
$ rpki-client -vvf rpki.apnic.net/member_repository/A91924F8/71FD1338641111F18113D0D69B47A888/HzX0DDZLiLCJrhL97baBXD8RqQY.mft
File: HzX0DDZLiLCJrhL97baBXD8RqQY.mft (raw, json)
Hash identifier: gF+498mnnWEGzATUSFDfpP3qZGpcTTdXiwHRoMOm2cM=
Subject key identifier: BB:56:9A:E6:D0:36:08:83:36:8C:FF:24:8C:AB:76:D0:F2:4E:92:F0
Authority key identifier: 1F:35:F4:0C:36:4B:88:B0:89:AE:12:FD:ED:B6:81:5C:3F:11:A9:06
Certificate issuer: /CN=A91924F8/serialNumber=1F35F40C364B88B089AE12FDEDB6815C3F11A906
Certificate serial: 19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HzX0DDZLiLCJrhL97baBXD8RqQY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91924F8/71FD1338641111F18113D0D69B47A888/HzX0DDZLiLCJrhL97baBXD8RqQY.mft
Manifest number: 18
Signing time: Thu 23 Jul 2026 11:04:47 +0000
Manifest this update: Thu 23 Jul 2026 11:04:47 +0000
Manifest next update: Thu 30 Jul 2026 11:04:47 +0000
Files and hashes: 1: HzX0DDZLiLCJrhL97baBXD8RqQY.crl (hash: +Zf07oluXK//ifE6+avT6cDQmJIDLWdHBsfub/0k7QU=)
2: CA5882E06D4611F1934851767447A888.roa (hash: PfXIGwgTTCIusRlPGqdMeq1XMVW+gcuIfsglflOola4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91924F8/71FD1338641111F18113D0D69B47A888/HzX0DDZLiLCJrhL97baBXD8RqQY.crl
rsync://rpki.apnic.net/member_repository/A91924F8/71FD1338641111F18113D0D69B47A888/HzX0DDZLiLCJrhL97baBXD8RqQY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HzX0DDZLiLCJrhL97baBXD8RqQY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 11:04:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25 (0x19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91924F8, serialNumber=1F35F40C364B88B089AE12FDEDB6815C3F11A906
Validity
Not Before: Jul 23 11:04:47 2026 GMT
Not After : Jul 30 11:04:47 2026 GMT
Subject: CN=6a61f54f-c78d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3a:42:46:c7:3d:5d:e7:08:9f:a6:71:b2:61:
64:14:32:32:99:2e:a8:fd:20:22:ff:30:02:d4:97:
7c:97:13:a9:b9:e4:eb:92:e1:f1:6b:50:28:1d:6a:
0c:2e:cf:b2:52:b7:11:83:4d:6c:4f:c6:5c:90:18:
a0:b0:0a:6f:71:97:52:7a:fc:00:d1:b0:3a:69:2a:
db:6f:92:da:c0:41:01:b7:2e:14:b0:34:d0:ef:97:
ac:fc:f8:09:42:6a:a1:4c:af:9d:0d:94:ec:a4:99:
c3:00:9f:3c:df:87:7b:7b:93:d5:86:cd:9a:29:1d:
74:f4:36:ee:d4:cd:93:3d:61:02:1b:cd:54:af:0d:
24:38:f3:cc:14:e5:6b:9a:e3:cf:e2:a8:6b:af:d1:
92:f8:4f:6d:b3:64:42:55:07:73:70:e1:68:1d:1e:
93:00:e2:a2:2c:74:2b:61:d1:86:9a:69:29:2c:64:
6f:f5:44:d6:ff:cf:c6:a2:e4:24:4d:ea:a7:74:17:
83:f3:ee:2e:b0:05:38:74:1c:51:61:0f:01:a9:69:
4b:81:db:46:f4:1d:23:91:fb:e9:8b:a8:d7:79:3a:
c7:fa:23:eb:2a:8c:0e:ed:70:a3:1f:7f:74:a3:77:
62:eb:a0:bd:42:a5:28:7d:c7:bc:fc:52:de:7f:42:
4d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:56:9A:E6:D0:36:08:83:36:8C:FF:24:8C:AB:76:D0:F2:4E:92:F0
X509v3 Authority Key Identifier:
