
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919337F/1B5BF7FE27AA11F1B751955AB7EE528E/hRn_LGgILMZHuCh2C0t7FJXshMs.mft
File: hRn_LGgILMZHuCh2C0t7FJXshMs.mft (raw, json)
Hash identifier: 5pZCiLr0j3FH9Zc50umklh/GaHUBBLQis5v9zoxNIiU=
Subject key identifier: 79:CC:87:A0:4F:74:6B:6C:60:E2:E7:26:56:E1:0B:3A:65:EE:F8:EA
Authority key identifier: 85:19:FF:2C:68:08:2C:C6:47:B8:28:76:0B:4B:7B:14:95:EC:84:CB
Certificate issuer: /CN=A919337F/serialNumber=8519FF2C68082CC647B828760B4B7B1495EC84CB
Certificate serial: 61
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hRn_LGgILMZHuCh2C0t7FJXshMs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919337F/1B5BF7FE27AA11F1B751955AB7EE528E/hRn_LGgILMZHuCh2C0t7FJXshMs.mft
Manifest number: 60
Signing time: Thu 24 Sep 2026 17:52:17 +0000
Manifest this update: Thu 24 Sep 2026 17:52:17 +0000
Manifest next update: Thu 01 Oct 2026 17:52:17 +0000
Files and hashes: 1: hRn_LGgILMZHuCh2C0t7FJXshMs.crl (hash: D4HAFjHpltkQGGmSRfcFOSzIFdX+9ZFNrftwHW9ZDsk=)
2: DCF45DB827C111F19C6102CF9F833773.roa (hash: ASzg8hQDL/2aWq41h7X6nF+OfCE4FLFV0Neuc7HpczM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919337F/1B5BF7FE27AA11F1B751955AB7EE528E/hRn_LGgILMZHuCh2C0t7FJXshMs.crl
rsync://rpki.apnic.net/member_repository/A919337F/1B5BF7FE27AA11F1B751955AB7EE528E/hRn_LGgILMZHuCh2C0t7FJXshMs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hRn_LGgILMZHuCh2C0t7FJXshMs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 17:52:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97 (0x61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919337F, serialNumber=8519FF2C68082CC647B828760B4B7B1495EC84CB
Validity
Not Before: Sep 24 17:52:17 2026 GMT
Not After : Oct 1 17:52:17 2026 GMT
Subject: CN=6ab56351-36e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5d:05:65:45:b6:53:0c:27:6d:3a:22:06:cf:
02:82:f2:31:92:ea:67:52:ce:6b:59:25:49:c0:fc:
21:77:01:dc:61:0e:ef:8a:1c:f5:e5:45:b2:28:be:
65:91:7e:5f:a5:4a:57:67:85:f7:01:3c:9e:47:de:
35:55:af:db:91:76:c4:d3:1a:81:26:53:0d:23:20:
20:32:79:91:61:8a:a0:1e:c0:3e:ad:ac:6a:52:dc:
d0:a3:2d:65:7e:5c:e6:91:b2:24:d3:5a:15:e7:ab:
65:8d:b2:83:f0:c7:93:e2:45:66:9d:47:83:41:04:
9d:9d:1e:80:4b:01:66:2d:4e:6d:40:2d:16:bf:7f:
1a:d7:27:6a:cd:ce:d3:71:00:5d:a1:f6:30:b0:7d:
cc:97:b5:62:95:ce:71:c2:f7:ff:66:ad:8f:bc:d2:
ac:de:f9:4e:6f:2f:97:20:c0:cc:ae:d7:5f:09:13:
b9:5c:63:0b:80:76:f0:75:f2:fb:fa:80:ab:fb:83:
33:09:24:3e:88:1c:48:71:a0:2a:8c:a3:cc:e9:e3:
16:b9:44:48:1d:2a:af:1c:f0:fe:7d:d7:b6:3e:7a:
a2:bd:d5:60:d7:4b:cb:9a:23:dd:34:26:6d:12:3a:
70:57:8a:61:70:5e:d0:77:c8:0e:90:58:89:69:98:
b0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:CC:87:A0:4F:74:6B:6C:60:E2:E7:26:56:E1:0B:3A:65:EE:F8:EA
X509v3 Authority Key Identifier:
keyid:85:19:FF:2C:68:08:2C:C6:47:B8:28:76:0B:4B:7B:14:95:EC:84:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919337F/1B5BF7FE27AA11F1B751955AB7EE528E/hRn_LGgILMZHuCh2C0t7FJXshMs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hRn_LGgILMZHuCh2C0t7FJXshMs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919337F/1B5BF7FE27AA11F1B751955AB7EE528E/hRn_LGgILMZHuCh2C0t7FJXshMs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ce:60:c8:f6:2e:9c:0e:63:2f:3e:73:02:ad:56:76:84:cc:
ce:41:8a:a1:12:a6:3c:ff:94:1d:40:bb:1e:fa:34:48:b0:f9:
fa:84:4c:d0:e6:13:67:e5:85:af:35:ff:44:24:f5:9a:c5:b6:
75:0b:6c:e1:fb:b3:b9:37:15:4a:e3:fa:54:18:ad:06:c0:0a:
82:4e:35:6e:b1:44:7c:32:67:29:e4:f9:a4:f3:97:0b:be:24:
65:e6:be:64:21:b7:09:18:7c:3b:d3:eb:95:42:8e:d7:33:cb:
cc:e6:ed:2d:39:b6:67:c7:7b:42:0b:7e:43:ca:f5:76:79:91:
89:ed:dd:bd:62:13:fe:52:6c:b2:2d:a4:1f:fb:f4:e3:35:a3:
16:b7:ca:9a:64:a5:9f:de:8f:f0:f8:ff:69:5a:84:0b:8f:f3:
e0:f2:a8:48:dc:5c:f4:27:1b:d3:45:a9:01:0d:65:40:aa:0c:
f9:fe:48:ea:db:03:3a:ec:bb:ff:a1:fc:d0:96:65:b9:00:a9:
3a:28:26:14:48:39:d8:80:eb:b5:71:c9:eb:9e:a5:ab:da:9c:
1d:f2:fc:c5:58:b5:d7:fb:da:80:f8:4c:94:17:b1:de:4f:87:
0b:e3:0c:40:40:1e:3f:a6:42:62:d6:fe:05:16:ca:a3:98:53:
f1:cb:8f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:17:07 2026 by rpki-client