
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.mft
File: HhI4RWNx50SJRiLpisHuVbQUXhA.mft (raw, json)
Hash identifier: 1QeQFferXPIdYuHHr0ZOBe0yOaIxDlUfkVoB6hheuT4=
Subject key identifier: 78:3F:C9:0B:DF:B4:A9:99:60:FF:C4:91:61:6E:99:E2:E3:51:0D:09
Authority key identifier: 1E:12:38:45:63:71:E7:44:89:46:22:E9:8A:C1:EE:55:B4:14:5E:10
Certificate issuer: /CN=A917E678/serialNumber=1E1238456371E744894622E98AC1EE55B4145E10
Certificate serial: 166F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HhI4RWNx50SJRiLpisHuVbQUXhA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.mft
Manifest number: 160B
Signing time: Fri 24 Jul 2026 16:57:34 +0000
Manifest this update: Fri 24 Jul 2026 16:57:34 +0000
Manifest next update: Fri 31 Jul 2026 16:57:34 +0000
Files and hashes: 1: HhI4RWNx50SJRiLpisHuVbQUXhA.crl (hash: g9MnFyR+x+6+1ObjoIPdKB4dyAGTEocblMTKEt6vToU=)
2: C9203DF43D5E11F19F1D0B4EAB833773.roa (hash: XDwfROgd1ZtjfdIwOFfoGM4YTt8Y2gmNeYFWy0g2/3I=)
3: 0BFFC86E3FC211F18966A53AC7833773.roa (hash: W+YOe6hixH3mn1KveOHweplDujCY7TsXxGCoVqjHzBw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.crl
rsync://rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HhI4RWNx50SJRiLpisHuVbQUXhA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 15:28:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5743 (0x166f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E678, serialNumber=1E1238456371E744894622E98AC1EE55B4145E10
Validity
Not Before: Jul 24 16:57:34 2026 GMT
Not After : Jul 31 16:57:34 2026 GMT
Subject: CN=6a63997e-3dc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c0:8b:cd:98:d8:f7:90:74:4d:6a:f5:42:a8:
84:60:98:c9:9d:eb:a0:81:2f:5e:27:2d:12:89:9d:
a6:87:b9:2f:fb:a7:71:8a:2c:30:91:26:3f:4d:b2:
16:d8:8e:e5:4e:e0:48:a9:dd:20:3f:1d:9b:11:f8:
40:26:4d:2e:73:e2:47:d1:76:3d:ee:e3:b7:be:b8:
0a:49:f3:5b:b1:fc:4f:3e:0c:2a:72:12:bb:11:33:
b7:93:f5:6e:34:4c:e6:19:ee:1c:02:8c:54:3b:26:
60:ec:d0:20:dc:e3:13:eb:0e:bc:4d:d9:fe:70:45:
d9:61:9b:59:8d:e4:2d:56:dd:4a:00:22:2f:12:0a:
58:69:0a:9e:7f:ea:4c:cd:a1:b6:16:eb:96:b2:32:
cc:b0:b6:47:a8:68:31:4b:7f:dc:97:40:5a:06:72:
e1:93:ff:a9:72:62:60:d9:37:60:26:68:76:21:e4:
00:32:7a:f1:c9:47:88:33:0a:16:1d:4f:df:a6:87:
0e:0e:ec:5f:f5:47:62:96:41:a3:0b:61:1f:36:a7:
d7:5c:5b:43:9a:fd:8b:fe:16:69:6a:db:ad:7f:00:
37:94:d3:79:c2:e5:d8:34:69:9d:b9:c5:8d:f1:87:
9c:36:51:82:f7:b6:6b:b3:cf:84:3b:ae:a2:ad:65:
7c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:3F:C9:0B:DF:B4:A9:99:60:FF:C4:91:61:6E:99:E2:E3:51:0D:09
X509v3 Authority Key Identifier:
keyid:1E:12:38:45:63:71:E7:44:89:46:22:E9:8A:C1:EE:55:B4:14:5E:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HhI4RWNx50SJRiLpisHuVbQUXhA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:37:39:38:01:e1:53:52:24:10:3d:f5:9b:0d:bd:71:47:29:
f5:fd:6e:cd:46:9c:15:d1:0c:54:36:a9:12:b6:d5:b1:6e:12:
fa:e1:23:f5:0f:cf:86:ed:88:c2:ec:5b:7f:f9:fe:17:46:e8:
35:7e:96:c3:ac:fe:63:fe:fb:c2:0e:63:8e:14:8c:1c:e0:7c:
13:e5:f2:02:ed:a0:1f:7a:26:ca:a0:b6:a4:4c:a6:e3:16:0d:
e0:14:24:3d:73:79:60:45:f3:5b:c5:a2:ad:9e:65:36:48:a2:
15:d2:22:1a:20:96:d6:6f:5f:84:f3:38:2f:cc:68:71:bf:0b:
b3:f8:01:d3:6b:27:dc:e8:5d:f2:60:34:dd:ee:32:78:8c:65:
3e:8f:75:de:ea:49:e3:87:a1:1f:8a:ce:41:63:3e:15:56:bf:
5f:ed:a6:0c:de:db:e0:f6:e6:3a:47:e0:f5:03:da:7a:fc:ba:
45:77:24:2a:a1:cd:3a:76:f2:85:c4:ab:2e:9b:bf:ad:75:8f:
2c:a6:9b:f0:fc:01:45:c3:6f:47:5e:ee:7e:13:99:f4:5e:2d:
84:57:22:50:83:f5:65:5e:85:ca:af:a7:82:cf:d1:74:03:58:
15:90:c6:6d:df:8e:ca:89:0c:a6:ef:36:bf:de:67:c0:d9:51:
ac:09:24:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:08:36 2026 by rpki-client