
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft
File: hsI8F7xNIO4W8JLTWiz2VU_scRk.mft (raw, json)
Hash identifier: E52nlllz5j+wn6LRXnly6bFI6TZjWHRBX+PPVOjRb4I=
Subject key identifier: 4C:34:0D:C1:F2:FC:A4:AB:5A:BF:0E:E5:53:F6:61:A3:28:07:5A:A1
Authority key identifier: 86:C2:3C:17:BC:4D:20:EE:16:F0:92:D3:5A:2C:F6:55:4F:EC:71:19
Certificate issuer: /CN=A91E1D77/serialNumber=86C23C17BC4D20EE16F092D35A2CF6554FEC7119
Certificate serial: 09D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsI8F7xNIO4W8JLTWiz2VU_scRk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft
Manifest number: 09C8
Signing time: Wed 22 Jul 2026 20:20:19 +0000
Manifest this update: Wed 22 Jul 2026 20:20:19 +0000
Manifest next update: Wed 29 Jul 2026 20:20:19 +0000
Files and hashes: 1: hsI8F7xNIO4W8JLTWiz2VU_scRk.crl (hash: c+iUNssgIG2LJyy8gz+0NSeyi13dtY9K27bHmydlLAM=)
2: E6FD5EBCBA3A11EBA9482F5AC4F9AE02.roa (hash: +4O58+8Be0EvFE4iAXiTAOaPh0BL/Et1xJp3uENJQz8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.crl
rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsI8F7xNIO4W8JLTWiz2VU_scRk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 20:20:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2515 (0x9d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1D77, serialNumber=86C23C17BC4D20EE16F092D35A2CF6554FEC7119
Validity
Not Before: Jul 22 20:20:19 2026 GMT
Not After : Jul 29 20:20:19 2026 GMT
Subject: CN=6a612603-77af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1b:32:12:84:d0:75:25:e1:a8:cf:1d:55:e7:
fe:f1:4e:b9:d8:cc:f9:96:f0:f1:ef:68:fd:4f:b7:
12:16:5e:f1:74:84:76:bb:f2:3c:cd:5d:20:7a:aa:
f3:ae:4a:3d:37:77:92:98:76:4c:ac:be:a8:5a:04:
56:5c:ec:31:d6:2b:19:27:41:53:4c:09:2e:76:72:
70:f0:60:da:0d:a6:cb:f8:3e:c1:25:42:ec:7c:fd:
75:d1:1f:cc:8a:6a:23:05:cb:ec:f5:2a:c2:b4:41:
37:fd:e6:50:17:a7:01:1d:80:c5:b2:18:5a:1a:00:
a2:c3:f4:83:7b:23:a1:2c:25:94:b8:14:0c:7c:54:
ea:f0:7a:dc:e3:ba:88:95:f1:31:04:02:5c:77:6c:
d6:5d:81:dd:4c:8e:a6:e2:ed:b3:ab:92:37:9d:2c:
8e:b2:ed:f3:cf:6b:8f:fa:78:78:2d:0b:ce:ee:a0:
ce:4e:20:94:80:cb:f2:cf:e4:c3:27:13:90:87:0a:
4a:5a:72:72:59:94:6c:59:18:14:6d:af:cc:48:26:
05:35:0d:ea:db:3f:fc:08:c3:30:c9:5b:e5:01:50:
e8:93:d1:98:80:20:40:d1:72:22:5a:06:47:07:39:
94:8a:cf:1d:f7:51:7f:77:31:94:c9:0e:8e:2a:19:
7e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:34:0D:C1:F2:FC:A4:AB:5A:BF:0E:E5:53:F6:61:A3:28:07:5A:A1
X509v3 Authority Key Identifier:
keyid:86:C2:3C:17:BC:4D:20:EE:16:F0:92:D3:5A:2C:F6:55:4F:EC:71:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsI8F7xNIO4W8JLTWiz2VU_scRk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:f4:b6:d0:6a:07:16:60:71:15:10:7f:5f:eb:21:63:13:ce:
52:da:65:6e:fe:27:c7:16:25:03:24:7c:a9:03:8c:87:0f:0e:
b1:51:50:7a:03:50:26:1f:23:0e:33:fc:35:41:99:0b:46:18:
41:64:e6:7e:8c:b3:53:c0:39:09:e9:82:0a:65:2c:e2:92:a2:
88:72:10:e8:a1:44:02:e9:d8:76:10:5e:4f:00:a1:1a:1c:1e:
2b:d8:01:08:f6:bd:22:d5:78:d5:eb:83:46:02:a5:dd:e6:50:
28:d1:4e:f1:4d:0f:07:9e:47:d6:e2:18:c3:2c:5f:7f:3f:af:
f8:98:bc:34:50:aa:df:c7:ee:83:06:d8:a6:00:b0:17:ff:66:
09:7e:05:e8:3c:fc:2c:9d:70:94:9d:fb:b3:09:8b:d6:77:28:
5c:3f:68:a3:86:25:8e:d3:7e:cd:50:8c:f2:f0:ee:5f:25:26:
cc:db:54:22:6c:0a:b4:60:ad:ad:65:a5:d3:d8:84:6b:e5:fa:
81:ae:2a:10:81:92:a8:e1:a6:20:e3:33:e1:09:ce:02:2f:da:
62:b2:d1:56:b4:79:63:a9:d5:e3:99:b9:a9:5e:52:f8:77:f3:
5b:cd:76:c1:17:c9:cc:3a:bc:7c:3a:de:01:9a:a3:b7:f1:5b:
4e:66:0d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:56:33 2026 by rpki-client