
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft
File: aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft (raw, json)
Hash identifier: rkngtslWrAaBa+19ZOxZmSUGPt+mccL9sclKmIp3Yvs=
Subject key identifier: 60:4F:4F:44:21:A1:85:36:52:A8:05:C1:F6:23:72:B3:FE:37:EA:D8
Authority key identifier: 68:77:41:DE:15:CD:88:3C:10:DD:BC:4F:C3:A2:DC:F5:48:5E:7D:F3
Certificate issuer: /CN=A9114D4F/serialNumber=687741DE15CD883C10DDBC4FC3A2DCF5485E7DF3
Certificate serial: 0197
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft
Manifest number: 0191
Signing time: Fri 25 Sep 2026 04:30:20 +0000
Manifest this update: Fri 25 Sep 2026 04:30:19 +0000
Manifest next update: Fri 02 Oct 2026 04:30:19 +0000
Files and hashes: 1: aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl (hash: 51zZJMEY0S0lzVOq5k8BDA5cAjAHhxvg6L53G2s1Qw8=)
2: B70A38DCABD111F08E516516C4F9AE02.roa (hash: ej0+6PRzXsgl/obiA4CQWCET70nEM66QMDL6LuBaewE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl
rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 03:50:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 407 (0x197)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114D4F, serialNumber=687741DE15CD883C10DDBC4FC3A2DCF5485E7DF3
Validity
Not Before: Sep 25 04:30:19 2026 GMT
Not After : Oct 2 04:30:19 2026 GMT
Subject: CN=6ab5f8dc-f249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:39:13:99:ed:b9:79:28:2f:ed:a4:ed:59:90:
cd:f9:84:d0:e2:a6:8f:69:3b:3e:23:c1:47:d9:0c:
57:7f:a8:36:8b:ca:99:1b:b0:21:7d:92:2a:3a:e4:
d2:29:48:21:23:80:ea:d0:4d:d4:40:b1:84:2d:0b:
55:dd:b7:24:98:d4:f8:2c:f0:a3:ff:54:20:14:46:
61:25:f5:f6:13:1a:b2:40:7b:4e:03:a9:b9:f6:9d:
70:10:af:b4:f2:00:c4:83:6c:dd:50:8a:7d:3e:e6:
4e:5d:95:0e:74:c8:e0:32:cc:17:da:6d:52:ae:79:
ad:f9:df:1d:ed:42:0e:aa:72:b4:34:51:e9:3f:0a:
d0:06:ad:13:00:5f:0e:99:39:90:56:34:9f:50:8b:
7c:30:f2:00:48:8c:89:bb:77:10:8b:a4:c2:63:e4:
86:94:c9:90:ae:7b:14:2a:16:49:db:7e:c4:96:2f:
95:64:60:4c:d0:3c:0d:39:5a:a6:8d:9f:76:fe:98:
8f:25:6d:d9:bc:1b:09:b2:0c:bf:a8:25:bb:fc:38:
38:9e:12:28:53:49:c0:6a:49:78:9f:d5:ca:9e:a9:
62:b2:7a:b9:29:80:42:5d:81:3f:15:2a:50:a8:4e:
d4:b5:10:9b:f6:a3:a8:25:8f:fe:7b:d4:a6:11:a6:
c7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:4F:4F:44:21:A1:85:36:52:A8:05:C1:F6:23:72:B3:FE:37:EA:D8
X509v3 Authority Key Identifier:
keyid:68:77:41:DE:15:CD:88:3C:10:DD:BC:4F:C3:A2:DC:F5:48:5E:7D:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:e0:4a:d1:96:f5:45:cd:b8:ff:0a:fc:b0:b5:96:39:03:f9:
70:80:f4:e9:f4:2b:e3:95:3f:60:34:4f:02:d5:61:ac:e5:84:
b6:c1:b9:43:d6:3f:f5:b6:23:8c:0b:97:d3:c8:68:0f:51:b4:
31:ae:58:0d:cf:80:42:3a:b3:49:19:0f:dd:ab:a7:93:82:87:
75:2c:c3:61:be:99:37:b6:14:ab:49:74:b5:ea:0b:56:19:6f:
33:10:42:3a:1e:2b:17:5a:5d:85:3c:f2:e4:11:92:32:63:1a:
25:33:62:ae:75:ef:c8:14:83:e2:35:6e:ed:9d:ed:2e:2d:9e:
4c:6d:6f:f9:2a:0a:24:d4:b5:2f:30:69:cf:f5:ef:2a:5e:33:
f1:77:79:d5:90:29:01:d5:e7:f8:c7:0e:c1:81:5e:46:b7:40:
6f:72:12:54:53:f7:0b:c2:bb:5e:b9:cf:f7:2a:1c:ef:42:5e:
23:9b:ce:25:52:6d:d9:a0:eb:5a:2b:30:bd:18:5a:cc:64:30:
86:7d:05:99:ae:2b:31:b0:60:93:57:37:9e:d7:e2:ea:dc:6c:
6c:89:09:14:0e:2f:4d:41:a5:79:1a:7f:7b:34:9b:8b:33:f6:
ac:73:fd:d9:87:98:d4:dc:88:47:85:b5:84:7a:52:d4:5d:28:
3a:e9:27:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:35:59 2026 by rpki-client