
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/h19AAhxtQ7BO_olKf8FcxPbtibo.mft
File: h19AAhxtQ7BO_olKf8FcxPbtibo.mft (raw, json)
Hash identifier: IHh6K25Nl/HMOSDLi1kphca4wfvR0HItUAi1H5fTITk=
Subject key identifier: 0D:3B:BE:71:A5:52:04:09:5B:DA:C8:72:9D:77:95:21:05:06:7F:A0
Authority key identifier: 87:5F:40:02:1C:6D:43:B0:4E:FE:89:4A:7F:C1:5C:C4:F6:ED:89:BA
Certificate issuer: /CN=A91151C9/serialNumber=875F40021C6D43B04EFE894A7FC15CC4F6ED89BA
Certificate serial: 18E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h19AAhxtQ7BO_olKf8FcxPbtibo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/h19AAhxtQ7BO_olKf8FcxPbtibo.mft
Manifest number: 18C5
Signing time: Tue 22 Sep 2026 16:25:17 +0000
Manifest this update: Tue 22 Sep 2026 16:25:17 +0000
Manifest next update: Tue 29 Sep 2026 16:25:17 +0000
Files and hashes: 1: h19AAhxtQ7BO_olKf8FcxPbtibo.crl (hash: 1JodicBADT28oO3VALq1zy67afTVmRP2NyNnaBwRRnU=)
2: A652A68C3DB911EFACDF8C75C4F9AE02.roa (hash: rehHNVoMzYrcbyHR3xn9AScPl8hoBFDtA7CJ2MlnTrM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/h19AAhxtQ7BO_olKf8FcxPbtibo.crl
rsync://rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/h19AAhxtQ7BO_olKf8FcxPbtibo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h19AAhxtQ7BO_olKf8FcxPbtibo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 16:25:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6368 (0x18e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91151C9, serialNumber=875F40021C6D43B04EFE894A7FC15CC4F6ED89BA
Validity
Not Before: Sep 22 16:25:17 2026 GMT
Not After : Sep 29 16:25:17 2026 GMT
Subject: CN=6ab2abed-a878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f0:84:07:02:1e:e5:c9:74:f0:fa:a1:9e:92:
b8:5a:59:7b:9e:fd:bb:97:7c:77:7a:a3:bb:36:94:
4b:3e:81:58:01:be:63:45:8d:8f:54:15:1e:bf:24:
5e:62:f9:6d:80:6c:d6:18:0b:cc:cf:a1:d4:d6:d3:
1e:a4:c7:08:22:e0:8f:db:e0:ac:9b:51:7f:6e:4a:
7f:c8:9e:37:07:6e:95:4b:4e:1f:61:e3:f9:0a:de:
20:47:c2:f0:ee:dc:c9:9b:07:57:56:3e:6b:9d:a1:
8c:74:cb:93:a8:34:16:67:3e:6f:16:bc:c7:a2:a9:
01:86:4b:e2:5c:60:9b:26:09:73:25:f0:d5:e8:42:
c4:dc:c3:57:ea:5c:0d:8e:cc:80:b4:7e:0f:4d:ce:
4d:3c:ba:f1:1e:e1:34:65:e9:d7:6e:16:76:c4:a5:
61:a9:40:12:cc:00:f4:3f:ca:40:20:bb:02:19:10:
0a:29:4c:65:64:25:c4:fd:b3:97:ea:4e:df:79:e1:
ed:7e:af:84:cd:41:cd:9b:86:bd:01:fd:fe:92:71:
55:e2:3a:a7:b1:49:e8:52:17:56:e3:24:0b:19:46:
c7:ab:97:53:89:3d:ec:d9:97:49:e2:78:45:59:45:
a3:64:e6:0f:7e:9e:5c:44:86:be:1f:77:46:2e:59:
82:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:3B:BE:71:A5:52:04:09:5B:DA:C8:72:9D:77:95:21:05:06:7F:A0
X509v3 Authority Key Identifier:
keyid:87:5F:40:02:1C:6D:43:B0:4E:FE:89:4A:7F:C1:5C:C4:F6:ED:89:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/h19AAhxtQ7BO_olKf8FcxPbtibo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h19AAhxtQ7BO_olKf8FcxPbtibo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/h19AAhxtQ7BO_olKf8FcxPbtibo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:2c:9a:7f:a0:8d:6c:82:4e:26:39:a7:32:83:b2:dc:d3:a3:
9a:f5:e1:ab:b7:73:5c:ed:5f:a9:17:96:95:2a:8a:ef:26:1d:
fd:74:0b:23:ac:39:1d:51:31:68:f7:8d:c1:d1:28:c5:3b:ff:
11:69:70:93:37:4a:95:d2:8b:e4:93:51:cf:09:d6:55:39:e6:
48:ee:28:14:ff:e6:e6:a9:1e:8f:ce:74:03:5e:00:0c:fa:26:
6e:c3:f9:ea:a3:79:5c:cb:fc:9a:8d:ac:4d:b1:2d:6b:09:9f:
b7:fa:50:5d:5c:e0:03:f2:24:b4:e0:c8:db:0c:5c:3c:2e:06:
2f:b3:af:22:b1:2f:b6:a2:bf:10:98:b9:45:31:4d:c6:cd:7a:
a8:72:a3:b8:ea:b8:e7:9f:be:33:2c:65:e9:51:c6:58:bc:83:
ed:25:96:78:2a:cd:58:bb:2e:24:16:cb:8b:3e:48:35:9e:f6:
fb:74:e9:e1:33:d6:77:2e:57:52:7d:b8:9c:c9:33:c8:f9:14:
5a:49:b7:39:7c:63:2c:69:c9:31:a0:be:8b:11:69:48:b1:87:
8c:31:0a:48:9f:b4:7b:d0:9a:82:ec:31:d5:56:c5:32:52:43:
b4:60:97:1f:7f:04:79:7c:17:5e:d0:fa:0a:ce:67:60:5e:2e:
6a:6c:b1:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:03:24 2026 by rpki-client