
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9118572/58AA6A7E541311F19445F17794833773/hNLiPvClu7C9V4ERjF7OZYdw0PM.mft
File: hNLiPvClu7C9V4ERjF7OZYdw0PM.mft (raw, json)
Hash identifier: zyX+iVeHQDd5zs4TR18mEj4sTRc4rcmiTJabokcoJ0c=
Subject key identifier: 34:52:96:7D:6B:46:3B:1E:47:87:DD:51:7E:53:EB:29:D1:6F:2A:4A
Authority key identifier: 84:D2:E2:3E:F0:A5:BB:B0:BD:57:81:11:8C:5E:CE:65:87:70:D0:F3
Certificate issuer: /CN=A9118572/serialNumber=84D2E23EF0A5BBB0BD5781118C5ECE658770D0F3
Certificate serial: 4C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNLiPvClu7C9V4ERjF7OZYdw0PM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118572/58AA6A7E541311F19445F17794833773/hNLiPvClu7C9V4ERjF7OZYdw0PM.mft
Manifest number: 4B
Signing time: Tue 13 Oct 2026 09:07:31 +0000
Manifest this update: Tue 13 Oct 2026 09:07:31 +0000
Manifest next update: Tue 20 Oct 2026 09:07:31 +0000
Files and hashes: 1: hNLiPvClu7C9V4ERjF7OZYdw0PM.crl (hash: 8i3iwRqS2e7xz2yVAurEUq9AMvWV6sfKCZnWT3Gyn1o=)
2: 434B951C541911F1A205AA4996833773.roa (hash: M7rzen4ve19DhDEBu/8OkXFTRebAryZoqY9bg5GuIQk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118572/58AA6A7E541311F19445F17794833773/hNLiPvClu7C9V4ERjF7OZYdw0PM.crl
rsync://rpki.apnic.net/member_repository/A9118572/58AA6A7E541311F19445F17794833773/hNLiPvClu7C9V4ERjF7OZYdw0PM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNLiPvClu7C9V4ERjF7OZYdw0PM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 09:07:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76 (0x4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118572, serialNumber=84D2E23EF0A5BBB0BD5781118C5ECE658770D0F3
Validity
Not Before: Oct 13 09:07:31 2026 GMT
Not After : Oct 20 09:07:31 2026 GMT
Subject: CN=6acdf4d3-6640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b5:56:f4:4c:f6:83:08:52:79:3c:e3:ce:8e:
9c:a2:5e:42:b3:bb:ac:c5:17:2f:c9:91:70:ad:ac:
bb:d8:c2:83:2c:a3:b1:2c:4c:10:68:b8:a0:d4:bf:
da:89:a5:7a:9d:4d:eb:00:18:72:5e:05:46:65:ed:
30:95:70:b5:f2:e8:f2:6e:de:a2:f8:fd:a6:91:13:
73:5e:6f:00:5e:1b:54:f8:f9:09:fd:6a:e3:75:1c:
eb:37:30:75:11:d2:16:56:8f:23:f3:68:ad:af:db:
36:a5:69:9e:30:c2:5d:59:68:2a:d9:2d:2d:79:34:
2c:c1:80:4d:b1:c8:e5:44:48:c7:87:59:ef:ae:b9:
07:c8:52:16:e4:ae:9a:f5:bb:9c:1e:c3:e5:a7:33:
4d:cf:c9:1f:7f:69:53:37:d0:56:9a:cc:63:fc:fc:
24:fd:c6:d4:ac:75:9d:56:81:5e:55:55:ce:19:79:
b7:90:e5:de:20:a5:e6:6e:4c:95:b2:06:a4:ee:4e:
8a:c9:34:e9:9e:4e:0a:3f:7f:7b:b8:b0:19:08:b3:
4a:cb:41:95:c3:67:67:1b:7b:94:11:46:4c:8a:a4:
11:f8:6a:e9:d7:36:ee:c8:c5:c0:e6:61:35:65:05:
53:3b:3e:59:d3:ce:ae:ca:e6:6d:37:58:48:63:e3:
79:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:52:96:7D:6B:46:3B:1E:47:87:DD:51:7E:53:EB:29:D1:6F:2A:4A
X509v3 Authority Key Identifier:
keyid:84:D2:E2:3E:F0:A5:BB:B0:BD:57:81:11:8C:5E:CE:65:87:70:D0:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118572/58AA6A7E541311F19445F17794833773/hNLiPvClu7C9V4ERjF7OZYdw0PM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNLiPvClu7C9V4ERjF7OZYdw0PM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118572/58AA6A7E541311F19445F17794833773/hNLiPvClu7C9V4ERjF7OZYdw0PM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d7:c2:8f:45:d6:97:c2:41:74:6a:74:7c:b6:a9:ee:79:e6:90:
21:78:b8:0c:1c:2d:ca:60:85:bc:3c:a1:a6:1a:98:14:5d:41:
55:a7:95:14:1e:52:99:81:3e:33:60:51:96:07:fe:81:52:5f:
09:82:74:35:48:35:51:9f:0f:6a:9e:d5:ab:f0:04:a2:a0:45:
77:64:84:f7:65:a8:c3:4f:2c:bd:1a:e3:44:6c:a6:93:4e:b0:
31:cd:a0:5f:dc:72:d9:d9:1e:0c:d4:2d:c6:85:b0:72:57:d7:
39:fd:61:e1:ec:d2:ab:59:43:ca:78:f2:09:ce:00:4a:72:05:
98:ba:08:05:73:e7:bf:2b:8c:a7:8b:63:e1:35:07:86:5c:01:
8f:db:32:c9:a8:62:d9:18:91:d4:3d:16:60:74:fb:67:d1:38:
62:56:43:ed:a7:1d:b1:c1:ef:e5:7e:7d:0c:bf:b8:02:23:62:
c5:4b:87:6b:2e:b7:85:42:02:d4:67:ce:86:44:8e:e9:c8:4c:
b0:a5:22:5c:ac:28:7b:4e:99:89:fa:41:3f:4b:c5:4c:06:65:
21:1a:32:88:86:d2:6d:ef:d6:9e:6b:6a:c8:b4:c5:9e:2a:fe:
8f:d2:03:0b:7e:cc:d2:4a:be:94:69:22:96:55:4c:46:1f:26:
d5:e7:e7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:50:34 2026 by rpki-client