keyid:1F:35:F4:0C:36:4B:88:B0:89:AE:12:FD:ED:B6:81:5C:3F:11:A9:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91924F8/71FD1338641111F18113D0D69B47A888/HzX0DDZLiLCJrhL97baBXD8RqQY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HzX0DDZLiLCJrhL97baBXD8RqQY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91924F8/71FD1338641111F18113D0D69B47A888/HzX0DDZLiLCJrhL97baBXD8RqQY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:e8:41:93:2b:91:fd:5c:63:b4:54:b1:8a:85:9f:26:4a:9c:
9d:85:da:de:29:66:a7:e8:32:2e:f5:cf:a2:13:7b:bd:de:41:
49:78:aa:e7:10:56:b8:8a:8c:9a:17:47:21:0b:7c:48:d0:a8:
7e:cf:7e:dc:9c:71:1d:28:16:de:31:a3:e4:f6:c5:11:f5:4d:
ff:b2:e4:26:5f:be:60:1c:3d:59:15:ff:86:a8:6a:a3:a8:6e:
ec:5e:9f:d7:da:ed:f9:34:d3:e2:a0:71:68:9d:03:4d:03:eb:
b4:4d:f0:76:59:69:66:86:8a:eb:12:05:f0:30:f2:0b:b5:b5:
a7:c6:c1:0c:0a:c8:18:b9:b5:e4:06:b3:e6:e6:65:e6:19:4a:
db:a6:fe:56:ce:11:e9:70:02:b2:2d:e8:0c:71:51:cb:0b:41:
e1:28:ea:27:7b:f5:9d:f6:9f:2d:1a:40:3a:6d:cb:f2:d1:a2:
5f:59:01:84:b5:43:c6:bc:be:53:44:82:ec:7f:fe:ff:b4:e9:
09:8c:12:c8:70:c3:7c:34:fd:84:d9:e0:ab:20:70:ed:5f:05:
16:7e:d6:df:04:66:02:8d:0a:77:80:83:f4:f9:a6:1f:07:9a:
43:81:af:6a:6c:1c:35:aa:55:b3:50:be:8b:75:dc:32:36:71:
04:8b:54:5c
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
MjRGODExMC8GA1UEBRMoMUYzNUY0MEMzNjRCODhCMDg5QUUxMkZERURCNjgxNUMz
RjExQTkwNjAeFw0yNjA3MjMxMTA0NDdaFw0yNjA3MzAxMTA0NDdaMBgxFjAUBgNV
BAMTDTZhNjFmNTRmLWM3OGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDJOkJGxz1d5wifpnGyYWQUMjKZLqj9ICL/MALUl3yXE6m55OuS4fFrUCgdagwu
z7JStxGDTWxPxlyQGKCwCm9xl1J6/ADRsDppKttvktrAQQG3LhSwNNDvl6z8+AlC
aqFMr50NlOykmcMAnzzfh3t7k9WGzZopHXT0Nu7UzZM9YQIbzVSvDSQ488wU5Wua
48/iqGuv0ZL4T22zZEJVB3Nw4WgdHpMA4qIsdCth0YaaaSksZG/1RNb/z8ai5CRN
6qd0F4Pz7i6wBTh0HFFhDwGpaUuB20b0HSOR++mLqNd5Osf6I+sqjA7tcKMff3Sj
d2LroL1CpSh9x7z8Ut5/Qk3FAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUu1aa5tA2
CIM2jP8kjKt20PJOkvAwHwYDVR0jBBgwFoAUHzX0DDZLiLCJrhL97baBXD8RqQYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkyNEY4LzcxRkQxMzM4NjQx
MTExRjE4MTEzRDBENjlCNDdBODg4L0h6WDBERFpMaUxDSnJoTDk3YmFCWEQ4UnFR
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvSHpYMEREWkxpTENKcmhMOTdiYUJYRDhScVFZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTky
NEY4LzcxRkQxMzM4NjQxMTExRjE4MTEzRDBENjlCNDdBODg4L0h6WDBERFpMaUxD
SnJoTDk3YmFCWEQ4UnFRWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBE6EGTK5H9XGO0VLGKhZ8mSpydhdreKWan6DIu9c+iE3u93kFJeKrnEFa4ioya
F0chC3xI0Kh+z37cnHEdKBbeMaPk9sUR9U3/suQmX75gHD1ZFf+GqGqjqG7sXp/X
2u35NNPioHFonQNNA+u0TfB2WWlmhorrEgXwMPILtbWnxsEMCsgYubXkBrPm5mXm
GUrbpv5WzhHpcAKyLegMcVHLC0HhKOone/Wd9p8tGkA6bcvy0aJfWQGEtUPGvL5T
RILsf/7/tOkJjBLIcMN8NP2E2eCrIHDtXwUWftbfBGYCjQp3gIP0+aYfB5pDga9q
bBw1qlWzUL6LddwyNnEEi1Rc
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:37:52 2026 by rpki-client