
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.mft
File: H_jK4i0tckq70cLRJft9t7T4Sv8.mft (raw, json)
Hash identifier: As0kZZRN4KKqnmCU2Nq0EEMQlXraihG6ddS1zlH5qks=
Subject key identifier: C8:6A:17:37:25:D8:AD:92:51:6F:AF:10:E8:B7:08:C6:1E:6B:08:B2
Authority key identifier: 1F:F8:CA:E2:2D:2D:72:4A:BB:D1:C2:D1:25:FB:7D:B7:B4:F8:4A:FF
Certificate issuer: /CN=A915670F/serialNumber=1FF8CAE22D2D724ABBD1C2D125FB7DB7B4F84AFF
Certificate serial: 81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_jK4i0tckq70cLRJft9t7T4Sv8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.mft
Manifest number: 7F
Signing time: Fri 25 Sep 2026 07:49:25 +0000
Manifest this update: Fri 25 Sep 2026 07:49:25 +0000
Manifest next update: Fri 02 Oct 2026 07:49:25 +0000
Files and hashes: 1: H_jK4i0tckq70cLRJft9t7T4Sv8.crl (hash: QFpeJmYgFdW61dKQbGUtnr9h3sAvSZ1TIBW0M/YpeG4=)
2: E342A7D0F9D911F0908C8513676F56BC.roa (hash: rFk76m5fW9CYOpE5VZsRNzUgbtpqshwPbQBMeshiV/E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.crl
rsync://rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_jK4i0tckq70cLRJft9t7T4Sv8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 07:49:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129 (0x81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915670F, serialNumber=1FF8CAE22D2D724ABBD1C2D125FB7DB7B4F84AFF
Validity
Not Before: Sep 25 07:49:25 2026 GMT
Not After : Oct 2 07:49:25 2026 GMT
Subject: CN=6ab62785-b407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e8:f0:77:a8:bb:71:e7:ab:5c:34:57:cf:25:
c2:b9:d7:2b:f0:9c:64:26:2d:24:2b:e0:45:cc:c8:
38:ba:77:a4:cd:7a:2c:95:fa:74:73:7e:89:9e:41:
f5:57:79:24:92:18:92:10:3d:1d:ea:49:7c:9a:33:
2b:23:1b:59:84:9b:21:3e:e6:57:2b:b7:92:a2:c9:
b7:dc:2d:f1:60:66:bb:10:0f:82:4c:0e:81:50:80:
b5:72:a5:bb:94:bb:21:9f:4b:cf:95:1c:a4:ac:c4:
48:4a:70:38:ba:7a:66:67:51:6e:52:33:72:b6:17:
d9:e8:16:c0:16:52:c4:20:81:b2:c9:e2:b6:db:3a:
ff:f0:b4:20:79:af:f8:e2:0d:57:0f:49:8b:62:75:
40:42:46:40:39:17:24:60:62:ac:d1:43:38:82:8f:
9b:6f:ca:e1:71:b7:8f:13:c3:be:4d:66:c9:ab:2a:
3b:00:a9:4d:f7:d6:cd:cb:c9:4a:94:44:a3:51:62:
78:65:7d:e9:35:92:f0:91:eb:c1:19:16:0c:46:b6:
9d:c4:53:7c:8a:50:9a:0c:ac:aa:e8:a5:5e:b2:13:
0d:ec:a4:a2:e0:e1:10:9f:f9:6f:ff:a3:cc:06:22:
69:ba:19:e4:f9:35:ea:d6:99:9d:c1:cc:27:f4:02:
bf:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:6A:17:37:25:D8:AD:92:51:6F:AF:10:E8:B7:08:C6:1E:6B:08:B2
X509v3 Authority Key Identifier:
keyid:1F:F8:CA:E2:2D:2D:72:4A:BB:D1:C2:D1:25:FB:7D:B7:B4:F8:4A:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_jK4i0tckq70cLRJft9t7T4Sv8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:c3:ba:3f:d1:61:a4:61:16:57:bf:f2:e4:31:1d:09:02:22:
2f:24:03:aa:a8:b7:35:bb:79:23:33:da:f6:51:cc:2f:8d:1a:
45:1d:c9:91:b5:a1:7d:a7:fc:e2:7a:ce:04:20:1d:b4:47:0c:
8c:0c:95:11:21:7e:e2:ee:83:d1:9b:e1:44:22:7c:c2:f0:d9:
1c:b1:e2:b8:68:d7:ab:82:20:fc:3f:78:d0:68:6d:22:e2:81:
c0:27:7c:49:c7:45:ca:1e:ff:0b:2f:06:4b:20:44:a5:ce:6a:
70:b1:df:1b:8c:7d:db:9f:51:df:7c:e3:bf:d1:00:75:02:be:
1d:bc:7b:6d:c7:9d:ee:e2:bb:fe:c4:05:f1:8d:0a:96:36:90:
3f:b0:be:02:85:94:87:a6:17:25:8f:0f:be:67:36:7b:ff:50:
ad:32:d9:c8:b4:52:de:3d:4a:ea:60:e9:6b:7d:fa:e8:ad:44:
d6:b8:4d:30:ad:28:a3:49:4f:f8:63:14:be:ed:f2:57:f9:9a:
e7:60:1c:f4:71:8e:78:aa:21:05:01:bd:7a:05:50:02:cb:04:
51:0d:29:c4:77:c0:73:5c:18:96:4d:76:9f:19:2a:b0:b3:5e:
4a:52:65:39:c8:ba:6f:82:a7:72:07:4d:7e:24:3b:73:e9:0d:
4e:f2:cc:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:12:34 2026 by rpki-client