
$ rpki-client -vvf rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.mft
File: RwHPLSggCdbG6vRVb7DcGw1VV-8.mft (raw, json)
Hash identifier: bd1IAYc5yLEppTXpclLj7sweQ9M746+T0ZOGxQTqMfE=
Subject key identifier: 7B:4E:08:C7:43:2E:1A:10:EF:56:A0:09:18:36:CC:88:1F:89:04:71
Authority key identifier: 47:01:CF:2D:28:20:09:D6:C6:EA:F4:55:6F:B0:DC:1B:0D:55:57:EF
Certificate issuer: /CN=A918DAC5/serialNumber=4701CF2D282009D6C6EAF4556FB0DC1B0D5557EF
Certificate serial: 0149
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwHPLSggCdbG6vRVb7DcGw1VV-8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.mft
Manifest number: 013E
Signing time: Thu 23 Jul 2026 07:09:46 +0000
Manifest this update: Thu 23 Jul 2026 07:09:46 +0000
Manifest next update: Thu 30 Jul 2026 07:09:46 +0000
Files and hashes: 1: RwHPLSggCdbG6vRVb7DcGw1VV-8.crl (hash: 0kQWoIJ4mrkOyoyMtuoO3T8lJrEnPrDe8Vkr1FAB6qE=)
2: 2EA5BC6EE71811F0B23E26476E6F56BC.roa (hash: lCmAQOrZ2kPo2z1WrTRR5Ga4bExHmOCUErDXwba52rk=)
3: ECB98052057511F1AF941BA6343D8C67.roa (hash: 29KxdPQG9ynzrMx8tx0q3SkLdwBifjAYKiCjhv/9CKE=)
4: D2D1A4B45BD711F089C6844AC4F9AE02.roa (hash: 7/PYR2UzhNdyaVe+j4NKzC7NkrhIUWRjvvNuf/ZKIrg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.crl
rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwHPLSggCdbG6vRVb7DcGw1VV-8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:09:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 329 (0x149)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918DAC5, serialNumber=4701CF2D282009D6C6EAF4556FB0DC1B0D5557EF
Validity
Not Before: Jul 23 07:09:46 2026 GMT
Not After : Jul 30 07:09:46 2026 GMT
Subject: CN=6a61be3a-b173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:21:83:56:b4:ec:f7:47:46:9c:bc:c5:e5:85:
c2:34:fc:07:e9:2c:a6:54:1c:31:c1:d0:95:dd:fb:
23:af:9c:c0:eb:71:54:e6:d1:cc:b9:77:8d:56:24:
13:ff:8c:d5:17:82:33:b2:34:11:a2:4b:8b:2e:6b:
07:97:d1:37:89:4d:b2:da:77:e0:b7:4b:82:fa:95:
64:1a:cf:4e:d8:e8:e1:0e:10:5d:56:3d:a5:a9:fe:
b8:2b:2c:2d:9a:8a:6d:74:0a:58:f3:0e:56:78:0d:
ed:34:52:d7:b8:94:c4:33:40:eb:1c:88:29:6c:c4:
90:d8:e1:9d:0f:1b:ec:d1:7c:91:80:02:d7:f2:5c:
66:ac:b7:10:fc:dd:07:ca:fa:60:94:c4:a4:00:a7:
3f:12:ba:29:b8:11:fb:a0:cc:6b:fa:78:84:3b:af:
3b:e9:d6:99:41:89:b4:2c:b3:9a:d9:56:02:32:8a:
34:56:c4:ef:3e:79:53:ab:ed:ce:22:b3:29:91:bf:
b3:53:c1:70:60:3b:76:24:ac:74:68:df:dc:cc:89:
83:99:3d:12:48:37:54:77:4f:9b:da:fc:11:5d:be:
72:28:d7:74:b0:42:75:51:75:a2:3f:92:da:93:89:
11:8f:95:f2:83:6c:89:3f:72:d2:56:40:34:0e:a3:
8f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:4E:08:C7:43:2E:1A:10:EF:56:A0:09:18:36:CC:88:1F:89:04:71
X509v3 Authority Key Identifier:
keyid:47:01:CF:2D:28:20:09:D6:C6:EA:F4:55:6F:B0:DC:1B:0D:55:57:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwHPLSggCdbG6vRVb7DcGw1VV-8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:af:22:b2:5f:ee:46:b9:eb:21:a5:fc:db:02:35:56:ae:24:
11:b0:39:30:91:3c:3c:30:8e:20:2f:7b:fb:78:17:02:2d:13:
61:e5:1b:2e:27:31:70:40:13:a8:16:69:ef:ff:96:d2:18:c3:
9b:4c:54:da:eb:21:0d:72:88:af:db:6e:c5:0a:49:51:ea:27:
39:26:30:b8:bb:85:6a:f0:16:ad:ca:a8:c0:1a:38:5f:c6:9e:
18:3d:69:7a:58:1b:44:a7:38:24:fa:6a:e2:cb:b5:0b:38:bc:
88:66:61:1c:5f:38:80:01:c3:6c:f0:ea:28:3b:39:13:81:1d:
36:a3:ee:5b:44:d4:eb:0c:2a:f0:51:e7:9c:e5:ad:6e:26:b2:
4d:5a:6c:ef:ab:6d:75:ae:2e:c1:2a:cc:b4:23:2f:7d:30:f2:
db:fd:4e:f1:04:ac:ac:16:a9:56:a4:97:d3:d8:4b:d8:13:df:
cc:c0:c1:ff:70:0a:a5:c9:02:f8:f8:66:3a:86:38:83:53:30:
1e:7d:8a:77:4d:68:8d:b2:d5:cc:e6:76:40:ed:1e:f2:bf:9b:
38:b8:e5:0d:93:5e:da:68:7d:ba:7e:d5:d4:4d:4d:f7:85:39:
99:a8:28:a5:93:c9:3d:d2:de:6a:4d:92:3a:da:98:15:25:2a:
bd:97:d6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:44:41 2026 by rpki-client