
$ rpki-client -vvf rpki.apnic.net/member_repository/A914AF32/9DEC07409E5011E89803D826C4F9AE02/hHBzG4maje6yn-pRuQ3BWNvaKvA.mft
File: hHBzG4maje6yn-pRuQ3BWNvaKvA.mft (raw, json)
Hash identifier: G/hWPZFC07LLrGp2lTeOOV3FSPNpFsYqiL+o7SkHAi0=
Subject key identifier: 5A:0E:EE:88:E2:29:4D:53:2D:86:8D:45:0A:C7:F9:7E:87:F1:90:00
Authority key identifier: 84:70:73:1B:89:9A:8D:EE:B2:9F:EA:51:B9:0D:C1:58:DB:DA:2A:F0
Certificate issuer: /CN=A914AF32/serialNumber=8470731B899A8DEEB29FEA51B90DC158DBDA2AF0
Certificate serial: 1468
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHBzG4maje6yn-pRuQ3BWNvaKvA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914AF32/9DEC07409E5011E89803D826C4F9AE02/hHBzG4maje6yn-pRuQ3BWNvaKvA.mft
Manifest number: 1451
Signing time: Wed 22 Jul 2026 16:59:35 +0000
Manifest this update: Wed 22 Jul 2026 16:59:34 +0000
Manifest next update: Wed 29 Jul 2026 16:59:34 +0000
Files and hashes: 1: hHBzG4maje6yn-pRuQ3BWNvaKvA.crl (hash: LZboZuXa90i+KLrVkF8ou6Sl8upSlBQLv2HEbFZ5Ixk=)
2: 813A255423A611F09025FC11C4F9AE02.roa (hash: RaOIdSyJbLBmHHTBAcqvM2xNuH84JM4tWrC9RYmAhrM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914AF32/9DEC07409E5011E89803D826C4F9AE02/hHBzG4maje6yn-pRuQ3BWNvaKvA.crl
rsync://rpki.apnic.net/member_repository/A914AF32/9DEC07409E5011E89803D826C4F9AE02/hHBzG4maje6yn-pRuQ3BWNvaKvA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHBzG4maje6yn-pRuQ3BWNvaKvA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:59:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5224 (0x1468)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914AF32, serialNumber=8470731B899A8DEEB29FEA51B90DC158DBDA2AF0
Validity
Not Before: Jul 22 16:59:34 2026 GMT
Not After : Jul 29 16:59:34 2026 GMT
Subject: CN=6a60f6f7-eed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:12:87:79:79:d0:f7:73:96:2d:d2:f7:c4:82:
c7:14:5e:f3:0b:38:3d:a4:c4:ec:41:51:17:fd:68:
24:08:e5:aa:18:d3:ca:be:2a:39:dd:d7:44:c8:f8:
4c:7c:bf:f1:f8:ac:fe:fe:2d:32:1f:0e:39:25:ee:
e9:fb:53:41:32:26:f4:be:8f:68:4d:79:5b:30:f9:
03:f0:09:3d:fb:04:ed:32:e4:b3:a5:a6:66:b7:33:
74:a4:51:3c:2f:92:cb:3b:02:97:58:4b:d4:29:ee:
07:55:95:c9:f5:e7:b8:3b:ce:41:04:64:0a:44:52:
04:a4:df:e8:af:af:05:f1:0a:2c:1a:32:45:e9:53:
89:61:57:76:72:31:20:55:10:f8:d5:1c:1f:d8:d4:
20:60:87:00:c9:5e:a2:02:b1:14:eb:bd:02:02:0b:
a6:a1:7e:6f:72:dd:86:dd:39:12:d9:9d:94:4c:c6:
e4:95:6f:0d:6a:81:19:5b:e1:d6:4f:00:57:c6:d1:
e3:da:0d:e0:8d:cc:2f:a5:1f:44:63:af:5b:b9:c0:
fb:19:03:57:74:24:fc:f4:75:4e:c4:96:f1:cf:82:
ea:0b:7e:1e:45:4f:b1:14:bf:5e:fb:fb:44:2c:b9:
ea:67:36:75:a9:ad:f4:6e:31:9f:92:1f:65:48:65:
fc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:0E:EE:88:E2:29:4D:53:2D:86:8D:45:0A:C7:F9:7E:87:F1:90:00
X509v3 Authority Key Identifier:
keyid:84:70:73:1B:89:9A:8D:EE:B2:9F:EA:51:B9:0D:C1:58:DB:DA:2A:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914AF32/9DEC07409E5011E89803D826C4F9AE02/hHBzG4maje6yn-pRuQ3BWNvaKvA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHBzG4maje6yn-pRuQ3BWNvaKvA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914AF32/9DEC07409E5011E89803D826C4F9AE02/hHBzG4maje6yn-pRuQ3BWNvaKvA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:0a:d8:93:6f:05:bd:8d:31:56:92:5d:88:94:c3:e3:e7:d3:
31:20:6b:7b:f7:61:f4:9f:9b:e1:a7:56:20:42:21:9b:eb:05:
87:9e:c8:82:ea:d2:9f:08:47:8b:3c:4c:5b:41:a7:a5:1a:16:
7d:1f:e4:5b:fb:5a:ee:df:76:6e:c6:c5:75:11:d3:30:89:6e:
c4:a4:78:d0:7d:67:cf:3e:05:c2:c0:3e:e9:d8:16:29:be:c5:
52:c9:a0:70:e9:6c:22:d3:47:23:e1:60:4b:85:54:c4:ec:a0:
75:57:7d:d9:ae:32:df:d1:25:8f:0f:ff:6c:be:5e:f9:40:e2:
9d:53:cb:68:f0:b6:e2:08:d6:c0:be:fe:fa:d9:cc:54:14:90:
21:04:0b:a7:38:71:45:72:27:c9:dd:82:80:c1:72:11:0b:32:
71:d8:39:68:04:da:d1:3a:eb:a5:eb:cf:80:2f:dc:f5:6b:9d:
3e:17:25:ff:53:0d:7d:b0:e3:87:6b:42:43:49:09:2d:3a:40:
33:5f:84:da:94:5b:9f:c6:71:ff:6e:a6:ed:5c:bc:03:76:4b:
f3:79:08:51:5c:34:6c:fe:5e:b5:ff:f2:46:54:35:11:52:fc:
e0:9a:b4:fd:9a:0f:98:b7:56:25:b1:62:1e:53:16:0c:70:72:
58:da:ff:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:50:47 2026 by rpki-client