
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915BC71/91BE2BC03F0511F1BE3FC0C2C9833773/hRLpaZVqy30-dg7ZhuG-6j-KwPg.mft
File: hRLpaZVqy30-dg7ZhuG-6j-KwPg.mft (raw, json)
Hash identifier: arGw9yYavbVAW1Qbva2W3a3F/XOTHQXP1NqfZLIjYgo=
Subject key identifier: 36:F2:DF:B5:B4:82:22:28:C6:81:25:23:BD:7A:52:2F:32:A6:E5:FB
Authority key identifier: 85:12:E9:69:95:6A:CB:7D:3E:76:0E:D9:86:E1:BE:EA:3F:8A:C0:F8
Certificate issuer: /CN=A915BC71/serialNumber=8512E969956ACB7D3E760ED986E1BEEA3F8AC0F8
Certificate serial: 59
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRLpaZVqy30-dg7ZhuG-6j-KwPg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BC71/91BE2BC03F0511F1BE3FC0C2C9833773/hRLpaZVqy30-dg7ZhuG-6j-KwPg.mft
Manifest number: 53
Signing time: Wed 23 Sep 2026 08:03:14 +0000
Manifest this update: Wed 23 Sep 2026 08:03:14 +0000
Manifest next update: Wed 30 Sep 2026 08:03:14 +0000
Files and hashes: 1: hRLpaZVqy30-dg7ZhuG-6j-KwPg.crl (hash: 3ssAPJzl8gXEFrOlTAw2L48KfFjmTWYzOJzXrdT5pWY=)
2: 2BC7F9083F0611F1ADBFCBF4C9833773.roa (hash: fjBBp9RAWRX1PPIA5V4SattdM60ZaCT18eTtLAtSLSY=)
3: yXbfSYbD29mEtJ_OVJA2nVuCtMk.asa (hash: z3ITVA5+vv3swb2erAhhZhDQWe0QlzjqbV+CNbmeheI=)
4: 04DF866C3F0611F1B36B08F4C9833773.roa (hash: ox5XcIpV2S9UAzm7R4v0XD8a/1yL0AoCYGD4B4pq/A8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915BC71/91BE2BC03F0511F1BE3FC0C2C9833773/hRLpaZVqy30-dg7ZhuG-6j-KwPg.crl
rsync://rpki.apnic.net/member_repository/A915BC71/91BE2BC03F0511F1BE3FC0C2C9833773/hRLpaZVqy30-dg7ZhuG-6j-KwPg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRLpaZVqy30-dg7ZhuG-6j-KwPg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 08:03:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89 (0x59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BC71, serialNumber=8512E969956ACB7D3E760ED986E1BEEA3F8AC0F8
Validity
Not Before: Sep 23 08:03:14 2026 GMT
Not After : Sep 30 08:03:14 2026 GMT
Subject: CN=6ab387c2-ed27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e7:11:fc:3b:26:e2:03:20:7b:bf:f4:1a:20:
4b:27:90:50:cf:16:a7:ff:ea:f1:fa:01:57:bd:6f:
13:4b:13:c6:2c:32:c0:7e:d0:d3:31:88:ae:47:c5:
1b:8a:42:f2:11:d7:78:d9:f7:35:40:66:76:7c:e2:
2c:dd:92:d5:55:06:df:17:ad:2b:8c:95:86:84:8f:
36:f3:5e:f2:70:f9:0a:b2:cb:66:14:e3:43:ab:6d:
38:d6:19:a9:55:27:bb:ab:2b:b2:e1:de:77:a8:68:
be:52:7c:f2:34:04:af:42:cd:27:97:03:f4:68:a6:
28:d2:b4:dd:76:34:56:b3:ce:d9:1e:b6:c1:a6:41:
ba:90:1d:ea:0a:0a:ea:5c:2e:77:f4:c7:94:08:eb:
f4:e7:97:6c:7f:1f:e7:bd:1a:56:ae:8d:01:ed:10:
d8:56:b9:4b:7b:5d:87:e1:3b:63:2f:be:de:21:d5:
9a:83:02:ce:d4:6d:0c:55:17:7e:31:3a:70:52:96:
40:a8:45:f8:48:7e:9b:3f:98:9b:62:e6:14:d8:ff:
22:7d:d9:dd:50:12:ca:11:8f:4b:00:c2:60:54:0f:
c0:62:a3:27:ba:f6:5f:12:42:3a:36:aa:1b:c2:b7:
b6:4f:56:70:32:7f:1c:9d:d0:5f:13:b4:c5:e4:79:
af:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F2:DF:B5:B4:82:22:28:C6:81:25:23:BD:7A:52:2F:32:A6:E5:FB
X509v3 Authority Key Identifier:
keyid:85:12:E9:69:95:6A:CB:7D:3E:76:0E:D9:86:E1:BE:EA:3F:8A:C0:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BC71/91BE2BC03F0511F1BE3FC0C2C9833773/hRLpaZVqy30-dg7ZhuG-6j-KwPg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRLpaZVqy30-dg7ZhuG-6j-KwPg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC71/91BE2BC03F0511F1BE3FC0C2C9833773/hRLpaZVqy30-dg7ZhuG-6j-KwPg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:0f:96:40:c0:30:e3:3d:53:a6:7a:8d:2c:90:00:0c:e0:44:
8c:7a:ee:39:57:ac:46:91:8c:64:0d:59:02:2b:e7:e0:07:22:
e5:c3:7b:da:5f:5c:58:33:d2:5a:16:de:f9:68:5c:16:ef:a3:
30:c8:4b:a8:70:e5:25:61:af:32:57:48:d0:82:96:b1:10:50:
ff:5a:50:4f:d8:cc:43:65:12:c2:db:ca:da:5f:5a:a6:5d:d4:
fd:a9:9e:15:c3:84:cb:8a:ff:e7:b4:77:27:24:ea:bc:4e:37:
67:86:49:2b:fb:59:3f:40:0e:c3:24:35:49:fd:2c:2f:10:2b:
25:91:c3:8f:19:9f:c8:b1:e6:ed:83:ad:ab:54:e3:7c:5b:d8:
7d:22:d7:13:b0:ed:b7:21:19:cf:59:87:f0:e8:77:66:97:c2:
20:f3:21:e2:44:ed:7f:51:51:a5:cc:1d:fa:67:0b:1e:19:f9:
74:2a:17:2a:80:53:10:82:a1:86:52:1a:16:bd:aa:d7:97:a3:
e1:31:48:09:19:f5:7e:07:cd:ba:8a:54:b3:80:2e:87:8d:27:
7e:2b:9f:53:f1:af:2e:51:d1:98:ef:18:0f:85:8b:d6:d3:9d:
c8:8a:c8:99:0d:76:22:26:31:f5:42:d0:b8:b9:35:fa:16:c6:
69:ba:b2:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:28:17 2026 by rpki-client