:05:a1:94:34:4c:11:f5:33:
70:c3:4d:68:eb:24:40:dc:2c:5c:97:01:26:c5:16:
6f:cd:6a:51:79:f9:b4:75:ea:ba:50:99:1b:95:6e:
b8:59:0a:f7:43:1d:25:b3:2e:a4:73:db:df:e3:84:
0d:51:93:a3:e2:8c:cc:af:50:eb:13:93:99:9a:e0:
27:f3:7e:d4:94:1d:1a:8b:2c:23:db:83:a5:a5:74:
8f:83:ed:06:1d:95:63:c2:d8:35:1c:eb:69:ec:59:
db:16:94:eb:b6:fa:fe:03:73:67:58:f2:f5:e9:c2:
e6:3e:c8:34:93:bb:c3:d0:a6:34:e2:d8:fa:ae:cc:
b7:56:ec:dd:ad:a2:3e:cc:59:1f:3a:72:00:36:49:
1b:df:b2:52:1e:4f:65:9c:b4:b5:bd:3c:59:55:7f:
44:bc:82:c9:71:78:80:39:2b:59:49:5c:19:ef:16:
77:a3:46:29:4e:27:53:52:bd:69:e1:1b:6a:7e:f8:
80:67:dd:11:7e:a6:5a:3f:a6:52:e6:8b:96:46:b3:
14:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F3:01:E6:59:C0:C0:3E:4A:48:E8:D0:32:04:94:93:BF:2C:1D:23
X509v3 Authority Key Identifier:
keyid:30:78:62:79:1A:90:77:90:86:C5:77:F9:39:31:83:89:D6:8B:71:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DC94/9C5C8E2C6AB711F188E872EF6247A888/MHhieRqQd5CGxXf5OTGDidaLcag.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHhieRqQd5CGxXf5OTGDidaLcag.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DC94/9C5C8E2C6AB711F188E872EF6247A888/MHhieRqQd5CGxXf5OTGDidaLcag.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:3a:1b:98:4a:4c:6c:47:4d:77:36:50:72:82:2c:a6:3a:52:
b8:7d:6a:9a:15:ac:2e:ea:4b:67:fc:f3:e6:a5:87:92:b7:ab:
bf:7a:5b:6d:be:ec:55:ad:a8:f3:24:1b:f0:e0:d8:40:b1:e6:
5f:26:3f:43:bb:09:90:a5:11:f8:0b:55:f3:23:de:aa:3d:d0:
09:80:5c:8a:7c:9e:78:f6:e9:f7:4e:dd:9f:f5:45:48:0e:a9:
b0:5f:78:e8:84:ef:14:1c:31:54:58:dd:85:e2:5f:d7:25:b3:
57:ec:14:97:74:50:71:b5:3d:03:81:4f:95:a4:e4:6a:07:b2:
01:c6:e3:43:85:a4:bd:0e:ce:32:b3:b1:78:9d:4d:aa:de:88:
2c:e9:44:bb:c3:58:91:95:c3:ac:2d:8b:cc:6a:f3:e0:3e:4f:
21:78:2e:39:a5:e6:a7:e0:35:0d:29:42:51:2f:33:5e:de:b1:
3f:3e:a0:9c:d4:3f:39:3c:f0:a4:f4:53:c3:ad:89:95:88:83:
c1:1c:5c:ee:89:e8:81:30:51:d9:8c:2a:2c:3f:27:d9:a1:e4:
1a:1a:2e:7a:dd:5b:44:d8:af:5c:9f:ce:9f:9b:c7:d2:10:5d:
51:83:93:47:b1:92:0b:25:bc:e9:81:18:c7:05:08:2e:a2:29:
6e:55:56:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:29:08 2026 by rpki-client