
$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft
File: HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft (raw, json)
Hash identifier: SYvOHAjM3+sllOUj8rxIxJxfuGBD7ue1yFzGnXiIUjU=
Subject key identifier: 99:77:84:37:85:65:79:94:8A:3B:AC:5A:FF:0D:F1:AB:64:5F:64:DF
Authority key identifier: 1C:62:DC:1D:80:CB:AB:03:03:53:E1:F5:74:B3:60:01:98:FB:6B:71
Certificate issuer: /CN=A916ED18/serialNumber=1C62DC1D80CBAB030353E1F574B3600198FB6B71
Certificate serial: 1A2D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HGLcHYDLqwMDU-H1dLNgAZj7a3E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft
Manifest number: 1A13
Signing time: Wed 22 Jul 2026 16:26:28 +0000
Manifest this update: Wed 22 Jul 2026 16:26:28 +0000
Manifest next update: Wed 29 Jul 2026 16:26:28 +0000
Files and hashes: 1: HGLcHYDLqwMDU-H1dLNgAZj7a3E.crl (hash: Xxh7I/1s0bd0J5FNtivbc2DskV6EVCW3oHJHOYMhbnQ=)
2: 9C1DF7FC434311ECBE4BAA38C4F9AE02.roa (hash: UVagvNv2xQNSD/DTi1pYnkPAd6yaMMHes6alyvk08Ew=)
3: BE8F165C873111E9AA82EC27C4F9AE02.roa (hash: whf91COmOS4nmBy8X3NCysn1mTlxA8VZykZt4Rg2IFU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.crl
rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HGLcHYDLqwMDU-H1dLNgAZj7a3E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:26:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6701 (0x1a2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916ED18, serialNumber=1C62DC1D80CBAB030353E1F574B3600198FB6B71
Validity
Not Before: Jul 22 16:26:28 2026 GMT
Not After : Jul 29 16:26:28 2026 GMT
Subject: CN=6a60ef34-c8a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7a:a8:49:44:15:b3:e6:80:36:d1:11:52:89:
ea:7b:e1:03:e1:65:19:e5:1a:7b:b6:7c:95:3b:b9:
ff:80:26:ab:79:fa:2f:0c:13:9b:c5:45:e2:55:a7:
73:fa:6a:9d:bf:cc:7f:1d:94:df:b7:4f:02:6a:19:
94:af:2b:89:a1:fb:cf:75:f6:82:86:cb:33:50:c2:
2d:7b:e6:92:92:78:6e:37:8e:6b:78:63:55:df:c5:
99:9a:d7:d1:2d:6f:14:a7:86:eb:14:6e:5c:0a:1c:
95:03:42:16:0e:15:a0:3e:ad:b2:5b:d8:48:98:7f:
17:00:d1:01:2b:26:57:53:c9:00:26:5d:6f:b7:b1:
4c:8d:28:e8:23:8f:00:a9:9b:74:e5:13:aa:50:bb:
15:9c:76:08:b8:a6:7e:2f:5e:cf:bb:37:70:49:ca:
2a:6a:9f:13:41:2e:c0:3e:85:a2:93:07:8b:85:28:
f9:9c:6f:df:c1:b9:67:d4:49:19:57:ab:6d:85:54:
5e:c8:05:ae:34:ce:89:9e:3b:d5:09:54:07:a6:23:
72:d4:1e:a2:98:1a:c8:5c:1c:25:d5:86:c4:03:54:
80:22:8f:e4:15:54:80:ff:58:85:67:13:f6:42:47:
05:9e:64:66:79:fb:59:88:09:d9:b0:96:ef:a3:78:
82:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:77:84:37:85:65:79:94:8A:3B:AC:5A:FF:0D:F1:AB:64:5F:64:DF
X509v3 Authority Key Identifier:
keyid:1C:62:DC:1D:80:CB:AB:03:03:53:E1:F5:74:B3:60:01:98:FB:6B:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HGLcHYDLqwMDU-H1dLNgAZj7a3E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:43:1e:2b:86:36:78:e4:00:62:36:26:ac:7c:5d:ec:19:d2:
8b:2c:ce:0f:67:0c:b9:5d:d6:e2:70:65:b0:1d:db:2f:d2:7e:
5a:8d:cc:24:fe:5c:41:78:0a:91:a6:7e:36:78:8c:b1:a7:06:
f3:00:a2:1d:f2:30:cf:10:d9:9e:0e:60:71:1b:96:7e:de:2b:
ea:6f:41:ab:8a:f6:e2:44:46:b2:b8:5f:25:9b:88:75:38:e8:
43:20:6f:2f:26:7e:25:eb:db:68:35:5b:9d:09:f1:08:f2:c0:
3f:37:91:dc:ff:a0:cc:5b:e6:47:49:9a:e7:c8:79:08:2e:bc:
53:a8:5e:89:97:c8:32:fe:04:c5:19:5d:ec:5f:9c:57:3a:b0:
e6:ae:6b:c6:14:6f:d0:6c:3f:4f:b7:a6:d7:c7:3b:70:a1:68:
4a:2d:03:c5:1c:4b:56:87:c5:0b:1f:18:e0:3e:32:df:63:d2:
d8:25:4a:07:e9:87:2b:42:dd:a9:81:55:17:41:50:83:8a:6c:
2c:9e:4b:da:d5:c5:04:8d:43:df:37:49:82:fb:58:16:cc:fd:
47:80:0c:54:d2:14:e1:b0:9a:87:55:e2:a5:bf:62:8c:a5:94:
cd:e0:d0:1e:89:f2:40:ff:84:77:db:77:2e:48:a2:ba:95:99:
dd:92:ea:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:15:01 2026 by rpki-client