
$ rpki-client -vvf rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft
File: H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft (raw, json)
Hash identifier: i8WNY7diaJRASgoQSnh4+zjF2UvXNO92be1cUotuUG8=
Subject key identifier: 8E:CF:E8:F9:D5:C2:D9:B5:28:3F:B6:10:96:FF:88:80:5E:80:B5:A8
Authority key identifier: 1F:D5:A1:82:D5:93:34:75:70:F2:D9:18:6D:24:84:C9:09:5C:5F:FB
Certificate issuer: /CN=A912708C/serialNumber=1FD5A182D593347570F2D9186D2484C9095C5FFB
Certificate serial: 069D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9WhgtWTNHVw8tkYbSSEyQlcX_s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft
Manifest number: 0694
Signing time: Wed 22 Jul 2026 23:11:11 +0000
Manifest this update: Wed 22 Jul 2026 23:11:11 +0000
Manifest next update: Wed 29 Jul 2026 23:11:11 +0000
Files and hashes: 1: H9WhgtWTNHVw8tkYbSSEyQlcX_s.crl (hash: LwyUAg7FsAQ9cq3s9mAiYKk7N/4KxBvcQvQ2ekFO+Ek=)
2: 8AA59866C55511EBA7DB557EC4F9AE02.roa (hash: U5SVHSqfAtFqllA4pS+cC/mt0EepiCEBUnphM+qpIOc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.crl
rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9WhgtWTNHVw8tkYbSSEyQlcX_s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:11:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1693 (0x69d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912708C, serialNumber=1FD5A182D593347570F2D9186D2484C9095C5FFB
Validity
Not Before: Jul 22 23:11:11 2026 GMT
Not After : Jul 29 23:11:11 2026 GMT
Subject: CN=6a614e0f-d1ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:59:05:8c:15:e3:d3:bd:78:1f:b9:be:14:ad:
49:8e:98:ff:ef:2a:a6:cb:10:4e:2d:85:62:c5:15:
3f:38:0f:b3:aa:33:ce:22:bc:85:7d:30:1b:1a:12:
14:be:0c:87:06:78:ad:06:68:f5:dd:c3:e9:d8:ca:
b1:bd:ba:2d:f9:a7:87:fb:b7:c7:ca:3c:53:0c:05:
87:4a:79:ca:87:cb:4c:3c:8a:1e:42:1a:c9:2b:ad:
e0:25:9a:85:6f:da:d4:b9:af:5a:8e:46:c5:cf:35:
e8:4f:84:58:a2:31:af:26:0e:f2:20:e6:9b:a2:b7:
ce:a0:ad:33:58:a7:6d:d6:52:37:6c:86:2a:23:e2:
64:96:89:ec:a7:2e:73:42:46:81:cb:8d:95:a9:f9:
cd:64:62:45:98:f9:62:bc:c9:3a:41:8f:91:37:8b:
97:34:02:96:bc:02:a0:db:c2:ad:89:29:b4:f1:6c:
60:ef:8f:76:dd:e2:62:8f:ff:09:93:0d:59:fd:2d:
7d:cf:57:27:9e:cc:55:38:fb:73:4f:47:19:50:1c:
60:e1:b4:e8:26:19:00:5e:5a:a9:aa:c0:67:f4:98:
bd:58:c4:aa:b0:1d:43:00:92:d0:fc:3c:e9:7d:8b:
5f:59:6e:1d:33:fb:8c:56:30:4f:ea:56:f7:a8:26:
07:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:CF:E8:F9:D5:C2:D9:B5:28:3F:B6:10:96:FF:88:80:5E:80:B5:A8
X509v3 Authority Key Identifier:
