
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft
File: HsQsG2nhb183xz2Bv5-rH0ukIyk.mft (raw, json)
Hash identifier: J4waDalTqPGNAaMUVQFNvF4fRVo2hg1FhEeOPKMMlrE=
Subject key identifier: 48:41:78:E8:77:61:A7:D5:22:2F:30:61:B9:E5:FD:D3:D1:38:90:6D
Authority key identifier: 1E:C4:2C:1B:69:E1:6F:5F:37:C7:3D:81:BF:9F:AB:1F:4B:A4:23:29
Certificate issuer: /CN=A918C661/serialNumber=1EC42C1B69E16F5F37C73D81BF9FAB1F4BA42329
Certificate serial: 0B73
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft
Manifest number: 0AFA
Signing time: Wed 22 Jul 2026 19:55:30 +0000
Manifest this update: Wed 22 Jul 2026 19:55:30 +0000
Manifest next update: Wed 29 Jul 2026 19:55:30 +0000
Files and hashes: 1: HsQsG2nhb183xz2Bv5-rH0ukIyk.crl (hash: ClLBQ4kviXMNYVkLvrbrbGsDkf055TPP85ZBlAKdPqY=)
2: D9AFDBC2400111EFBB30C475C4F9AE02.roa (hash: HrZGFhV7ij/MniPPdnAUj9aXz0QqgUpU7Kf1yG1SMQ0=)
3: A81364AC4B0611EF91534014C4F9AE02.roa (hash: 7nc0FQIuWt5iAf4cd70KYSyea0Ow8OKJ3jyzk3RRDos=)
4: A7A72BF24B0611EF91534014C4F9AE02.roa (hash: RMfV3v+YMKrEsv4J/X9BeNndnRE9fJpMKXXZWqx+jrk=)
5: D42F0D06B51611EEADC7924BC4F9AE02.roa (hash: kqyC7MEnLT1Hy4mgRDx5xjtCxGf3dNpztnPLrCKEqKY=)
6: FC2C48DA1D1711F193C53B4D0E3D8C67.roa (hash: t5GO0KVpRO0vMtyXCfhbCMuVtePS8oymCsUiik5fkqM=)
7: B8D18508EDE011EF88407251C4F9AE02.roa (hash: NdZ92kK8LP+A4ucoxj2Mn/YHm/Cj8wuqKbvHDIwNWi0=)
8: 6C68485C5A1D11EFA9989052C4F9AE02.roa (hash: gKdZCMFVp9SI3rESOVHwnsGLBaaJOZqgNabpfZNzfAY=)
9: 73DC26744B0611EF8698EB13C4F9AE02.roa (hash: QbjBpA8yO+Th7aJxPrDQfS3hz6qzzWk2P0LycOFlE0A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.crl
rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:55:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2931 (0xb73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C661, serialNumber=1EC42C1B69E16F5F37C73D81BF9FAB1F4BA42329
Validity
Not Before: Jul 22 19:55:30 2026 GMT
Not After : Jul 29 19:55:30 2026 GMT
Subject: CN=6a612032-93e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8e:84:f0:5d:76:b4:d6:4f:61:e9:9b:72:f8:
58:99:8a:68:54:8a:75:3d:cf:98:91:b6:12:ad:19:
41:27:4e:75:06:21:ae:fa:f4:03:da:4d:bf:41:3f:
0f:77:31:e3:d8:ba:c2:25:89:30:35:de:19:7e:2b:
a4:67:70:c6:f0:01:3a:50:94:73:10:54:11:c4:93:
4f:1e:76:b9:d6:62:91:e6:24:41:d3:d2:ae:41:22:
54:be:a8:6b:a2:ff:86:63:85:e5:49:78:4f:1d:08:
88:7e:c6:00:c8:a9:b8:30:79:a3:02:4d:9b:cc:8f:
5a:80:75:eb:ab:a9:2d:60:4d:e6:ad:ec:f7:dc:04:
30:31:2d:37:f6:68:96:92:2a:a4:69:1e:8a:7e:a1:
64:13:73:c8:10:a9:1d:a0:08:06:08:91:00:f4:c9:
fc:1c:d0:48:23:5b:e5:ce:cf:88:45:19:03:28:dd:
60:15:7c:88:30:c1:6a:ef:fc:f3:a8:48:57:4a:0b:
ba:05:96:fe:34:d3:fd:d4:08:7f:c6:4e:17:ac:4a:
9f:47:12:04:c3:56:cd:b5:b0:05:ad:9c:fe:1f:ec:
4b:f2:ad:35:e9:38:14:f7:7a:68:aa:6f:3a:2c:e9:
ca:b8:5c:9b:85:79:61:c5:a4:32:65:ef:bb:bc:d9:
0a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:41:78:E8:77:61:A7:D5:22:2F:30:61:B9:E5:FD:D3:D1:38:90:6D
X509v3 Authority Key Identifier:
keyid:1E:C4:2C:1B:69:E1:6F:5F:37:C7:3D:81:BF:9F:AB:1F:4B:A4:23:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:6d:e8:c5:2b:24:23:c6:82:5d:8e:1c:4c:6d:36:da:79:be:
df:6d:b5:41:77:d1:45:b5:a8:e7:c3:75:a9:fa:83:30:e4:6c:
d4:e1:bb:e8:51:89:02:a5:4e:ee:1f:68:c2:c8:b1:0d:7e:0e:
93:b2:f1:05:e8:a0:a3:13:b6:80:76:58:f8:7d:31:ee:40:4b:
4c:ee:dd:41:51:7a:53:03:9a:98:4a:69:11:96:45:da:00:b8:
c6:57:f7:f5:35:f3:d9:f6:12:31:8c:ef:28:21:22:88:ec:8e:
0e:47:f9:c3:50:40:8d:71:5e:19:14:63:f0:e4:17:0d:cc:21:
6e:80:11:b8:23:2b:20:87:82:96:3c:1d:6d:60:1b:68:67:06:
50:46:99:c4:63:91:7a:6e:ba:a5:a9:38:a0:4c:af:ed:76:8c:
f9:00:6c:9e:95:a7:53:24:11:6f:a6:77:cd:0a:81:38:fe:87:
ee:33:c5:66:07:81:0c:c2:4b:69:3e:42:1d:c0:58:05:a4:8f:
73:4f:9c:99:e4:dc:6b:be:70:c3:16:b3:05:97:45:1b:4f:47:
9d:64:2c:e5:60:b8:d8:ba:f7:e5:86:0f:df:8f:80:32:a2:d9:
81:41:ec:eb:fd:77:3d:09:23:b2:35:69:6b:ba:1a:25:f1:f2:
fa:d8:23:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:53:50 2026 by rpki-client