
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/HN4SRMu7llQubIsJo9rBwbRDaNc.mft
File: HN4SRMu7llQubIsJo9rBwbRDaNc.mft (raw, json)
Hash identifier: +YtGL9P1G573OSO8+akb9+PZj81ywtBByBZ5VoM7GnE=
Subject key identifier: 79:54:8D:43:7A:51:E7:18:BE:58:E5:AC:E1:44:C2:91:54:39:E9:57
Authority key identifier: 1C:DE:12:44:CB:BB:96:54:2E:6C:8B:09:A3:DA:C1:C1:B4:43:68:D7
Certificate issuer: /CN=A918A498/serialNumber=1CDE1244CBBB96542E6C8B09A3DAC1C1B44368D7
Certificate serial: 0108
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HN4SRMu7llQubIsJo9rBwbRDaNc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/HN4SRMu7llQubIsJo9rBwbRDaNc.mft
Manifest number: 0104
Signing time: Thu 23 Jul 2026 07:49:48 +0000
Manifest this update: Thu 23 Jul 2026 07:49:47 +0000
Manifest next update: Thu 30 Jul 2026 07:49:47 +0000
Files and hashes: 1: HN4SRMu7llQubIsJo9rBwbRDaNc.crl (hash: WEdaxL6pjdajLKY4FdjuCa17/8s9+pfRf7oPhmt52Ps=)
2: 62C86698F80A11EFA400AC2FC4F9AE02.roa (hash: U4LLMJ0m7hitnKHAojnOcr6u6PFK2WR9WUoRdlPrdFk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/HN4SRMu7llQubIsJo9rBwbRDaNc.crl
rsync://rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/HN4SRMu7llQubIsJo9rBwbRDaNc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HN4SRMu7llQubIsJo9rBwbRDaNc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:49:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 264 (0x108)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A498, serialNumber=1CDE1244CBBB96542E6C8B09A3DAC1C1B44368D7
Validity
Not Before: Jul 23 07:49:47 2026 GMT
Not After : Jul 30 07:49:47 2026 GMT
Subject: CN=6a61c79c-dd2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:db:42:a6:17:72:df:df:b6:94:14:4c:c3:3b:
9f:99:c2:c8:66:9c:8b:4d:dd:1e:e8:b7:11:e4:71:
70:77:d5:9e:7f:cc:ef:bf:c0:a2:21:d4:47:6a:cd:
52:f8:ef:a7:6a:bc:d5:f8:da:1a:c1:9d:a1:5d:64:
93:c8:5e:77:f6:2b:65:42:d9:3e:b2:fe:3e:44:54:
1d:69:6e:77:7f:c7:f1:d5:ab:f7:a8:06:ba:38:51:
a9:c8:c3:05:ef:c7:7f:47:43:be:c1:e7:97:11:f9:
a6:92:66:17:fe:98:52:0f:15:69:58:3d:d7:a3:09:
85:20:36:e2:ab:9a:8a:db:46:6c:3e:11:f5:88:ee:
57:c7:54:e4:c1:24:f9:bb:e1:30:f4:d9:a9:fc:94:
ba:28:58:79:1a:1e:ef:be:a8:1e:2a:36:4a:09:15:
94:c0:13:f9:e2:bb:52:c9:34:5d:69:89:35:3a:b9:
b0:5c:e8:59:69:0d:af:c5:ce:a2:8d:c9:9b:58:04:
8f:44:f5:91:e2:4c:40:8c:4f:28:f6:7a:55:b4:c2:
cc:00:65:0d:15:d1:ba:12:90:b5:77:48:bd:4f:db:
b6:97:b6:2d:8b:41:ee:fc:6e:d4:60:85:c9:cc:52:
02:7a:b7:b3:c7:e0:bf:d6:77:fa:67:64:f6:e4:cb:
37:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:54:8D:43:7A:51:E7:18:BE:58:E5:AC:E1:44:C2:91:54:39:E9:57
X509v3 Authority Key Identifier:
