
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.mft
File: HSQuN7enRsN-RUFFarAJiztXPPw.mft (raw, json)
Hash identifier: Q/U/UG/rn+TuuSZiw8KJNuxp8oHrsU17xCWgYxgDU+Q=
Subject key identifier: 20:18:D5:23:C9:28:26:14:59:4B:72:ED:02:B8:0A:85:0E:0D:28:EF
Authority key identifier: 1D:24:2E:37:B7:A7:46:C3:7E:45:41:45:6A:B0:09:8B:3B:57:3C:FC
Certificate issuer: /CN=A9142EA4/serialNumber=1D242E37B7A746C37E4541456AB0098B3B573CFC
Certificate serial: CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSQuN7enRsN-RUFFarAJiztXPPw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.mft
Manifest number: C3
Signing time: Thu 23 Jul 2026 08:49:11 +0000
Manifest this update: Thu 23 Jul 2026 08:49:10 +0000
Manifest next update: Thu 30 Jul 2026 08:49:10 +0000
Files and hashes: 1: HSQuN7enRsN-RUFFarAJiztXPPw.crl (hash: Ed/7+4xuaf0qOcj/D0fOiP9Fffle5sPszGiBKPCPbFo=)
2: 96E040E063B211F09B18DA38C4F9AE02.roa (hash: TJexH2mJnGHPHwiqib8qKUREb69KfASR/45xsIgcTsw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.crl
rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSQuN7enRsN-RUFFarAJiztXPPw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 204 (0xcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142EA4, serialNumber=1D242E37B7A746C37E4541456AB0098B3B573CFC
Validity
Not Before: Jul 23 08:49:10 2026 GMT
Not After : Jul 30 08:49:10 2026 GMT
Subject: CN=6a61d587-3405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a6:a4:5e:1f:79:d1:d8:da:e7:a6:4b:96:dc:
d0:fe:83:44:cb:7f:5a:3f:d2:ae:0f:df:ac:70:8c:
a2:ea:f6:58:df:9c:1c:d1:f9:5e:7d:dc:5d:78:d7:
0e:15:22:92:06:f9:14:81:36:13:bb:44:83:28:71:
88:7e:69:6c:e5:1d:57:81:6e:8d:5c:38:eb:4c:fd:
da:63:97:49:3b:db:5b:58:35:1b:eb:31:f9:81:03:
22:59:64:41:a6:83:a8:5f:07:5e:84:56:5f:5a:b3:
3f:5a:61:b3:3b:ce:2f:5f:2d:d5:65:4e:05:3a:dc:
8e:88:3d:5b:e6:fb:bb:89:9c:f8:26:86:96:42:8d:
ad:37:fc:9a:95:df:0f:e1:12:5a:6b:2f:7d:e6:27:
0f:8e:9b:60:bc:17:aa:f5:9d:15:16:15:da:ae:ca:
e5:fa:25:0b:06:7c:14:d4:05:0c:43:db:d9:3c:93:
cd:74:6c:0b:53:d2:cc:e1:7e:ab:83:59:4d:3c:0f:
70:98:c4:35:4b:60:58:21:02:66:5d:8a:ae:7d:56:
3c:62:7b:68:0f:a7:ed:31:fb:0f:68:3f:62:f6:4f:
e1:7c:2e:66:64:4d:cd:ac:8b:2f:77:ac:b6:43:ca:
48:34:6d:92:8b:3f:61:20:a9:70:80:44:5e:b1:8b:
b5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:18:D5:23:C9:28:26:14:59:4B:72:ED:02:B8:0A:85:0E:0D:28:EF
X509v3 Authority Key Identifier:
keyid:1D:24:2E:37:B7:A7:46:C3:7E:45:41:45:6A:B0:09:8B:3B:57:3C:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSQuN7enRsN-RUFFarAJiztXPPw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:c1:2f:58:a6:50:99:62:8e:45:7d:d7:73:33:ae:a1:07:41:
6b:ce:97:46:37:77:59:fd:12:00:ac:f0:4b:7d:be:d7:82:a8:
42:c6:9b:45:5b:4b:86:78:4e:c5:54:8e:57:d0:a1:48:12:1d:
12:c9:bf:36:92:68:1b:dd:f6:eb:f0:89:1d:6c:7c:49:20:db:
1b:d8:64:3a:35:95:e8:b6:f1:3d:85:ef:ee:2f:d1:96:ae:55:
ad:9d:a8:f9:97:93:b9:09:c8:00:3e:c5:28:a4:5b:c6:0d:a1:
bb:cb:45:1a:7d:0b:f6:30:db:69:0f:f1:87:03:d8:9d:a2:21:
4a:73:50:c2:ff:bb:39:20:b4:b3:fe:9e:25:22:cb:d9:36:89:
ee:b6:17:80:d9:98:0e:3c:9a:18:8a:61:3d:e7:68:88:7f:f9:
19:95:e0:f4:bc:11:ce:12:e9:94:0e:52:46:d4:b0:bb:92:ba:
55:9b:7c:fc:33:b1:10:99:7a:67:98:e5:8f:1c:0c:24:9c:2b:
af:78:a2:7a:a8:46:60:ec:73:d8:50:04:7a:9e:ff:7c:70:f5:
c6:cc:25:73:dd:9b:cd:27:79:3c:47:ee:48:ba:86:fa:86:a1:
3e:e9:6c:4f:36:7c:b3:6e:a9:a5:08:fe:0a:43:de:50:1a:10:
d0:bd:52:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:44:46 2026 by rpki-client