
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.mft
File: hpBNLQLbigWb7ZOPL46u88Qgb9A.mft (raw, json)
Hash identifier: 7yfbc2rKsQ94jCFU/XBUIaIRkEez/kSVj+mzBqZaJqc=
Subject key identifier: F1:D5:E5:69:E9:78:AD:B4:35:E4:AC:B6:5D:0F:8A:FE:0F:E3:C5:29
Authority key identifier: 86:90:4D:2D:02:DB:8A:05:9B:ED:93:8F:2F:8E:AE:F3:C4:20:6F:D0
Certificate issuer: /CN=A91D4ACD/serialNumber=86904D2D02DB8A059BED938F2F8EAEF3C4206FD0
Certificate serial: 0166
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hpBNLQLbigWb7ZOPL46u88Qgb9A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.mft
Manifest number: 015E
Signing time: Thu 23 Jul 2026 06:37:07 +0000
Manifest this update: Thu 23 Jul 2026 06:37:06 +0000
Manifest next update: Thu 30 Jul 2026 06:37:06 +0000
Files and hashes: 1: hpBNLQLbigWb7ZOPL46u88Qgb9A.crl (hash: gsP2W0I94LS6MoKsdA6C/oEVizEu+0OnWOpciGro8GY=)
2: 388D7E38797D11EF8CA64711C4F9AE02.roa (hash: tcJP6ckIisiXaSRaPvtWnl6KwRGfZck/uk3eudyqJEo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.crl
rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hpBNLQLbigWb7ZOPL46u88Qgb9A.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:37:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 358 (0x166)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4ACD, serialNumber=86904D2D02DB8A059BED938F2F8EAEF3C4206FD0
Validity
Not Before: Jul 23 06:37:06 2026 GMT
Not After : Jul 30 06:37:06 2026 GMT
Subject: CN=6a61b692-3cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:74:ba:f2:56:33:f0:0f:c2:86:d4:7a:09:b4:
99:e2:9f:b7:89:fd:69:a8:de:77:51:72:fb:36:b2:
93:52:19:b8:b9:42:33:15:72:9c:e2:01:87:b5:d4:
22:eb:98:29:41:14:42:d3:e2:a6:76:c3:32:9b:f8:
8e:5e:e5:41:db:87:d5:f0:88:2d:71:1f:20:da:b6:
7d:c3:d7:7a:d1:91:52:0b:54:a5:f3:4d:6f:e6:0d:
45:2c:65:e2:a3:5b:7e:83:54:00:88:c3:ce:a2:91:
e6:5e:68:a1:19:01:d7:c1:56:99:39:81:35:3b:83:
0f:2b:d7:94:8b:5f:22:e3:19:b6:d7:c5:a6:aa:7f:
3c:41:f3:a8:42:01:9e:3f:ec:75:8d:25:61:13:10:
66:bd:9b:17:34:f0:0b:9f:44:c8:47:e6:49:6c:fe:
3d:d0:a4:83:51:04:c9:ba:b0:db:62:26:cc:03:33:
14:25:9b:ac:a3:61:cf:40:35:94:6f:67:84:6f:3b:
a5:18:bf:3c:49:b3:7c:3d:62:6b:3c:bf:2e:0a:19:
19:f9:cb:61:c7:f7:83:af:2c:40:00:f4:61:1b:bf:
59:fc:44:a9:70:90:c9:de:56:6e:06:c9:bb:0f:d5:
ef:82:ca:56:f9:3f:2e:a2:37:6b:cc:28:49:ab:c6:
f0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D5:E5:69:E9:78:AD:B4:35:E4:AC:B6:5D:0F:8A:FE:0F:E3:C5:29
X509v3 Authority Key Identifier:
keyid:86:90:4D:2D:02:DB:8A:05:9B:ED:93:8F:2F:8E:AE:F3:C4:20:6F:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hpBNLQLbigWb7ZOPL46u88Qgb9A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:5b:16:e3:0f:67:96:e3:40:1f:ea:3a:ac:6e:5e:56:5a:9d:
ea:d2:de:cd:10:a5:75:0b:f0:8f:c2:ff:92:72:9e:17:bf:13:
64:fd:47:10:60:81:a8:d8:98:3c:37:8a:10:7e:24:56:c4:fb:
1a:21:b6:a0:81:34:da:1d:d3:90:fe:65:8e:49:3f:1d:e6:41:
56:24:b4:f4:8a:ae:81:e6:99:7d:ca:6f:97:2c:15:b9:6b:a2:
bc:06:29:04:96:33:ce:84:a5:9a:1b:19:92:04:ca:8d:ff:53:
69:2e:f1:b0:20:d9:be:f2:a8:56:ca:3b:ed:1e:17:0b:6e:df:
a3:8b:ce:86:28:49:14:6b:a3:9d:84:17:50:a3:72:38:d6:8e:
0e:73:ce:f4:d6:22:0e:94:80:2b:e2:87:f1:97:26:9b:b1:87:
67:02:78:89:48:c7:89:19:0d:0f:23:f9:f7:5f:b8:87:2f:11:
e2:61:f9:aa:3f:8d:1a:8a:fb:14:d2:96:19:e6:61:60:1c:a9:
74:3b:4e:ee:8c:d9:59:ad:4b:27:01:d7:23:25:46:e2:1a:84:
87:85:99:7d:73:60:a9:be:b2:ab:87:0d:b0:e2:fe:26:39:07:
13:c3:a1:0b:38:b8:3c:c6:c8:fe:7f:f7:40:72:b3:7e:b3:94:
e0:c7:0b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:31:36 2026 by rpki-client