
$ rpki-client -vvf rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.mft
File: hUw8jb_u2qy7OypCS1iyWaFMnws.mft (raw, json)
Hash identifier: 3tzdG4G+ycvrhhzI9N+zJtFEyAWgSly3l7+LLvMRs2U=
Subject key identifier: 42:DE:0D:D0:13:9E:CC:D9:0A:46:B4:D8:AF:86:BA:0D:76:43:6C:C8
Authority key identifier: 85:4C:3C:8D:BF:EE:DA:AC:BB:3B:2A:42:4B:58:B2:59:A1:4C:9F:0B
Certificate issuer: /CN=A919DBBF/serialNumber=854C3C8DBFEEDAACBB3B2A424B58B259A14C9F0B
Certificate serial: 02B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hUw8jb_u2qy7OypCS1iyWaFMnws.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.mft
Manifest number: 02A1
Signing time: Thu 23 Jul 2026 02:53:13 +0000
Manifest this update: Thu 23 Jul 2026 02:53:13 +0000
Manifest next update: Thu 30 Jul 2026 02:53:13 +0000
Files and hashes: 1: hUw8jb_u2qy7OypCS1iyWaFMnws.crl (hash: pdLPB89PyLNVEKMpxNZd0IQkD7kH1ImFIk9ZpIBKMJ4=)
2: B92D709A3DA111F1937442D2C7833773.roa (hash: Zk364A8Ht5Pfoz1dHcfIcqHGWbjHj2aRO5Xc6nvEnQA=)
3: BDBDF8FE2CDB11F1B964405E9D833773.roa (hash: N2ouqxTaJTdT3cqwTn1OVXdT/dBvearlaUPdfdlosfo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.crl
rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hUw8jb_u2qy7OypCS1iyWaFMnws.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:53:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 692 (0x2b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919DBBF, serialNumber=854C3C8DBFEEDAACBB3B2A424B58B259A14C9F0B
Validity
Not Before: Jul 23 02:53:13 2026 GMT
Not After : Jul 30 02:53:13 2026 GMT
Subject: CN=6a618219-afff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:dc:73:c6:f7:80:c4:5a:d1:60:c6:01:24:4f:
26:e2:93:a4:a8:39:4d:98:5f:ef:ae:f9:ed:55:4f:
88:ca:90:96:67:0e:85:94:39:54:17:6c:e5:db:30:
14:c0:8f:95:34:42:b2:19:4d:0a:a8:40:6b:29:94:
a4:9a:15:08:d3:79:5e:45:85:6b:32:50:d5:1f:40:
34:f5:a2:a1:d2:1d:97:51:80:16:b6:10:d2:eb:d5:
df:40:72:0e:d5:68:55:ac:ed:9e:25:71:98:ef:b5:
99:04:e0:23:1e:ea:bd:29:f8:0c:e2:f0:c5:f6:de:
77:68:bb:ed:54:cb:eb:84:c3:80:d8:3e:56:9e:4d:
a5:90:68:28:53:f7:c9:17:9a:c7:89:be:2d:47:59:
cb:80:9e:94:db:77:63:1a:0a:f8:9b:96:b4:e5:13:
b1:71:14:79:95:e3:26:eb:cb:9b:bc:bd:72:98:c1:
ea:cb:fd:42:64:f7:53:24:4d:07:4f:f9:5f:94:a5:
05:81:01:d5:3d:22:82:95:92:bb:fa:89:02:f3:b5:
48:ea:84:67:7d:c8:39:8f:7b:0f:de:0b:10:20:c9:
31:3d:3b:6a:fd:c3:e0:be:31:64:f1:fa:d2:6b:7e:
54:23:23:0d:8a:19:da:25:ff:0b:5e:0d:d4:b5:d7:
53:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:DE:0D:D0:13:9E:CC:D9:0A:46:B4:D8:AF:86:BA:0D:76:43:6C:C8
X509v3 Authority Key Identifier:
keyid:85:4C:3C:8D:BF:EE:DA:AC:BB:3B:2A:42:4B:58:B2:59:A1:4C:9F:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hUw8jb_u2qy7OypCS1iyWaFMnws.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:18:91:1b:83:49:fc:b0:ce:56:09:16:4e:31:fd:2c:12:b2:
39:c7:c4:28:95:b0:62:28:05:75:cc:95:a6:a4:06:f1:c3:e0:
3c:f9:1f:aa:ff:3e:58:44:d4:1d:e0:77:bd:d4:73:3b:05:41:
cc:45:61:de:e1:3e:05:de:2d:ec:78:e1:b4:25:c7:ce:04:1c:
69:67:5c:e8:96:b8:12:6d:ef:5e:3b:1f:3d:e3:6f:9c:1f:5f:
58:b9:91:65:c6:97:16:c5:f6:5c:60:a4:e4:a2:db:14:e8:94:
49:25:0f:75:3a:57:33:8e:83:57:06:5c:c9:86:dc:5d:99:59:
23:8a:12:03:c1:bd:20:45:fe:f0:0f:3c:8f:1d:10:99:48:45:
69:58:f7:bc:a4:c0:6c:b9:b4:a5:f9:b1:de:82:c3:a3:c5:a7:
43:22:d1:9d:19:19:28:64:64:c8:a1:e9:0f:25:aa:c9:80:65:
42:0c:71:e0:8e:7b:ee:93:83:d6:57:66:d9:d3:a3:43:d9:11:
ad:35:70:ec:b4:86:76:29:f3:21:9b:33:81:d7:63:42:de:ff:
d6:af:a1:97:6e:0f:59:a3:17:af:0a:24:9a:ac:03:f7:2b:53:
da:5a:43:39:45:ad:a0:ec:8b:7c:2f:a5:90:6e:f8:9d:d6:93:
48:a6:6f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:28:32 2026 by rpki-client