
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.mft
File: h7HuPp7irRoRPyeipU4sC41a-zQ.mft (raw, json)
Hash identifier: gcf3SZlRKfF2YugYGWFyTe71pE8NptmOA7uSz9jb7ck=
Subject key identifier: 26:94:76:B4:50:A9:8F:B1:71:36:E0:9E:09:7C:8A:95:4E:41:68:C3
Authority key identifier: 87:B1:EE:3E:9E:E2:AD:1A:11:3F:27:A2:A5:4E:2C:0B:8D:5A:FB:34
Certificate issuer: /CN=A91CF9F5/serialNumber=87B1EE3E9EE2AD1A113F27A2A54E2C0B8D5AFB34
Certificate serial: 0179
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7HuPp7irRoRPyeipU4sC41a-zQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.mft
Manifest number: 0170
Signing time: Thu 23 Jul 2026 06:21:34 +0000
Manifest this update: Thu 23 Jul 2026 06:21:33 +0000
Manifest next update: Thu 30 Jul 2026 06:21:33 +0000
Files and hashes: 1: h7HuPp7irRoRPyeipU4sC41a-zQ.crl (hash: qdRg59XCThPKyek/h6bF0Dain0SlcmYNZMCZ0oJE03U=)
2: 2FAD450250E411F0A6B4892AC4F9AE02.roa (hash: 5FVZeeMmHHgD5LWgKUCAHIiyRLhCr4xloYA6n+HE21g=)
3: 56EC0F5EABD411F0ADCDD73CC4F9AE02.roa (hash: LRGLmwGa2a/I5gvOrv+UPiIF3N2WlDmpx8kIsDZcKzI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.crl
rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7HuPp7irRoRPyeipU4sC41a-zQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:21:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 377 (0x179)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CF9F5, serialNumber=87B1EE3E9EE2AD1A113F27A2A54E2C0B8D5AFB34
Validity
Not Before: Jul 23 06:21:33 2026 GMT
Not After : Jul 30 06:21:33 2026 GMT
Subject: CN=6a61b2ee-3d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:de:2f:6e:7d:86:dd:9e:98:ae:c1:a5:0e:08:
8c:f0:87:ac:09:54:44:a6:be:ee:2d:7c:20:f7:08:
91:ce:05:9d:f2:b4:95:4b:e5:3d:83:ff:ef:34:eb:
07:e4:de:df:9e:fe:3c:ad:5c:fb:14:62:37:33:b5:
9a:ba:f4:cd:a8:54:90:e0:12:06:ed:fd:c3:ae:97:
ec:e5:01:cf:ad:fc:66:a4:83:d0:e1:07:67:99:d0:
ca:a8:38:87:e2:f1:c9:48:19:2b:e1:dd:38:35:c3:
61:5d:df:f7:42:41:f5:9b:c2:74:c5:e8:fb:15:2d:
c9:ef:b6:9e:f2:aa:92:01:c7:51:13:a4:56:c4:f7:
b7:1a:67:06:17:42:be:93:90:c0:79:bc:e5:72:fc:
c5:5b:78:85:31:92:c1:a4:17:dc:f5:9d:3f:6b:66:
b8:e3:e6:df:15:8f:07:23:3b:76:42:d3:ce:1e:59:
13:d7:58:ae:78:f2:42:ab:60:e3:3f:09:ef:30:73:
14:cb:90:d8:a4:62:50:af:41:e0:0b:77:46:43:a3:
5e:1d:90:a6:f8:2c:f3:fa:49:3b:8c:22:45:50:c9:
a4:8a:41:2a:66:04:bf:dd:1b:7e:e1:fe:02:e7:9a:
7a:41:1a:55:5d:a8:55:65:05:0c:ef:93:e9:50:71:
e8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:94:76:B4:50:A9:8F:B1:71:36:E0:9E:09:7C:8A:95:4E:41:68:C3
X509v3 Authority Key Identifier:
keyid:87:B1:EE:3E:9E:E2:AD:1A:11:3F:27:A2:A5:4E:2C:0B:8D:5A:FB:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7HuPp7irRoRPyeipU4sC41a-zQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:62:ec:50:75:55:5b:97:05:8e:5e:5c:aa:3d:e4:f6:4f:24:
5b:cc:f9:dd:ae:75:c1:cc:ed:11:f2:0c:6d:1d:42:e7:9f:78:
c8:78:75:2a:dd:76:fb:ac:b7:7d:72:e4:e9:bd:d9:52:ef:a9:
3d:39:57:a7:5b:4e:9e:05:00:f8:85:f2:6d:54:5d:2a:f8:41:
c5:ef:47:16:68:66:a0:ed:32:aa:a9:39:51:ec:1d:57:0a:54:
e9:43:60:d4:05:e3:73:72:29:58:ef:78:9a:ce:40:33:20:08:
4d:0b:b8:e0:6c:c2:6a:b2:9f:1c:3b:c6:6a:9c:d4:70:75:90:
69:83:b6:d9:78:ed:f6:f2:0e:0d:4e:f4:40:09:5b:b1:9c:d9:
7a:33:47:17:35:54:09:10:64:ba:16:1b:19:69:59:ea:c5:d8:
92:18:8f:85:36:e0:c0:18:a0:01:25:31:0f:8e:31:9f:1d:17:
c3:71:bc:d5:e6:a3:39:9c:a5:ce:13:18:4a:86:bf:95:40:c3:
1a:ab:12:09:22:4e:df:bf:ba:d5:a2:7f:74:55:f8:c2:80:28:
f7:44:76:ce:4a:19:f0:54:2a:89:30:3e:ed:14:74:e1:b3:20:
60:a1:66:cc:59:59:9f:3b:46:8b:85:41:eb:33:fc:fc:d0:2c:
e9:63:2c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:09:04 2026 by rpki-client