
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C876/E4C0C416109011F180BBBFFF333D8C67/rHwA15xPocI9OeJl5UPWJa-xcZE.mft
File: rHwA15xPocI9OeJl5UPWJa-xcZE.mft (raw, json)
Hash identifier: IFq5V+8Pmf6gOyl2eD2ZXqgI6U4R93oVKry6k1KfXHw=
Subject key identifier: B6:1A:A2:F7:F8:A0:73:AA:23:3F:92:24:82:7F:38:DE:2C:6E:10:BF
Authority key identifier: AC:7C:00:D7:9C:4F:A1:C2:3D:39:E2:65:E5:43:D6:25:AF:B1:71:91
Certificate issuer: /CN=A917C876/serialNumber=AC7C00D79C4FA1C23D39E265E543D625AFB17191
Certificate serial: 54
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHwA15xPocI9OeJl5UPWJa-xcZE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C876/E4C0C416109011F180BBBFFF333D8C67/rHwA15xPocI9OeJl5UPWJa-xcZE.mft
Manifest number: 50
Signing time: Thu 23 Jul 2026 10:17:50 +0000
Manifest this update: Thu 23 Jul 2026 10:17:49 +0000
Manifest next update: Thu 30 Jul 2026 10:17:49 +0000
Files and hashes: 1: rHwA15xPocI9OeJl5UPWJa-xcZE.crl (hash: BIFnpkl60lSG2whFTlsXvk83l2NNQaj14/7gjv/oRxA=)
2: AA5A77DE109211F1ADAE0457353D8C67.roa (hash: jc5OClYgMksYJNVDPr4GTz5NxRC+DAHLWpkP7eRJs/c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C876/E4C0C416109011F180BBBFFF333D8C67/rHwA15xPocI9OeJl5UPWJa-xcZE.crl
rsync://rpki.apnic.net/member_repository/A917C876/E4C0C416109011F180BBBFFF333D8C67/rHwA15xPocI9OeJl5UPWJa-xcZE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHwA15xPocI9OeJl5UPWJa-xcZE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:17:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84 (0x54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C876, serialNumber=AC7C00D79C4FA1C23D39E265E543D625AFB17191
Validity
Not Before: Jul 23 10:17:49 2026 GMT
Not After : Jul 30 10:17:49 2026 GMT
Subject: CN=6a61ea4e-7800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5e:7e:87:31:03:5f:e4:e7:61:84:19:45:a5:
5c:8b:58:98:7b:7f:01:14:cf:8a:b0:e7:16:2a:fe:
a7:c8:09:d3:0d:57:a2:2e:e8:3f:9f:bc:34:b3:6b:
39:93:7c:bc:96:b7:36:c6:13:8a:e1:a6:f1:44:43:
c9:83:c0:8b:cb:b4:fd:f1:f8:6a:b8:1c:e9:3f:e3:
82:5e:5b:30:80:13:71:47:c9:a9:3e:93:62:43:06:
2d:f0:75:e3:47:19:46:15:bd:43:a8:99:f7:50:5c:
33:8b:41:1e:26:e6:b4:db:e0:13:05:8d:5c:04:67:
13:24:f3:72:ea:3f:3e:5e:8c:a6:07:aa:19:18:e7:
e0:74:04:e6:d8:3e:cd:af:2c:d2:3e:9e:c0:07:67:
8a:5a:b2:f3:b2:0d:fa:ba:e6:1e:b0:99:a4:f4:5b:
85:d3:ac:b5:58:e5:bc:b7:dd:d5:e5:cb:ee:82:ac:
31:cf:59:80:86:2e:54:da:b8:f7:27:00:9d:8f:38:
6f:7c:46:11:6b:8b:e0:e7:ac:98:05:3e:0c:4e:4d:
13:1d:57:17:79:85:ca:16:2c:9b:e0:a4:08:9c:2b:
a5:7c:4b:20:73:d7:55:9b:21:b0:42:09:c8:3d:11:
5b:cf:a1:fa:76:20:8b:59:b5:6b:5d:54:9d:be:31:
8a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:1A:A2:F7:F8:A0:73:AA:23:3F:92:24:82:7F:38:DE:2C:6E:10:BF
X509v3 Authority Key Identifier:
keyid:AC:7C:00:D7:9C:4F:A1:C2:3D:39:E2:65:E5:43:D6:25:AF:B1:71:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C876/E4C0C416109011F180BBBFFF333D8C67/rHwA15xPocI9OeJl5UPWJa-xcZE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHwA15xPocI9OeJl5UPWJa-xcZE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C876/E4C0C416109011F180BBBFFF333D8C67/rHwA15xPocI9OeJl5UPWJa-xcZE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:47:5e:2e:b0:81:e4:96:4e:e3:44:ae:59:0d:c2:7e:21:63:
05:34:be:25:3d:72:46:c8:ab:c3:b3:bd:54:67:e2:bd:e2:31:
f2:ce:07:29:ea:24:ec:e5:e6:a3:54:25:e5:92:31:3e:14:04:
fa:60:8b:c8:18:7e:4d:97:58:f1:56:a5:fc:2d:fb:15:b4:f0:
23:b0:a1:41:46:8c:dd:bc:c1:0b:d6:0f:59:58:71:95:d9:2b:
40:34:87:78:1a:4a:5a:56:a2:ab:c9:6d:53:48:cb:eb:21:5c:
b3:35:94:52:5b:11:fb:f8:32:f3:4a:c7:37:90:e5:dc:ce:86:
79:67:78:dd:5d:2a:6d:95:fb:6e:79:4c:30:06:3e:07:41:38:
21:b2:8d:a6:fd:36:28:1b:a0:f3:05:f9:9f:39:6e:2e:ca:04:
89:34:69:0f:29:a1:31:db:f3:c6:a0:43:fa:d6:56:10:04:57:
52:02:a2:47:c6:e6:26:e9:29:15:f9:83:a4:4d:51:71:34:8d:
3c:a5:11:e0:06:92:55:ca:a3:d3:95:1b:87:b7:33:44:11:19:
a7:89:3e:6c:17:be:57:9f:f9:f7:2e:55:ec:f7:68:27:1c:d6:
a7:f6:d6:3f:37:3f:a6:58:1f:34:72:ff:08:3d:ac:4c:7a:03:
9e:55:02:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:03:17 2026 by rpki-client