
$ rpki-client -vvf rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft
File: 0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft (raw, json)
Hash identifier: g9nFU6AAkOHquur65a9+Azh85OK89cHP1mgr090Y298=
Subject key identifier: C9:A3:12:54:B4:54:B8:3D:0D:6A:62:21:E0:C4:5D:C8:ED:CC:FB:CA
Authority key identifier: D2:10:22:C0:0F:0D:BB:E5:8A:99:A1:E6:73:D3:AE:1C:5D:FD:CB:89
Certificate issuer: /CN=A917039B/serialNumber=D21022C00F0DBBE58A99A1E673D3AE1C5DFDCB89
Certificate serial: 041B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hAiwA8Nu-WKmaHmc9OuHF39y4k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft
Manifest number: 040F
Signing time: Thu 23 Jul 2026 01:14:38 +0000
Manifest this update: Thu 23 Jul 2026 01:14:37 +0000
Manifest next update: Thu 30 Jul 2026 01:14:37 +0000
Files and hashes: 1: 0hAiwA8Nu-WKmaHmc9OuHF39y4k.crl (hash: giPe56Vq1q9VGPsx3qGjy7KG1pLy5NdVqSpikyTr3Ig=)
2: A26E4F16C13411ECA5838429C4F9AE02.roa (hash: Q8R/e0WkRoUvhV/duXOH10RMzYjCZjcCedO7vhrkXRQ=)
3: A1CB8D62C13411ECA5838429C4F9AE02.roa (hash: lA+CaygcBrj0YtEqp60seW0ZCX6+tWFwXRqNraQ10Ek=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.crl
rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hAiwA8Nu-WKmaHmc9OuHF39y4k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:14:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1051 (0x41b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917039B, serialNumber=D21022C00F0DBBE58A99A1E673D3AE1C5DFDCB89
Validity
Not Before: Jul 23 01:14:37 2026 GMT
Not After : Jul 30 01:14:37 2026 GMT
Subject: CN=6a616afe-ac39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:72:40:85:87:b4:28:41:8c:2c:a1:94:9d:90:
09:7c:46:0e:ab:67:58:ae:87:bd:4c:14:2f:58:e5:
8a:a5:3c:23:c2:4a:1b:cd:07:05:55:fb:72:c0:4e:
dc:c7:a9:79:2d:04:9a:3d:de:de:57:42:e0:8b:e9:
ec:78:4c:7c:c1:46:11:48:4f:2e:78:35:26:b6:25:
43:3f:55:7b:71:7f:55:84:f1:a8:42:48:fc:ee:b4:
fd:29:ea:69:00:68:42:d5:0d:3f:74:85:e8:84:c6:
c8:84:1b:f5:12:a6:5d:c6:02:78:66:4e:ea:78:19:
17:79:19:ff:c5:33:75:81:ea:62:60:82:c5:e7:58:
50:c4:14:e8:1b:46:23:19:82:02:ee:b8:95:ed:a6:
1c:3a:bd:88:97:0a:b5:04:8e:0b:d1:d5:74:04:41:
1b:51:89:b5:27:20:72:d1:2f:23:65:0a:10:3a:ca:
7e:1e:62:bc:e2:97:de:da:57:94:5d:d0:45:c5:fe:
41:d3:7b:97:29:72:16:8c:50:49:93:f7:3e:fd:89:
ab:09:95:cf:0c:05:25:5b:76:a5:9c:e7:7a:8f:39:
19:bd:cf:60:8b:75:19:4d:5b:b7:96:9e:b0:e7:d8:
ae:3f:d9:1f:15:e6:75:1e:ef:ea:a6:84:06:73:70:
a9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A3:12:54:B4:54:B8:3D:0D:6A:62:21:E0:C4:5D:C8:ED:CC:FB:CA
X509v3 Authority Key Identifier:
keyid:D2:10:22:C0:0F:0D:BB:E5:8A:99:A1:E6:73:D3:AE:1C:5D:FD:CB:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hAiwA8Nu-WKmaHmc9OuHF39y4k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:67:ce:14:34:69:1e:6f:a4:76:e7:ce:44:b5:56:18:0a:66:
96:dd:9e:66:49:ee:1e:78:ca:c1:21:c3:06:27:40:ad:3b:0d:
2d:a7:29:a7:74:51:e0:58:d3:f6:41:7f:63:c9:aa:76:3b:82:
87:7a:d1:01:2a:8e:61:03:a7:ca:c5:8b:d0:54:6a:05:06:02:
c3:33:78:c6:17:91:df:0a:93:49:56:91:c4:b7:3e:25:bc:b3:
58:1b:9b:92:2b:cf:14:55:21:51:80:ec:b7:39:b7:0f:e2:a7:
62:60:96:50:e2:c8:46:72:52:d0:cf:31:cf:aa:d5:f4:d8:e9:
bf:f5:2c:ac:b1:5b:7c:7e:92:a6:03:fc:d7:13:83:d4:a4:92:
25:15:7c:7f:cb:db:64:96:19:03:58:8a:b4:83:dd:b3:a3:cd:
2f:05:95:85:66:43:bc:bf:b7:b3:cb:d2:aa:97:2e:e8:98:ee:
00:f8:6f:af:57:1e:3a:e4:11:87:a4:d7:b5:e9:fc:1f:72:12:
fa:c9:06:f4:be:d1:6f:4f:e4:95:ea:45:02:a3:6b:d1:ff:6c:
b3:c4:34:fb:70:bd:34:45:33:d8:80:9b:e7:65:6f:fc:41:5d:
5f:7a:f6:f9:84:6f:49:33:84:5a:7d:d9:3e:1a:da:89:c1:ee:
18:dd:86:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:58:47 2026 by rpki-client