
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft
File: H5ogKJzpMW5ls9tyToxzYGyPhks.mft (raw, json)
Hash identifier: ZgSjjU0fLlLiC418GJ7uDAIqSte9ZGAfWj9ghiN5aEY=
Subject key identifier: 86:FC:61:52:3F:CA:F4:7F:8D:6E:2D:8A:BF:D3:8E:1E:4D:B4:99:A8
Authority key identifier: 1F:9A:20:28:9C:E9:31:6E:65:B3:DB:72:4E:8C:73:60:6C:8F:86:4B
Certificate issuer: /CN=A914BF33/serialNumber=1F9A20289CE9316E65B3DB724E8C73606C8F864B
Certificate serial: 0D3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft
Manifest number: 0D25
Signing time: Thu 24 Sep 2026 18:15:56 +0000
Manifest this update: Thu 24 Sep 2026 18:15:55 +0000
Manifest next update: Thu 01 Oct 2026 18:15:55 +0000
Files and hashes: 1: H5ogKJzpMW5ls9tyToxzYGyPhks.crl (hash: bwhmZIjZhhSVAeYNfq4wmhaqu3huGAsEYBbFWaq4MP8=)
2: 172E487A416911ECB6B11742C4F9AE02.roa (hash: lJfLPhd1kAAzDWL/Ne5AiMPNOkxSubYVAGKuzG/T5pk=)
3: 67827BDC0B8511EA97C80D52C4F9AE02.roa (hash: 7CjBAuah6/o6TO56EaGyhTraMGUdKeiH/EG6F7J9nYY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.crl
rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 18:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3391 (0xd3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BF33, serialNumber=1F9A20289CE9316E65B3DB724E8C73606C8F864B
Validity
Not Before: Sep 24 18:15:55 2026 GMT
Not After : Oct 1 18:15:55 2026 GMT
Subject: CN=6ab568db-f5b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:6d:6c:d3:21:83:b8:82:ac:0e:c7:2f:6e:12:
31:3c:2f:7b:77:c7:6e:82:3c:21:4f:b2:92:5d:f6:
d4:fc:6b:3a:ab:a5:0e:92:3f:01:3d:26:21:dd:2f:
4e:a6:e3:b4:67:2f:44:7e:ec:01:ae:ec:bd:3a:ef:
b3:f6:3f:86:96:78:f5:d5:b6:7e:40:e6:c5:17:be:
35:2f:85:a0:fb:d9:8d:d3:4e:52:94:a7:6e:f5:d1:
7d:06:0d:69:3e:dc:5f:db:13:03:ac:33:cf:78:67:
3c:60:bc:22:8d:c5:85:5b:28:55:31:ba:30:93:cb:
08:f8:02:3c:99:25:d5:e8:52:8a:2b:9c:05:d7:9a:
01:91:7c:7e:30:09:a0:db:61:35:55:39:30:2f:b8:
af:da:6a:13:fd:87:fb:80:b7:2b:9b:6a:25:ef:6f:
47:c1:33:92:22:c9:07:0a:76:b5:9c:c7:4a:87:86:
06:80:a3:af:5d:d4:0f:66:33:d2:cd:e8:60:43:34:
21:7e:8f:a5:6d:92:65:e1:58:07:80:96:ed:73:80:
2a:43:88:2e:c9:03:ba:a7:75:ed:e0:1c:dd:57:d3:
96:77:64:99:39:5c:c2:e4:b0:58:a6:4e:92:df:4e:
7e:43:e4:88:73:5a:f3:cc:8f:eb:89:72:9d:26:8f:
31:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:FC:61:52:3F:CA:F4:7F:8D:6E:2D:8A:BF:D3:8E:1E:4D:B4:99:A8
X509v3 Authority Key Identifier:
keyid:1F:9A:20:28:9C:E9:31:6E:65:B3:DB:72:4E:8C:73:60:6C:8F:86:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:52:c6:43:42:70:df:71:1c:37:5c:5b:c2:0e:cb:66:96:a8:
f8:14:b3:0e:f1:82:38:0d:e0:cc:18:e5:59:a7:66:be:dd:79:
24:a9:15:cb:02:94:42:bb:b9:0c:ce:49:3e:46:cc:aa:e1:f9:
f5:ed:6e:43:42:3b:3b:27:a4:4b:53:67:70:3c:88:c2:f8:fa:
f0:41:62:b8:0d:f7:a9:23:23:be:b9:f5:55:4b:fd:db:64:24:
6c:34:2f:1d:e1:9c:82:e0:e5:df:06:fa:38:69:41:85:f6:27:
4b:20:5b:ed:5b:ac:2f:ad:d7:de:07:9f:69:b9:f7:25:47:84:
2f:33:fb:01:11:a3:d7:8c:7a:3f:c5:0c:90:4f:3b:25:b7:7a:
d9:3b:f8:21:01:ca:29:9a:6d:00:b9:dd:5b:5c:7b:2f:28:06:
27:46:58:e2:8a:cc:7b:a3:38:20:f7:23:cf:59:05:33:71:0b:
bc:b7:fa:cc:4f:e3:bb:f8:4c:47:af:7d:9d:95:7e:91:b8:57:
b0:22:4a:4c:60:33:22:fb:cf:17:39:c5:c4:49:07:2a:4f:95:
07:70:36:52:4e:1f:27:12:4b:7f:0d:44:d1:2a:91:54:42:11:
cc:7b:38:08:86:2c:4b:30:c6:40:b7:f6:c6:a5:82:ee:15:96:
f8:e8:02:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:16:37 2026 by rpki-client