keyid:1F:D5:A1:82:D5:93:34:75:70:F2:D9:18:6D:24:84:C9:09:5C:5F:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9WhgtWTNHVw8tkYbSSEyQlcX_s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:9d:fd:cc:83:6d:11:75:dc:3e:89:7e:62:60:31:cb:35:ba:
a3:65:02:63:26:bf:58:91:f2:6e:82:91:cb:fc:47:97:2b:24:
c7:4f:11:05:56:65:53:93:28:1c:de:82:11:ae:92:5c:60:54:
68:59:63:c2:f5:5d:02:ea:5a:ff:4f:11:2b:56:ba:db:c1:23:
fb:dc:44:c9:66:4f:71:9b:77:75:7b:66:16:32:6f:56:ce:9f:
f9:e5:7d:0e:f2:f8:e3:87:99:74:9c:49:d3:de:08:62:85:7c:
e6:c5:ca:77:e0:ac:77:ec:fb:f2:04:b3:8b:31:73:a3:bc:a6:
1b:17:11:8c:59:49:61:ea:97:7d:c2:71:a1:1a:2d:05:80:d7:
ea:0b:de:e2:67:f0:76:88:6b:48:35:7e:64:cf:df:cd:72:58:
37:4b:b2:e9:17:a6:a1:33:a3:c2:30:8b:24:ca:df:8d:fa:87:
50:01:28:ca:d2:31:fc:b5:75:12:c1:1d:01:89:fb:a6:1f:34:
30:5a:d9:20:66:e9:df:b7:d5:36:73:40:23:8e:d5:d7:f2:d1:
dc:04:2e:b7:b1:6c:ab:cf:b7:85:87:ba:42:41:8e:6f:e1:c7:
29:ae:4c:2a:f0:8b:55:2d:93:1a:0c:25:0a:d3:3e:eb:0a:4b:
0a:f2:50:0e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjcwOEMxMTAvBgNVBAUTKDFGRDVBMTgyRDU5MzM0NzU3MEYyRDkxODZEMjQ4NEM5
MDk1QzVGRkIwHhcNMjYwNzIyMjMxMTExWhcNMjYwNzI5MjMxMTExWjAYMRYwFAYD
VQQDEw02YTYxNGUwZi1kMWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp1kFjBXj0714H7m+FK1Jjpj/7yqmyxBOLYVixRU/OA+zqjPOIryFfTAbGhIU
vgyHBnitBmj13cPp2Mqxvbot+aeH+7fHyjxTDAWHSnnKh8tMPIoeQhrJK63gJZqF
b9rUua9ajkbFzzXoT4RYojGvJg7yIOaborfOoK0zWKdt1lI3bIYqI+Jklonspy5z
QkaBy42VqfnNZGJFmPlivMk6QY+RN4uXNAKWvAKg28KtiSm08Wxg74923eJij/8J
kw1Z/S19z1cnnsxVOPtzT0cZUBxg4bToJhkAXlqpqsBn9Ji9WMSqsB1DAJLQ/Dzp
fYtfWW4dM/uMVjBP6lb3qCYHmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI7P6PnV
wtm1KD+2EJb/iIBegLWoMB8GA1UdIwQYMBaAFB/VoYLVkzR1cPLZGG0khMkJXF/7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzA4Qy8xNjgwMzRGRUM1
NTExMUVCQTAxOEJDNzVDNEY5QUUwMi9IOVdoZ3RXVE5IVnc4dGtZYlNTRXlRbGNY
X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0g5V2hndFdUTkhWdzh0a1liU1NFeVFsY1hfcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NzA4Qy8xNjgwMzRGRUM1NTExMUVCQTAxOEJDNzVDNEY5QUUwMi9IOVdoZ3RXVE5I
Vnc4dGtZYlNTRXlRbGNYX3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQZ39zINtEXXcPol+YmAxyzW6o2UCYya/WJHyboKRy/xHlyskx08RBVZlU5Mo
HN6CEa6SXGBUaFljwvVdAupa/08RK1a628Ej+9xEyWZPcZt3dXtmFjJvVs6f+eV9
DvL444eZdJxJ094IYoV85sXKd+Csd+z78gSzizFzo7ymGxcRjFlJYeqXfcJxoRot
BYDX6gve4mfwdohrSDV+ZM/fzXJYN0uy6RemoTOjwjCLJMrfjfqHUAEoytIx/LV1
EsEdAYn7ph80MFrZIGbp37fVNnNAI47V1/LR3AQut7Fsq8+3hYe6QkGOb+HHKa5M
KvCLVS2TGgwlCtM+6wpLCvJQDg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:45:27 2026 by rpki-client