
$ rpki-client -vvf rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.mft
File: hETqrJKViOiWt8WR9g40MEKw37w.mft (raw, json)
Hash identifier: x1UjEj31+5of4Y/cLfOaeAWlIAPxuAKM1NtH5ofXW3o=
Subject key identifier: 42:7D:2C:50:8C:6C:E6:77:B4:F6:37:AE:3F:98:C1:38:1C:46:77:10
Authority key identifier: 84:44:EA:AC:92:95:88:E8:96:B7:C5:91:F6:0E:34:30:42:B0:DF:BC
Certificate issuer: /CN=A9114431/serialNumber=8444EAAC929588E896B7C591F60E343042B0DFBC
Certificate serial: 0447
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hETqrJKViOiWt8WR9g40MEKw37w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.mft
Manifest number: 043F
Signing time: Tue 24 Mar 2026 23:56:27 +0000
Manifest this update: Tue 24 Mar 2026 23:56:26 +0000
Manifest next update: Tue 31 Mar 2026 23:56:26 +0000
Files and hashes: 1: hETqrJKViOiWt8WR9g40MEKw37w.crl (hash: kDiSy8uEmYYinAr0xFID8Xi1LjK8CgjNczR3qd2Irw0=)
2: C8899170FB7211F08F8762E74F6F56BC.roa (hash: ctiS/J2TVY8JJKVzXFhRdcRDN1f1H0n8TDJvzQMZJ5w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.crl
rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hETqrJKViOiWt8WR9g40MEKw37w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1095 (0x447)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114431, serialNumber=8444EAAC929588E896B7C591F60E343042B0DFBC
Validity
Not Before: Mar 24 23:56:26 2026 GMT
Not After : Mar 31 23:56:26 2026 GMT
Subject: CN=69c324ab-0dc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:16:43:ad:42:e0:7e:6d:ed:a6:93:ba:5c:3a:
9b:6a:fd:7c:c9:0f:85:5d:02:15:42:2d:70:8a:26:
f1:e3:e8:8b:5c:15:23:1e:8b:97:f0:1d:ca:dd:0c:
66:28:3e:e1:99:33:4d:64:19:01:43:08:16:69:cf:
b8:a0:84:92:3c:6c:0f:bd:24:5b:09:5b:d0:22:3b:
7f:17:c0:c3:be:fb:e8:66:d2:97:98:52:47:da:9b:
93:17:1b:a0:6c:72:94:64:26:9e:af:de:ce:40:16:
d6:1b:8a:40:ba:da:1a:8b:91:25:8e:24:a2:5c:ad:
6c:18:47:8a:17:0a:8f:91:de:67:90:7b:e4:74:d9:
c0:9e:4d:37:63:34:2f:73:18:ec:a4:ce:7f:d7:2c:
d2:cf:5d:a6:15:97:4c:ac:de:c6:7e:b0:9a:20:2d:
0b:02:69:bb:e2:b5:fa:95:bc:f9:9d:9a:e6:96:75:
5d:92:ed:ef:e7:e6:d5:f3:3f:09:41:30:f4:9e:25:
95:d9:96:44:50:70:0a:16:11:35:75:1a:85:f6:58:
1d:14:21:c9:4b:5d:57:5c:3a:8f:7b:71:c5:a8:b3:
58:f7:6b:cd:cd:d2:ae:63:f0:70:fb:42:ab:0e:8f:
66:68:76:59:64:1a:af:f8:95:da:d0:fe:bc:ad:92:
26:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:7D:2C:50:8C:6C:E6:77:B4:F6:37:AE:3F:98:C1:38:1C:46:77:10
X509v3 Authority Key Identifier:
keyid:84:44:EA:AC:92:95:88:E8:96:B7:C5:91:F6:0E:34:30:42:B0:DF:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hETqrJKViOiWt8WR9g40MEKw37w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:89:39:4e:e0:61:a1:af:dd:7d:55:52:e3:14:55:e6:b0:2f:
ab:3c:75:6e:9d:cd:25:dd:01:81:be:41:e6:3b:16:ef:22:98:
05:51:a4:c6:2c:e5:54:d7:2e:73:10:fb:67:bc:ab:f8:ae:b2:
e0:af:fd:d1:4b:14:34:35:bc:4f:72:28:89:fd:fb:6c:e8:e9:
ca:92:0b:77:39:bb:0c:87:cd:56:3a:ca:c9:95:77:4a:ee:d3:
96:a8:b0:77:fb:04:29:10:4d:2c:c8:c9:31:cb:49:a1:d7:d5:
98:07:61:3e:de:97:70:ad:7e:64:4d:f9:cf:ac:c8:44:78:68:
b3:53:cb:ae:2b:e0:86:05:63:d1:4d:99:4d:22:f1:4c:7b:3b:
55:8c:d5:06:3b:53:74:64:f9:ef:46:62:34:62:ba:12:ed:ac:
0a:a9:bc:56:c4:c6:46:fc:be:03:6f:06:62:a2:94:2a:99:27:
74:b3:05:54:86:67:fb:c6:32:47:eb:fb:97:68:d7:e2:41:95:
a6:3d:f1:c0:82:1a:07:bb:34:1c:ad:61:f7:4a:ca:3c:5a:18:
82:c2:31:06:bd:3b:25:96:d8:63:48:9b:ea:48:18:98:42:86:
1c:80:78:8c:2b:19:0a:71:45:d7:3b:b8:0b:36:93:f1:38:f6:
23:83:b1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:04:27 2026 by rpki-client