keyid:1C:DE:12:44:CB:BB:96:54:2E:6C:8B:09:A3:DA:C1:C1:B4:43:68:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/HN4SRMu7llQubIsJo9rBwbRDaNc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HN4SRMu7llQubIsJo9rBwbRDaNc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/HN4SRMu7llQubIsJo9rBwbRDaNc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:44:d0:30:1c:3e:eb:58:df:20:2c:27:a9:2c:e2:fe:75:ff:
6b:9f:41:70:aa:66:8f:78:22:2d:d3:06:e7:80:c4:fc:38:4e:
41:4b:24:f3:f7:b2:65:7b:95:fc:1d:59:ea:7e:ce:3f:a3:2a:
34:b7:43:bf:c7:24:ff:0f:83:eb:8c:a6:fc:68:ea:be:ac:67:
6c:cb:68:4d:52:4c:9f:4e:66:fa:4f:0c:ca:86:ac:a3:2c:74:
4d:d0:aa:58:9e:1a:c3:b9:17:26:f9:d0:3d:57:7d:5f:fd:2b:
18:db:e7:d9:82:c8:55:ea:28:e2:4d:d6:ec:bf:7d:29:5a:6c:
c0:80:d4:55:90:a8:13:d1:bd:04:c5:59:39:43:3d:23:37:c2:
e9:d2:b6:4b:a2:44:d2:94:e9:23:2c:24:60:40:c7:b4:94:17:
81:1c:33:b8:4d:c5:d3:7b:b8:da:b3:64:98:c3:b2:d9:6f:e9:
38:81:c2:ca:4c:6f:d8:4f:fe:95:79:cb:60:59:27:84:38:cc:
94:64:97:8f:d7:c9:6d:df:c5:63:96:81:1a:04:e4:fb:79:89:
97:e9:2d:66:d9:ed:4f:19:ec:f7:1b:ed:d1:57:05:d0:8f:a3:
81:58:ac:66:d4:08:96:8b:62:c1:1c:a2:28:60:42:86:85:de:
e7:a6:46:d8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEE0OTgxMTAvBgNVBAUTKDFDREUxMjQ0Q0JCQjk2NTQyRTZDOEIwOUEzREFDMUMx
QjQ0MzY4RDcwHhcNMjYwNzIzMDc0OTQ3WhcNMjYwNzMwMDc0OTQ3WjAYMRYwFAYD
VQQDEw02YTYxYzc5Yy1kZDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoNtCphdy39+2lBRMwzufmcLIZpyLTd0e6LcR5HFwd9Wef8zvv8CiIdRHas1S
+O+narzV+NoawZ2hXWSTyF539itlQtk+sv4+RFQdaW53f8fx1av3qAa6OFGpyMMF
78d/R0O+weeXEfmmkmYX/phSDxVpWD3XowmFIDbiq5qK20ZsPhH1iO5Xx1TkwST5
u+Ew9Nmp/JS6KFh5Gh7vvqgeKjZKCRWUwBP54rtSyTRdaYk1OrmwXOhZaQ2vxc6i
jcmbWASPRPWR4kxAjE8o9npVtMLMAGUNFdG6EpC1d0i9T9u2l7Yti0Hu/G7UYIXJ
zFICerezx+C/1nf6Z2T25Ms3MwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHlUjUN6
UecYvljlrOFEwpFUOelXMB8GA1UdIwQYMBaAFBzeEkTLu5ZULmyLCaPawcG0Q2jX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTQ5OC9EMkRFRDM0NkY4
MDkxMUVGQTUyODFCMTZDNEY5QUUwMi9ITjRTUk11N2xsUXViSXNKbzlyQndiUkRh
TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hONFNSTXU3bGxRdWJJc0pvOXJCd2JSRGFOYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QTQ5OC9EMkRFRDM0NkY4MDkxMUVGQTUyODFCMTZDNEY5QUUwMi9ITjRTUk11N2xs
UXViSXNKbzlyQndiUkRhTmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMETQMBw+61jfICwnqSzi/nX/a59BcKpmj3giLdMG54DE/DhOQUsk8/eyZXuV
/B1Z6n7OP6MqNLdDv8ck/w+D64ym/GjqvqxnbMtoTVJMn05m+k8Myoasoyx0TdCq
WJ4aw7kXJvnQPVd9X/0rGNvn2YLIVeoo4k3W7L99KVpswIDUVZCoE9G9BMVZOUM9
IzfC6dK2S6JE0pTpIywkYEDHtJQXgRwzuE3F03u42rNkmMOy2W/pOIHCykxv2E/+
lXnLYFknhDjMlGSXj9fJbd/FY5aBGgTk+3mJl+ktZtntTxns9xvt0VcF0I+jgVis
ZtQIlotiwRyiKGBChoXe56ZG2A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:34:59 2026 by rpki-client