
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.mft
File: hUw8jb_u2qy7OypCS1iyWaFMnws.mft (raw, json)
Hash identifier: USeA59uNvkaGM6Zj2y7nJX5Y7NUI1sY42DKUSQwyNoA=
Subject key identifier: 50:23:13:65:B9:55:0C:51:2A:74:04:FC:13:8B:15:1A:B6:C0:4F:7D
Authority key identifier: 85:4C:3C:8D:BF:EE:DA:AC:BB:3B:2A:42:4B:58:B2:59:A1:4C:9F:0B
Certificate issuer: /CN=A919DBBF/serialNumber=854C3C8DBFEEDAACBB3B2A424B58B259A14C9F0B
Certificate serial: 02D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hUw8jb_u2qy7OypCS1iyWaFMnws.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.mft
Manifest number: 02C1
Signing time: Wed 23 Sep 2026 01:21:17 +0000
Manifest this update: Wed 23 Sep 2026 01:21:17 +0000
Manifest next update: Wed 30 Sep 2026 01:21:17 +0000
Files and hashes: 1: hUw8jb_u2qy7OypCS1iyWaFMnws.crl (hash: LicIy6yt4Yj82GZdWb/utXcR/t6Hp4Q/OkgGqowZEzc=)
2: BDBDF8FE2CDB11F1B964405E9D833773.roa (hash: N2ouqxTaJTdT3cqwTn1OVXdT/dBvearlaUPdfdlosfo=)
3: B92D709A3DA111F1937442D2C7833773.roa (hash: Zk364A8Ht5Pfoz1dHcfIcqHGWbjHj2aRO5Xc6nvEnQA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.crl
rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hUw8jb_u2qy7OypCS1iyWaFMnws.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 01:21:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 724 (0x2d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919DBBF, serialNumber=854C3C8DBFEEDAACBB3B2A424B58B259A14C9F0B
Validity
Not Before: Sep 23 01:21:17 2026 GMT
Not After : Sep 30 01:21:17 2026 GMT
Subject: CN=6ab3298d-9986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4c:0e:0d:bb:12:d5:d1:67:94:8e:6f:91:67:
68:38:0b:ba:6b:a0:93:bf:33:b8:d6:20:ea:80:79:
4e:56:61:20:a6:eb:d9:3e:21:52:27:6d:55:81:18:
23:b7:a1:c6:83:33:bf:2e:34:9e:41:05:0c:72:2b:
b6:fa:a2:93:17:b6:a6:0c:21:71:55:fa:c4:50:12:
4f:91:35:da:b4:9d:f9:a5:33:59:a5:20:77:a0:56:
78:45:33:a0:ec:b3:ea:32:37:3a:cf:67:04:2a:2a:
ad:91:95:52:9b:e6:25:7f:fa:f9:f1:0b:b3:9b:36:
93:d4:79:39:35:55:d7:24:2d:8f:c3:e3:70:b4:86:
51:62:51:7f:42:4b:c7:d0:a7:f4:97:04:fb:ad:7a:
67:7f:e8:9a:f9:1c:ec:c8:e9:d8:52:53:f5:a1:0f:
47:50:27:31:85:8f:10:b6:2f:63:e1:3d:e3:b3:cf:
3e:fb:13:3e:3d:7e:4b:d1:3e:c3:76:e0:1b:49:21:
4c:58:ca:90:2b:dd:06:f2:f4:9c:a9:19:53:ce:d1:
93:48:c2:7d:59:36:91:ec:a2:b0:a3:bb:b7:18:7a:
bc:18:1f:17:c5:da:7c:20:17:4e:1c:dd:61:8a:a4:
98:00:e4:be:77:0a:37:19:3e:36:8e:e5:d9:c7:99:
4a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:23:13:65:B9:55:0C:51:2A:74:04:FC:13:8B:15:1A:B6:C0:4F:7D
X509v3 Authority Key Identifier:
keyid:85:4C:3C:8D:BF:EE:DA:AC:BB:3B:2A:42:4B:58:B2:59:A1:4C:9F:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hUw8jb_u2qy7OypCS1iyWaFMnws.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d3:bb:8a:00:ce:ed:37:f6:08:b2:e1:28:74:17:6d:9a:dc:af:
26:ea:33:2b:af:63:25:02:fa:54:68:aa:45:e6:c9:27:20:7c:
79:8d:57:c8:89:2f:3a:e0:44:fd:18:40:e2:72:fe:a0:f6:58:
c8:a0:9e:d5:e0:41:55:7f:44:62:e0:fc:04:ca:a7:0f:60:6c:
0f:e5:20:eb:0f:13:e4:4b:2b:ca:ea:b1:0e:2c:e5:88:97:d0:
10:1c:83:a4:af:ad:70:47:01:5e:24:01:ea:e9:8d:1d:0f:a5:
ed:a4:04:c4:2a:27:49:cd:44:bb:33:24:8e:3a:3a:88:80:d2:
94:a4:8c:98:27:02:d6:61:1d:77:e0:15:cc:8c:31:b4:d1:82:
ca:95:5b:3f:1b:08:f6:e6:62:0b:dd:5a:d9:bc:5b:c4:a4:25:
a5:01:2a:be:db:15:d6:4d:8d:cc:5b:be:80:5e:d5:36:03:2e:
f2:56:ba:31:4b:97:9f:2e:1b:67:a1:63:44:e6:9a:b3:93:07:
3e:f9:03:50:a9:56:5e:9c:7f:36:7f:0b:44:de:fd:7b:28:31:
27:ec:7d:ff:47:0c:54:0d:ff:42:5b:1b:ab:12:7e:18:da:67:
28:e8:dd:1f:05:0b:96:9f:f9:0b:8a:c8:c9:87:8d:04:13:7f:
2a:8a:cc:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:13:21 2026 by rpki-client