
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft
File: H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft (raw, json)
Hash identifier: vHsO892cXLFSXyjKsfo1qC0YHkiZtF+XGacvjQ0Ex88=
Subject key identifier: 8E:A3:5B:64:55:CB:14:78:A0:4F:A8:6D:86:EA:04:B3:15:09:78:43
Authority key identifier: 1F:63:3F:72:D1:C6:78:16:C2:06:4A:56:E5:38:3C:D9:54:DD:C0:E5
Certificate issuer: /CN=A91764E1/serialNumber=1F633F72D1C67816C2064A56E5383CD954DDC0E5
Certificate serial: 0200
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2M_ctHGeBbCBkpW5Tg82VTdwOU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft
Manifest number: 01EF
Signing time: Wed 23 Sep 2026 03:15:20 +0000
Manifest this update: Wed 23 Sep 2026 03:15:19 +0000
Manifest next update: Wed 30 Sep 2026 03:15:19 +0000
Files and hashes: 1: H2M_ctHGeBbCBkpW5Tg82VTdwOU.crl (hash: L2PS/o/N9MAE9tZ6WUhCwvUBBX/NnLZZ/c0D+/cBPiM=)
2: 30A1B4D0C67E11EEB4008058C4F9AE02.roa (hash: 1afV/Wp2zXvrGPdZywlVFm2mfGMyxkWyHsB9FTJiBqA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.crl
rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2M_ctHGeBbCBkpW5Tg82VTdwOU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 03:15:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 512 (0x200)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91764E1, serialNumber=1F633F72D1C67816C2064A56E5383CD954DDC0E5
Validity
Not Before: Sep 23 03:15:19 2026 GMT
Not After : Sep 30 03:15:19 2026 GMT
Subject: CN=6ab34448-822c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:60:b7:86:d9:0f:67:fb:e0:67:b8:fc:d4:4c:
4f:e0:92:25:c4:28:6b:02:2f:e7:61:fe:21:7c:ce:
fb:81:a8:7f:b3:4e:5f:b1:ae:30:6a:85:ac:bb:d8:
e9:5d:d3:d3:cf:25:40:40:54:62:b6:4d:24:76:27:
75:df:a3:8a:af:f2:e5:49:e9:d6:3a:c3:c0:22:ea:
cd:12:ec:35:3c:7a:e2:35:b2:89:97:64:67:a1:fd:
f2:2d:34:68:90:a6:5c:6f:65:a9:a2:1c:f9:2a:43:
68:95:cc:8e:08:98:7b:aa:59:9e:00:e2:39:ce:3e:
25:bb:b3:87:7e:d4:9c:39:a5:aa:32:54:91:ef:05:
6d:43:e2:f3:16:d0:cb:b9:0b:97:76:5e:ea:69:88:
4b:74:b8:99:05:f3:50:f7:e1:71:69:d4:ab:e0:53:
97:c5:44:ba:6c:ca:1f:17:1c:d7:74:b6:49:cc:8e:
5e:b3:2b:2e:66:d4:fb:76:35:d3:30:c6:6b:4b:5e:
00:6a:69:ed:d7:67:7d:47:d4:54:5f:26:10:63:12:
47:72:20:06:27:7b:cd:c9:86:a0:49:db:60:17:8e:
ea:6a:59:79:bb:8a:f0:d7:05:1b:83:84:88:82:96:
fb:74:b3:5e:74:28:4c:f4:a5:c5:b3:92:67:09:66:
e9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A3:5B:64:55:CB:14:78:A0:4F:A8:6D:86:EA:04:B3:15:09:78:43
X509v3 Authority Key Identifier:
keyid:1F:63:3F:72:D1:C6:78:16:C2:06:4A:56:E5:38:3C:D9:54:DD:C0:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2M_ctHGeBbCBkpW5Tg82VTdwOU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:26:63:25:ac:64:57:57:c6:bf:e5:53:84:4a:24:bb:02:c7:
96:3f:1f:c7:74:d2:14:00:e3:62:39:ad:44:e0:72:8e:2d:31:
42:e5:d0:06:6d:b6:5d:58:93:4e:af:e5:19:0f:2d:8b:06:d9:
9e:b5:47:b1:f8:56:07:4d:ba:8c:66:83:c1:bb:e5:f0:65:4a:
71:18:bf:64:a1:15:b3:c3:ab:99:80:29:d0:b5:e6:b9:61:58:
38:b1:b9:fd:21:a9:a3:a4:b2:2e:26:65:2a:33:34:66:65:25:
66:3c:a5:33:99:f1:3f:05:0f:c5:bf:93:6a:b9:62:10:9b:d8:
07:ad:d6:96:d4:66:d5:cc:b8:ee:16:7e:8d:3f:fe:dd:18:c0:
e4:1e:10:93:a6:ff:f1:f2:67:09:8e:06:1f:76:c3:8a:81:59:
d9:f6:5d:dd:b4:21:9a:bf:cd:e4:a4:f6:9e:b3:e0:5d:91:ff:
9a:7c:e2:00:6b:e0:04:0a:9f:c5:97:86:6f:c3:e5:83:e6:ed:
41:1e:b3:77:38:c5:7e:f7:2f:f0:26:7a:ae:ce:07:a0:f7:22:
90:cd:18:45:94:2f:ff:af:ee:34:aa:75:1d:62:21:89:2e:f4:
3b:97:e7:f3:c5:a8:fe:e0:bb:0f:c9:8e:07:84:1e:18:08:50:
ff:94:37:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:32:29 2026 by rpki-client