
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.mft
File: b5HHak90ZkEA3Y3r0XhRQuE3gC0.mft (raw, json)
Hash identifier: U1DZF0RMYBYiShB74obuWWDye/dG+GEqZTgpesd90WQ=
Subject key identifier: 54:28:E2:67:7B:AD:A8:63:D7:5F:8C:EC:56:47:3D:A2:65:94:EF:06
Authority key identifier: 6F:91:C7:6A:4F:74:66:41:00:DD:8D:EB:D1:78:51:42:E1:37:80:2D
Certificate issuer: /CN=A918D2CA/serialNumber=6F91C76A4F74664100DD8DEBD1785142E137802D
Certificate serial: E7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b5HHak90ZkEA3Y3r0XhRQuE3gC0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.mft
Manifest number: E2
Signing time: Thu 23 Jul 2026 08:21:04 +0000
Manifest this update: Thu 23 Jul 2026 08:21:04 +0000
Manifest next update: Thu 30 Jul 2026 08:21:04 +0000
Files and hashes: 1: b5HHak90ZkEA3Y3r0XhRQuE3gC0.crl (hash: 1Y6TRyFvnoPakAg4JrjK75K4pfKSfpJ8E/HSgyClXmc=)
2: 8C9E2B18354711F09FCEEE25C4F9AE02.roa (hash: vLHp4ObDO1IK1mUqYi6ciOieF4o9Rbhwa3XZX1qH6lI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.crl
rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b5HHak90ZkEA3Y3r0XhRQuE3gC0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:21:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 231 (0xe7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D2CA, serialNumber=6F91C76A4F74664100DD8DEBD1785142E137802D
Validity
Not Before: Jul 23 08:21:04 2026 GMT
Not After : Jul 30 08:21:04 2026 GMT
Subject: CN=6a61cef0-42df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f2:ea:11:5c:ee:b0:14:7f:71:67:74:2b:8c:
be:f9:4d:66:65:1c:3e:f0:a7:42:8e:34:48:a4:8a:
e9:b6:9d:49:07:de:e7:e0:2f:f7:ce:78:f1:32:66:
2d:5f:e8:cc:77:a6:97:4f:cd:d0:ad:64:50:47:40:
7b:bb:40:1f:3c:f2:f4:e1:1c:8f:f3:56:ad:92:7a:
ff:c6:36:78:90:54:fe:04:86:9b:2e:34:d0:d8:e0:
39:34:dc:dd:06:7f:d7:57:f0:3e:4d:2b:ff:20:32:
39:fd:83:8a:43:11:2d:ed:55:5a:33:0c:fc:e7:25:
94:de:5a:5b:33:3a:fd:6e:df:bb:fd:99:ca:42:65:
86:92:a0:fa:2f:a3:8d:a4:c3:fb:42:02:95:d0:e7:
5a:8c:6c:1c:55:a4:8e:96:76:fc:c3:ea:38:c3:69:
1b:37:6f:76:cb:cd:57:48:11:ae:f0:6a:f7:c4:c7:
fa:0b:c1:89:1a:f8:11:6e:de:c6:aa:f7:ed:f7:67:
14:cb:60:35:18:b0:70:74:13:be:02:ea:12:82:38:
63:da:26:1f:8d:cc:5c:02:62:dd:2e:72:a9:47:58:
b2:74:d1:05:f3:cc:32:27:34:d8:81:38:c7:4a:b6:
18:06:e9:42:1f:26:4d:c2:36:87:c9:86:fc:61:be:
23:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:28:E2:67:7B:AD:A8:63:D7:5F:8C:EC:56:47:3D:A2:65:94:EF:06
X509v3 Authority Key Identifier:
keyid:6F:91:C7:6A:4F:74:66:41:00:DD:8D:EB:D1:78:51:42:E1:37:80:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b5HHak90ZkEA3Y3r0XhRQuE3gC0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:be:48:ca:47:02:d4:de:2c:bd:90:88:9c:3d:45:26:ec:7f:
4e:df:09:7c:dc:f9:e7:af:aa:cd:51:1b:35:67:d9:c5:25:9a:
c6:83:0c:f3:fa:ca:66:86:55:78:ae:43:c0:ea:49:bf:02:38:
cd:28:b5:14:39:b6:58:89:75:ae:5a:b8:58:98:57:fb:a3:5c:
41:b0:d1:bd:ae:e3:94:46:60:ec:67:56:60:08:02:8d:ca:21:
59:34:dc:5b:25:73:4e:51:98:de:09:ef:90:2b:1d:55:4c:b5:
df:a8:5c:1e:3c:5a:c7:35:23:51:68:1a:e5:ad:5c:67:b2:89:
a6:e1:a2:c1:38:d6:3d:e5:86:29:d6:f7:dd:57:d9:81:19:ae:
4d:b8:c3:bc:db:a9:d3:e1:e4:77:db:24:48:7d:d2:0c:39:5c:
c3:1a:52:c5:9f:49:09:47:21:5f:68:8a:96:3b:5b:7c:4d:ee:
6b:50:f6:87:95:2c:7a:e2:3c:9e:f6:a9:03:f2:9f:27:0a:28:
c0:e7:b0:fb:92:a0:14:70:22:db:4a:ed:42:1f:d4:4b:71:f4:
4e:8f:39:85:ee:0f:a2:10:c9:9e:5b:14:37:88:b0:ea:92:8f:
d0:c4:70:e0:73:0b:d7:09:50:24:a6:95:70:11:f9:26:c0:e1:
72:2e:b5:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:50:10 2026 by rpki-client