
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft
File: HmeMaiF9cVsw2csi1fiE0XxWmbY.mft (raw, json)
Hash identifier: vmxx4FrBMVcSqEsGGvy5G3AwrgEWMPNu6Qul90G4wiM=
Subject key identifier: 99:3E:D7:8E:F0:A5:15:72:F6:90:A4:85:56:E0:CD:63:06:10:2E:10
Authority key identifier: 1E:67:8C:6A:21:7D:71:5B:30:D9:CB:22:D5:F8:84:D1:7C:56:99:B6
Certificate issuer: /CN=A9133953/serialNumber=1E678C6A217D715B30D9CB22D5F884D17C5699B6
Certificate serial: 198F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft
Manifest number: 1963
Signing time: Thu 24 Sep 2026 16:23:36 +0000
Manifest this update: Thu 24 Sep 2026 16:23:36 +0000
Manifest next update: Thu 01 Oct 2026 16:23:36 +0000
Files and hashes: 1: HmeMaiF9cVsw2csi1fiE0XxWmbY.crl (hash: OTPy2n92flKb+9BxrRATODENvCHsnWqaUsD9vMEKxoc=)
2: 3DC507001C8F11E9990F665CC4F9AE02.roa (hash: KNHL/L5tyBmlAfdw55D3rrTekY6agqcXrKB3/U0Q+x8=)
3: A55682E0821A11EE9104BB68C4F9AE02.roa (hash: uds8VZP/Cnzq4ik9TsZtEgZFHT8utwL0NugztHyo5wA=)
4: D34372461C8D11E9B21BD858C4F9AE02.roa (hash: 0aZHDcufdZQ7dDzrjinBuGWb3k3ed9FsQLE77AphBaA=)
5: A2BE54D2228B11F09A2FAA12C4F9AE02.roa (hash: 3eZlHcsbneHOE1MVSFtkIXyL5kgfcrV5bb38+q+WXH4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.crl
rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 16:23:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6543 (0x198f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133953, serialNumber=1E678C6A217D715B30D9CB22D5F884D17C5699B6
Validity
Not Before: Sep 24 16:23:36 2026 GMT
Not After : Oct 1 16:23:36 2026 GMT
Subject: CN=6ab54e88-7748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5a:c0:69:21:b4:ee:1b:78:33:4f:ae:39:3a:
93:d3:08:37:a2:6c:f1:2c:c5:78:d4:fb:95:6d:74:
0e:49:0f:74:66:01:de:28:86:46:9c:9d:bb:d2:a9:
21:e2:66:55:36:80:0d:df:5f:65:9b:b1:f9:de:bb:
f4:67:01:ca:e1:3d:90:6c:c0:eb:7e:51:61:92:1b:
69:1c:8e:9c:0c:ae:c3:1e:5b:fb:5a:f9:55:2c:3e:
ce:f0:75:b1:55:4b:d5:5e:a4:90:46:78:dc:f9:de:
ef:d6:3f:b1:a5:ed:d7:c4:ae:4b:4a:cd:0a:35:07:
5c:58:ff:16:1b:55:b6:e2:9c:c9:bb:76:33:8b:0e:
7a:13:e3:95:71:bf:a8:54:58:0f:c4:c5:4d:9b:d2:
b1:8d:ff:96:d9:b7:2a:00:a4:4a:45:ba:b0:6f:46:
ee:ae:74:90:db:27:5a:c3:f0:73:d2:b2:22:84:de:
e4:62:54:1c:30:3d:30:c0:78:bd:c8:db:35:14:17:
9f:97:ee:2a:78:ff:1f:4f:b8:01:88:0a:68:6d:3b:
39:be:57:00:4b:83:aa:87:d2:d1:a4:19:c6:6c:4f:
62:66:c5:a2:2f:fd:5a:4f:b0:1a:9e:f4:4e:73:65:
03:3b:07:cd:19:7d:b6:b4:28:2a:43:1d:dd:55:03:
d1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:3E:D7:8E:F0:A5:15:72:F6:90:A4:85:56:E0:CD:63:06:10:2E:10
X509v3 Authority Key Identifier:
keyid:1E:67:8C:6A:21:7D:71:5B:30:D9:CB:22:D5:F8:84:D1:7C:56:99:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:5d:3e:ee:aa:36:0b:3f:dc:00:07:7d:5e:0e:a4:cd:c9:70:
8b:3b:a6:4d:43:99:bc:03:b5:be:2c:6d:1e:b1:31:58:f6:07:
b3:4b:54:93:77:62:d5:4f:3e:65:b9:b8:1b:0a:41:0e:f8:4b:
af:5a:35:b8:29:dc:2a:7c:7b:3c:7d:2b:90:89:18:79:96:67:
39:2a:f5:d1:b8:84:2c:93:6c:6e:00:d4:59:e8:c5:95:d0:17:
1a:75:cd:ae:16:5f:eb:66:76:f3:37:15:3c:59:80:42:0c:62:
17:6d:5e:1b:4d:b1:6f:3d:30:53:01:e1:b8:10:dc:61:f3:a1:
f3:7a:e8:45:a6:f4:0f:dd:54:92:82:d7:30:1e:c0:f2:06:23:
1c:b7:53:51:4b:5b:ba:34:7e:19:88:73:1f:8e:00:00:4f:ed:
54:f2:11:87:b7:2b:e0:43:83:0a:d7:84:5f:eb:93:08:e4:29:
2a:6e:5b:46:b6:8d:76:ca:f5:02:89:ef:7e:a7:db:f6:f1:1d:
07:ef:53:7c:8b:5b:a9:ce:59:aa:fb:66:06:0a:9d:bb:87:55:
57:e2:44:2e:aa:ba:07:06:ea:53:b0:52:3c:89:94:03:0a:f8:
86:15:56:49:8c:e8:3b:f7:bd:50:9f:17:6d:89:44:35:57:91:
8d:fb:a8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:06:33 2026 by rpki-client