
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.mft
File: hn09aLZZeAOvVkZcDptTq2Z7cqg.mft (raw, json)
Hash identifier: NBKzFh0vGGXsAYQHTsUrMfuatp5rHeiLs39Byab3Gmg=
Subject key identifier: EC:56:0B:12:80:5C:EB:AA:0C:84:E3:B8:6B:36:56:72:D7:94:DF:95
Authority key identifier: 86:7D:3D:68:B6:59:78:03:AF:56:46:5C:0E:9B:53:AB:66:7B:72:A8
Certificate issuer: /CN=A912CDC5/serialNumber=867D3D68B6597803AF56465C0E9B53AB667B72A8
Certificate serial: 076A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hn09aLZZeAOvVkZcDptTq2Z7cqg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.mft
Manifest number: 0762
Signing time: Tue 22 Sep 2026 21:28:40 +0000
Manifest this update: Tue 22 Sep 2026 21:28:39 +0000
Manifest next update: Tue 29 Sep 2026 21:28:39 +0000
Files and hashes: 1: hn09aLZZeAOvVkZcDptTq2Z7cqg.crl (hash: 7de/H+ndkONy/9FAUBjgcnItPG8GT9uMQDY1xui5us0=)
2: 4EC5B52480B811EBBEE2CA7FC4F9AE02.roa (hash: oGpaoJnN0XSnyU8TN0NZVM9McHxZfbUaTEUnM8LnSNk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.crl
rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hn09aLZZeAOvVkZcDptTq2Z7cqg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 21:28:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1898 (0x76a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912CDC5, serialNumber=867D3D68B6597803AF56465C0E9B53AB667B72A8
Validity
Not Before: Sep 22 21:28:39 2026 GMT
Not After : Sep 29 21:28:39 2026 GMT
Subject: CN=6ab2f308-88d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:74:0c:46:71:68:de:b2:cc:c2:d6:73:9d:2e:
84:ab:1b:cf:14:b0:2e:79:ec:f0:ed:ec:ca:d2:e4:
87:4d:bd:ea:87:fe:94:4d:68:a6:cf:0a:4b:11:3a:
23:1b:7a:93:a3:62:25:a0:a7:a5:ee:76:11:b4:65:
c0:fa:99:b7:9f:1e:77:0c:61:c6:88:85:52:e3:59:
f3:a2:54:06:ea:eb:0d:53:32:7d:da:15:a7:f5:5d:
6e:b4:03:c5:a7:a4:24:e5:0b:d6:9a:4e:cb:fa:10:
23:56:2b:3a:d9:30:c3:db:85:2e:ff:10:46:11:97:
71:90:94:a9:43:97:6c:ed:d3:2b:6e:6f:ec:7b:f7:
d6:57:34:30:af:fd:fa:12:67:4b:e2:6e:d0:a1:3b:
ea:c7:2e:9a:fe:ca:97:a5:a5:a8:1a:26:39:a6:ba:
0a:d4:b9:4b:31:1b:13:19:be:77:29:fb:69:be:46:
85:76:8c:a7:b4:d9:77:66:c8:8d:c6:60:07:d8:c5:
e1:cb:85:dc:79:c5:df:7e:85:6c:e9:66:29:f1:88:
f4:9d:07:28:36:0c:1c:77:c1:53:d3:a2:9c:68:77:
b0:b1:8a:f6:d2:16:38:81:f1:69:3e:7b:ad:9f:bc:
d3:e5:e9:c8:44:e5:67:82:c4:cc:b3:b2:6e:47:b2:
76:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:56:0B:12:80:5C:EB:AA:0C:84:E3:B8:6B:36:56:72:D7:94:DF:95
X509v3 Authority Key Identifier:
keyid:86:7D:3D:68:B6:59:78:03:AF:56:46:5C:0E:9B:53:AB:66:7B:72:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hn09aLZZeAOvVkZcDptTq2Z7cqg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:c2:aa:5a:ec:72:be:f7:bf:03:3e:38:fa:3e:8d:40:b6:a3:
3c:3f:76:c9:2a:7c:dd:37:50:ee:45:2a:5c:1c:8a:1c:bb:4f:
e3:08:a0:9a:61:af:d4:8c:a0:32:f4:7d:32:f9:95:95:a6:b9:
68:e1:11:6d:0c:30:97:0b:f5:12:ee:5c:8e:8e:17:7d:de:8b:
0d:6d:76:0a:80:0c:d5:1e:0b:a5:fc:96:87:8c:5e:eb:05:a5:
89:a6:47:57:39:2a:7d:37:57:38:b0:e2:4a:dc:03:13:2f:35:
c0:fd:cc:c5:d6:ce:62:5b:79:79:43:87:68:3b:4d:ec:b2:97:
4b:94:e3:44:5b:ab:e7:47:05:5b:13:24:3f:50:d4:be:1a:1c:
70:da:aa:51:dd:de:24:a2:17:ee:3d:0e:a5:87:99:a2:0c:cd:
4c:1c:81:b5:bd:f3:fa:3d:9b:c3:08:9d:f4:e7:9d:d1:26:92:
c7:d2:8d:b9:6a:8e:33:bd:aa:3c:77:41:df:9e:50:d0:48:1e:
7a:b1:a4:fe:ee:76:4d:4c:3e:de:f8:7e:81:81:99:ec:2d:af:
2a:ea:1b:f4:9e:b1:25:a6:08:99:2d:1f:a0:30:45:6b:35:3c:
61:9e:85:4d:0d:da:df:41:20:2f:eb:82:34:69:6f:41:f9:74:
80:fa:54:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:02:11 2026 by rpki-client