
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.mft
File: HNLU8yahhKSHvyKs14rVwGj0ZmE.mft (raw, json)
Hash identifier: zqhNatFCcsFjRrKM+sDXUJcXI6whUdQaoU7hFyzMYRc=
Subject key identifier: 80:B9:56:00:F3:31:69:33:CD:73:F4:63:76:72:6A:51:93:73:AB:DD
Authority key identifier: 1C:D2:D4:F3:26:A1:84:A4:87:BF:22:AC:D7:8A:D5:C0:68:F4:66:61
Certificate issuer: /CN=A91F8177/serialNumber=1CD2D4F326A184A487BF22ACD78AD5C068F46661
Certificate serial: DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNLU8yahhKSHvyKs14rVwGj0ZmE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.mft
Manifest number: DA
Signing time: Thu 23 Jul 2026 08:26:04 +0000
Manifest this update: Thu 23 Jul 2026 08:26:04 +0000
Manifest next update: Thu 30 Jul 2026 08:26:04 +0000
Files and hashes: 1: HNLU8yahhKSHvyKs14rVwGj0ZmE.crl (hash: 16UbkDERHcFq7ULX0EOlMn/vOPg7I14lDoI+ygI9V2E=)
2: 447A88023DDC11F0ACD9F475C4F9AE02.roa (hash: yApvKnBxIUvq7AlUwJW85McmrlejDSLKrMcrZmKRC/A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.crl
rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNLU8yahhKSHvyKs14rVwGj0ZmE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:26:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222 (0xde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8177, serialNumber=1CD2D4F326A184A487BF22ACD78AD5C068F46661
Validity
Not Before: Jul 23 08:26:04 2026 GMT
Not After : Jul 30 08:26:04 2026 GMT
Subject: CN=6a61d01c-e0bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f3:c9:de:e4:82:0d:50:74:bb:cf:3b:2a:cb:
ff:23:5b:41:51:2e:a3:3d:cd:d1:cc:54:74:e6:ed:
27:15:39:29:5b:fd:32:12:53:4f:71:d6:98:8f:b3:
77:96:42:2f:2a:e4:af:ee:33:47:74:59:33:c8:89:
7d:70:f6:b8:2a:ca:a5:96:8c:1e:88:de:ab:2a:4c:
0e:b7:81:af:96:2d:c0:fb:34:63:29:3d:a5:b1:ee:
e7:b2:f0:4b:4b:a3:e6:19:c5:fb:ef:3a:21:4d:92:
5b:f6:9d:16:37:ab:9a:4d:4a:26:d1:2d:c7:17:a8:
6f:da:c5:a7:39:d8:55:47:00:62:9a:e3:46:5f:69:
48:9d:5c:f2:97:29:5a:6a:8a:4b:50:e2:29:44:28:
7e:fd:12:e2:7a:c8:dd:00:dd:2d:33:8f:8d:66:25:
51:6c:4a:2a:ab:b8:98:bb:99:31:fe:12:41:69:4c:
64:59:5a:94:e3:01:18:07:fd:33:03:57:5f:88:bb:
70:5d:31:c5:e7:bd:68:64:82:99:6c:88:34:db:2b:
94:a0:db:c9:46:b5:fe:b2:f8:f5:cb:04:76:c1:cf:
7c:3f:f5:44:db:48:e2:cb:05:a5:c8:e9:15:ff:e9:
c3:21:f8:71:94:57:d5:71:79:4b:3b:c9:98:6f:ea:
ac:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B9:56:00:F3:31:69:33:CD:73:F4:63:76:72:6A:51:93:73:AB:DD
X509v3 Authority Key Identifier:
keyid:1C:D2:D4:F3:26:A1:84:A4:87:BF:22:AC:D7:8A:D5:C0:68:F4:66:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNLU8yahhKSHvyKs14rVwGj0ZmE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:22:94:5b:36:8b:1b:d1:c6:d3:66:8e:3d:51:ef:1b:3e:9c:
e2:11:4d:73:dd:21:c8:42:2f:2d:ad:5a:22:57:94:bd:04:dd:
c0:e6:98:49:ef:e6:6e:a3:a2:b6:ac:7b:ef:f8:25:a7:11:e2:
c7:16:72:c4:86:29:2e:81:a8:57:d1:21:ff:e4:45:a8:eb:65:
ed:4b:45:2d:b2:65:14:fe:1e:ce:67:ed:7e:a8:cd:38:ca:8c:
56:e6:e2:05:22:42:af:1c:e1:df:c6:fa:af:9e:ca:6f:02:6e:
9a:9c:92:02:44:1e:7e:34:e7:63:99:c0:59:4f:4a:0e:0d:91:
09:f0:64:db:3c:5b:91:d9:be:cc:2c:ad:6c:f4:f5:52:f2:41:
56:37:b8:0e:48:37:f1:be:b3:71:3a:7d:71:fe:0c:9d:ca:6b:
58:b2:30:9e:c0:fe:bf:cf:25:1a:ed:9b:86:fd:7c:db:d2:cc:
61:a3:85:fa:b4:59:75:6f:1c:89:87:65:e9:bb:05:0a:a6:05:
49:4a:47:bd:18:c2:d2:02:e5:43:c9:cc:66:06:33:ce:3e:d3:
64:6f:48:8d:95:74:99:48:13:87:9e:d9:54:69:66:d7:96:7a:
39:f5:f5:1d:36:99:57:38:b8:2d:b5:fa:70:16:b2:58:34:f1:
35:6b:d2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:51:56 2026 by rpki-client