
$ rpki-client -vvf rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft
File: HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft (raw, json)
Hash identifier: yQa+s23FePFYL/XwcceykKC0BOgZ0Up7xy7s/GuLd5o=
Subject key identifier: 87:77:8E:3D:CB:56:D7:94:06:6E:DD:42:95:0E:26:A6:8A:0A:73:0C
Authority key identifier: 1D:3A:9A:8F:C9:7C:FC:D7:AE:84:FF:DC:5A:A0:BB:FB:96:93:DC:97
Certificate issuer: /CN=A913C52D/serialNumber=1D3A9A8FC97CFCD7AE84FFDC5AA0BBFB9693DC97
Certificate serial: 075D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft
Manifest number: 0759
Signing time: Tue 24 Mar 2026 21:23:55 +0000
Manifest this update: Tue 24 Mar 2026 21:23:54 +0000
Manifest next update: Tue 31 Mar 2026 21:23:54 +0000
Files and hashes: 1: HTqaj8l8_NeuhP_cWqC7-5aT3Jc.crl (hash: 9rSJ1BkczD+0c2FzB5jmI5xzmU9eNTWfoZQFoyoGzJw=)
2: FCF8B992679111F09C8F057DC4F9AE02.roa (hash: hP6hvlAGVL2IjCd9PS9GV8LvEVC18omA9yYrbvB5Dqk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.crl
rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:23:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1885 (0x75d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C52D, serialNumber=1D3A9A8FC97CFCD7AE84FFDC5AA0BBFB9693DC97
Validity
Not Before: Mar 24 21:23:54 2026 GMT
Not After : Mar 31 21:23:54 2026 GMT
Subject: CN=69c300eb-0981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8e:9b:82:78:86:31:6d:d0:e8:35:91:2f:9e:
0a:e0:7d:98:f6:26:1f:31:ca:ac:98:08:54:14:02:
3b:1e:15:9d:74:83:d6:92:57:7f:59:4f:dc:a2:d5:
a8:a3:ed:3f:85:aa:8e:01:c0:65:01:9a:8b:b5:b0:
4c:d2:d6:23:ed:f0:9f:49:ff:77:62:6c:59:29:ff:
d2:ec:46:30:58:38:a1:43:63:2b:d0:c2:5b:cf:6d:
d5:4d:90:03:95:5f:b1:65:15:89:7a:e8:cd:ee:38:
9e:38:2a:7b:c8:19:04:58:6c:67:be:b9:43:b1:f2:
00:9c:be:84:73:f2:64:6c:b8:7a:91:63:39:8c:76:
18:c8:a5:5d:f3:01:03:ef:f0:e8:5d:00:bd:04:d7:
ed:7f:fc:6e:ac:00:91:7e:30:1d:4b:a1:e4:02:1b:
e8:c8:e0:46:92:ac:64:d3:c3:6d:00:3f:a1:87:7c:
3a:0f:00:71:e2:0f:bd:7f:78:11:60:1e:30:ea:ac:
20:b9:f6:83:5e:d3:a4:dd:b6:8d:58:81:de:b0:99:
f4:19:d5:05:e4:e5:8e:3c:11:25:cc:ae:69:bf:9a:
a5:0a:62:1a:47:ee:d1:39:60:7c:4d:4c:9b:08:64:
85:ac:58:85:a0:98:e4:ab:1e:05:77:0b:20:e6:15:
53:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:77:8E:3D:CB:56:D7:94:06:6E:DD:42:95:0E:26:A6:8A:0A:73:0C
X509v3 Authority Key Identifier:
keyid:1D:3A:9A:8F:C9:7C:FC:D7:AE:84:FF:DC:5A:A0:BB:FB:96:93:DC:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:4f:d1:65:42:e2:87:43:67:73:8e:87:a8:46:4a:a9:86:71:
d6:ae:aa:b3:ff:9c:d5:ac:5f:b6:fc:2f:a7:ae:fb:31:1a:cb:
3d:84:83:39:1d:9f:f8:28:40:bd:73:06:0f:11:33:40:d5:a3:
ea:28:1c:5e:b2:dc:10:09:0d:a0:0f:dd:dc:54:ab:a8:4a:ed:
4c:e0:f1:e9:b8:c9:ee:4b:8a:62:7e:c8:09:32:0a:02:bb:8b:
bd:29:d3:ed:29:b1:cb:c4:95:70:2a:57:54:88:91:d1:3c:67:
93:05:68:55:01:4f:49:64:a2:b8:ff:80:d6:5b:24:d9:90:a9:
15:87:11:24:35:7b:a7:be:8c:f5:c0:53:c0:ed:0b:18:3a:11:
55:51:64:85:3f:dc:59:4e:b5:73:0b:3e:ed:2f:c4:0c:ce:aa:
05:c5:de:8d:e1:b9:14:b8:73:0c:18:ef:61:44:48:73:9d:2a:
07:b8:4e:c1:10:12:5d:27:83:41:4f:49:2d:a6:a4:31:16:c2:
57:58:db:52:2b:08:89:5b:5b:40:15:fc:bd:0f:3e:c2:44:2a:
e9:d5:d0:33:8c:60:e9:b1:8a:8a:20:90:00:48:0c:cb:43:00:
a6:40:47:53:9f:2d:f8:6a:b7:47:c7:5e:a5:f3:0b:24:45:99:
ca:f9:79:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:18 2026 by rpki-client