
$ rpki-client -vvf rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft
File: aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft (raw, json)
Hash identifier: oNQ9j/LEcpWiSotBGP/xyJcROPpElhTMTmABqDK9MSA=
Subject key identifier: 89:74:DB:E3:92:D4:59:A2:D2:E5:76:AF:A8:F0:19:AA:1F:C9:DE:E1
Authority key identifier: 68:77:41:DE:15:CD:88:3C:10:DD:BC:4F:C3:A2:DC:F5:48:5E:7D:F3
Certificate issuer: /CN=A9114D4F/serialNumber=687741DE15CD883C10DDBC4FC3A2DCF5485E7DF3
Certificate serial: 0176
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft
Manifest number: 0170
Signing time: Thu 23 Jul 2026 06:21:02 +0000
Manifest this update: Thu 23 Jul 2026 06:21:02 +0000
Manifest next update: Thu 30 Jul 2026 06:21:02 +0000
Files and hashes: 1: aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl (hash: CcShCyNsXuZPGs3exUuG+UcI6iDCudCDxzPWeKdOvkE=)
2: B70A38DCABD111F08E516516C4F9AE02.roa (hash: ej0+6PRzXsgl/obiA4CQWCET70nEM66QMDL6LuBaewE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl
rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:21:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 374 (0x176)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114D4F, serialNumber=687741DE15CD883C10DDBC4FC3A2DCF5485E7DF3
Validity
Not Before: Jul 23 06:21:02 2026 GMT
Not After : Jul 30 06:21:02 2026 GMT
Subject: CN=6a61b2ce-b61e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:73:b4:00:f4:a0:b0:11:12:a1:8f:c8:59:82:
18:c1:21:f4:2a:bc:46:35:ed:0d:0f:d7:e0:44:49:
a6:6b:53:b2:f5:b2:ed:33:e1:d7:83:55:02:a6:1a:
b6:ce:20:48:73:96:3e:ce:16:85:e1:8a:59:a8:39:
08:f0:64:01:3a:30:31:76:a3:50:54:7b:8b:e4:78:
50:c5:28:d0:fd:59:08:6d:c0:52:92:ff:f4:1a:42:
a0:57:58:5e:8a:3f:d8:18:3a:3d:8a:49:59:7e:64:
33:12:8e:62:7f:84:5a:81:61:15:5c:97:43:fb:ef:
76:f9:19:af:2a:14:92:5f:ec:84:d1:62:ae:d2:90:
b7:d0:d4:62:ea:98:f8:9e:b8:7f:cf:b6:24:4f:f9:
17:bb:4a:7c:f9:0c:6d:04:34:ef:7f:e2:09:1e:ed:
4b:09:19:84:33:1c:c1:e1:dd:a0:47:69:98:49:8a:
d3:fc:aa:d8:7d:60:13:aa:61:eb:8a:c9:07:ce:66:
3b:52:bf:b0:12:83:61:d2:44:19:ec:87:45:9d:f9:
9a:d0:6b:93:71:28:47:0a:10:9d:15:01:fe:97:42:
34:00:1d:35:ce:7c:96:77:f0:d7:25:5a:a5:e1:a5:
c1:07:4a:f0:4a:82:5c:c9:38:6a:a4:2a:9d:58:ce:
61:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:74:DB:E3:92:D4:59:A2:D2:E5:76:AF:A8:F0:19:AA:1F:C9:DE:E1
X509v3 Authority Key Identifier:
keyid:68:77:41:DE:15:CD:88:3C:10:DD:BC:4F:C3:A2:DC:F5:48:5E:7D:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:ef:e0:41:d1:ea:b1:73:8a:db:79:2c:d7:3b:86:58:2b:bd:
36:ab:6d:c3:39:b8:af:ee:a1:65:df:27:28:c8:9e:7c:8d:f3:
17:f4:8d:02:f3:85:b4:2b:14:8c:49:2d:19:23:b3:51:31:d5:
ad:2b:13:b5:cf:74:2a:fb:42:0c:7c:a7:3f:8d:dd:46:1a:00:
05:3d:32:86:de:35:a1:89:fa:42:0a:0c:69:1e:b9:68:f4:8b:
31:db:1a:de:a3:41:e0:ed:10:1d:a5:da:42:a9:4a:78:1a:96:
0e:d9:66:01:dd:7c:12:f0:9c:15:a5:c5:f5:fc:34:c0:e4:2d:
c6:62:74:10:af:d9:0b:86:54:19:27:0a:fc:fa:b1:56:53:7f:
13:d2:24:f1:fe:ca:0d:31:c9:6e:86:1b:82:b6:2a:3d:b5:70:
3b:a1:6d:71:b4:9e:50:ec:9a:6e:e4:6a:c9:6e:b6:e4:f3:79:
d3:c4:51:b3:e0:48:f0:67:14:88:42:bb:aa:9b:b5:6a:2f:8f:
54:2e:cd:3e:f8:f3:f0:03:09:06:23:62:21:42:55:79:8e:3a:
08:28:fb:94:ed:4f:ac:d2:6d:d1:b5:e7:43:4d:8c:cf:62:de:
a5:e6:92:d4:dc:82:9b:be:15:81:dc:ec:5b:21:ac:69:0d:a7:
d8:1e:e0:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:54:25 2026 by rpki-client