
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.mft
File: 05hHRxQle77zpal12QzQ3GW92-8.mft (raw, json)
Hash identifier: qZ09630/jvBnx/TxMtKS1OM9bfnOd/ALHcUnXsyUzW0=
Subject key identifier: 4D:BF:75:F1:6B:C7:4F:5C:50:01:3F:FE:18:65:70:23:FA:84:CA:47
Authority key identifier: D3:98:47:47:14:25:7B:BE:F3:A5:A9:75:D9:0C:D0:DC:65:BD:DB:EF
Certificate issuer: /CN=A9197CBC/serialNumber=D398474714257BBEF3A5A975D90CD0DC65BDDBEF
Certificate serial: 0174
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05hHRxQle77zpal12QzQ3GW92-8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.mft
Manifest number: 016D
Signing time: Thu 23 Jul 2026 06:22:54 +0000
Manifest this update: Thu 23 Jul 2026 06:22:54 +0000
Manifest next update: Thu 30 Jul 2026 06:22:54 +0000
Files and hashes: 1: 05hHRxQle77zpal12QzQ3GW92-8.crl (hash: GqX35WhMSw/v203wp79rP2xyrd7V15HRDXOzMPKovL8=)
2: 13435546ABF211F0BA77FA0DC4F9AE02.roa (hash: HIQTkqxEUw6fkREKneLxMJQ3JqOr/SLWIHkepYGIh7c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.crl
rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05hHRxQle77zpal12QzQ3GW92-8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:22:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 372 (0x174)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197CBC, serialNumber=D398474714257BBEF3A5A975D90CD0DC65BDDBEF
Validity
Not Before: Jul 23 06:22:54 2026 GMT
Not After : Jul 30 06:22:54 2026 GMT
Subject: CN=6a61b33e-3a52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2e:94:bf:4d:d8:be:3a:4e:ae:9d:19:d6:46:
46:df:6d:03:4d:66:c6:1e:08:73:54:bf:77:da:ee:
db:59:07:fd:23:2a:46:fe:fd:a0:8c:7d:a6:ff:e7:
93:cc:7d:68:32:59:c4:4c:c3:8d:83:6b:70:03:13:
aa:0d:44:d7:fb:73:49:06:55:34:9d:16:ea:b9:b8:
1c:69:cf:7f:01:9e:5d:bd:28:84:ed:ab:b8:88:2f:
76:33:06:96:e0:30:8c:f9:10:73:7a:01:02:78:5f:
d1:02:03:a9:03:c1:e7:a6:09:3f:6a:f1:60:95:3e:
97:80:18:60:63:de:63:33:9f:95:95:8d:50:4e:2a:
0a:90:c9:04:a4:1e:78:1c:bb:49:df:52:19:f5:a1:
49:55:b2:ec:c7:c7:ae:f9:57:36:30:55:c3:13:79:
38:b2:68:f1:9b:ed:2c:09:4d:58:cd:3b:5c:df:1d:
5e:59:75:61:f2:e2:5d:94:a9:ef:e6:a1:42:24:18:
51:a0:d0:e9:e6:95:c6:f0:3d:81:ed:d2:33:17:ca:
75:90:92:44:fd:7d:94:e6:23:02:53:fc:78:af:d1:
22:21:19:80:b1:7d:69:a4:a6:a2:82:09:0e:7d:80:
04:5a:a2:51:27:07:c7:2c:24:0a:7d:5c:10:4e:9a:
43:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:BF:75:F1:6B:C7:4F:5C:50:01:3F:FE:18:65:70:23:FA:84:CA:47
X509v3 Authority Key Identifier:
keyid:D3:98:47:47:14:25:7B:BE:F3:A5:A9:75:D9:0C:D0:DC:65:BD:DB:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05hHRxQle77zpal12QzQ3GW92-8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:89:52:30:09:fa:ac:19:1d:d5:5a:87:47:c4:d3:bb:56:ff:
38:d6:d2:81:b7:cd:20:81:ac:ce:57:3f:e9:60:aa:05:33:e4:
7f:8a:74:0b:98:df:51:05:ed:90:5c:07:22:6d:da:e1:07:c1:
f4:2c:0d:82:94:1b:bd:f2:b7:72:b0:50:9a:88:8d:fe:9d:db:
f5:0d:00:be:65:eb:8d:d3:1e:1d:fc:30:95:e6:f7:87:38:c2:
e5:6d:50:68:31:f5:e6:98:f8:ab:73:41:5e:4a:7b:0b:26:2e:
9c:95:31:b0:b0:f7:ab:b8:1a:7a:73:0d:f7:33:65:4d:c0:62:
79:d9:12:72:fa:10:b9:6a:23:2f:3c:f1:32:7d:1d:6c:b9:21:
a9:ca:a3:39:f0:ee:55:dc:a8:16:93:9a:5e:36:29:50:49:b6:
8c:44:04:12:fc:5c:c1:dc:5e:6a:f1:72:3f:66:1c:35:d4:af:
44:11:44:8b:b0:8e:50:0b:67:4b:cf:40:99:9a:b3:62:f2:88:
8d:63:b0:24:e3:70:6a:2b:26:59:c7:e3:f1:b0:7d:b5:67:69:
91:0c:34:c0:85:4f:cc:9d:dc:03:cf:c4:bf:38:82:4c:0d:1e:
c5:c4:a0:e8:26:5d:f3:a5:68:eb:5b:fb:20:11:3e:20:b5:8a:
93:75:f5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:24:54 2026 by rpki-client