
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft
File: HQDCg8qhqzzENxoqOE1isc1E-6c.mft (raw, json)
Hash identifier: yWS26ScY54vtz1dqTqn6tEt00Ap5cuYosGTtXJyIOxg=
Subject key identifier: D7:A7:5E:E1:6F:60:47:F5:69:E1:DF:A6:6F:FC:DD:B3:32:9C:85:F6
Authority key identifier: 1D:00:C2:83:CA:A1:AB:3C:C4:37:1A:2A:38:4D:62:B1:CD:44:FB:A7
Certificate issuer: /CN=A912F387/serialNumber=1D00C283CAA1AB3CC4371A2A384D62B1CD44FBA7
Certificate serial: 021F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft
Manifest number: 0206
Signing time: Thu 23 Jul 2026 04:32:17 +0000
Manifest this update: Thu 23 Jul 2026 04:32:16 +0000
Manifest next update: Thu 30 Jul 2026 04:32:16 +0000
Files and hashes: 1: HQDCg8qhqzzENxoqOE1isc1E-6c.crl (hash: ClzGVnOefjVzD1X9RU2GmUySPmMd91C3enbDTghNyXk=)
2: 9556705A2E6111EF9D743040C4F9AE02.roa (hash: aK9c79sTcvK5iWtA4NQLYDiheDhiqCqKnIFb6fchAKg=)
3: FC34967C6C8611EFBF35D221C4F9AE02.roa (hash: 9vn9aNac6NN/1kMCYleAi9M7mbZTN9Jpf9hVVI22FOc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.crl
rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:32:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 543 (0x21f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F387, serialNumber=1D00C283CAA1AB3CC4371A2A384D62B1CD44FBA7
Validity
Not Before: Jul 23 04:32:16 2026 GMT
Not After : Jul 30 04:32:16 2026 GMT
Subject: CN=6a619951-2169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4b:09:29:4e:80:54:9a:bb:4a:8a:e3:fe:4d:
cd:e5:26:5f:f5:ed:1a:2c:fe:c8:35:b4:26:42:a2:
54:c8:1b:a6:cd:fb:b0:70:19:3c:43:f0:80:95:8a:
05:57:23:16:a7:3d:ca:3d:ea:aa:4c:5f:18:e2:84:
6a:2f:98:56:c7:d9:aa:7a:67:4b:59:d9:46:3a:1a:
c2:bd:6f:c4:37:da:49:95:88:11:a6:5c:73:8e:da:
60:39:8c:26:93:4a:1b:90:c5:60:31:34:a2:50:4d:
20:80:85:52:c0:bc:85:a0:54:a7:b2:dc:c2:22:a0:
14:87:ef:f2:fc:fc:3a:f0:ef:46:a8:c1:60:f5:53:
9a:bb:25:ef:f9:79:c6:27:a8:75:6f:f9:bd:3f:aa:
91:db:cf:a0:ea:fe:dd:0b:29:3e:8e:ff:d3:d2:a9:
10:e8:da:85:5e:be:a3:7d:d5:00:c6:d0:7f:0c:d2:
21:89:75:44:39:1e:09:3b:b3:47:91:5d:14:86:69:
20:44:49:d8:1c:c6:39:d3:49:b8:ee:01:f4:d3:84:
99:ec:1e:da:9e:a1:9f:20:37:e0:e0:6c:a4:7b:72:
df:b0:11:e7:47:06:f8:b9:08:e5:fb:32:f0:bf:26:
db:0c:24:7f:68:fc:65:b1:b2:83:98:62:3f:c9:f2:
f1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A7:5E:E1:6F:60:47:F5:69:E1:DF:A6:6F:FC:DD:B3:32:9C:85:F6
X509v3 Authority Key Identifier:
keyid:1D:00:C2:83:CA:A1:AB:3C:C4:37:1A:2A:38:4D:62:B1:CD:44:FB:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:62:a8:fe:f3:54:09:a3:5a:63:3b:a6:63:09:38:c9:11:09:
66:81:e6:24:8e:d6:12:da:98:04:2b:a8:02:88:a0:81:5b:24:
d5:e1:d6:65:12:db:73:9d:39:5e:71:23:76:d8:90:95:d8:2c:
ef:a3:bd:06:63:d0:18:17:08:de:59:83:63:22:05:9f:9a:f5:
6b:ad:78:ed:6e:bb:07:d5:c4:0f:f1:d0:c4:4b:da:b5:21:b5:
e9:b4:42:cd:70:7d:ac:ad:f3:2e:f7:cf:11:af:9e:6a:a0:1e:
36:8f:b8:ca:f4:31:09:1d:d9:d5:45:76:eb:13:d4:b1:ad:22:
4f:26:ee:43:5c:da:de:ad:a5:e4:44:d1:5b:33:d8:d5:3d:94:
7f:21:a5:58:3a:59:84:7b:98:db:ab:49:80:29:e2:35:4e:77:
df:78:f6:9d:ee:7c:ac:91:3d:fb:a7:03:1e:90:d9:a1:e5:b1:
a5:39:11:7a:55:7c:f8:1d:2b:2e:9d:09:17:3f:4e:24:69:ff:
92:0b:45:ee:7f:a5:55:e0:4d:c8:a7:c0:7a:64:c2:52:24:f2:
f3:58:ff:ea:75:2e:24:82:fd:fd:24:d0:e4:e7:8c:31:5a:3f:
7b:ac:94:89:da:ed:be:a9:77:10:7e:c6:ae:68:f1:b5:7b:95:
c6:3f:0f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:10:22 2026 by rpki-client