
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft
File: fHyggZUNrvx8VLjERpi0jo18abg.mft (raw, json)
Hash identifier: vj9VMwHANX8J8bZzou4jh8qPLoNazT/J2neXQJQy2yI=
Subject key identifier: 0B:04:36:88:22:66:E9:EE:6B:CC:64:5A:D3:1C:5D:A6:2B:3D:55:84
Authority key identifier: 7C:7C:A0:81:95:0D:AE:FC:7C:54:B8:C4:46:98:B4:8E:8D:7C:69:B8
Certificate issuer: /CN=A9136DD6/serialNumber=7C7CA081950DAEFC7C54B8C44698B48E8D7C69B8
Certificate serial: 113B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft
Manifest number: 110D
Signing time: Tue 24 Mar 2026 17:11:53 +0000
Manifest this update: Tue 24 Mar 2026 17:11:52 +0000
Manifest next update: Tue 31 Mar 2026 17:11:52 +0000
Files and hashes: 1: fHyggZUNrvx8VLjERpi0jo18abg.crl (hash: 4EdWyStkRKf5PlAkqPU1Ln+CPU3xh79NBJ2PVEvIdfA=)
2: 658A332E5C0311E999AF9478C4F9AE02.roa (hash: BZB39lC5xOkcP/b7gbdWDXa93HHDVKpHwXaLJhvFunQ=)
3: 5FADE68E288811EE97A1EC5CC4F9AE02.roa (hash: WQc9hbcV/9/ZJvWP0KRffXJvpdZU9wVHnwh3amFuHz0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.crl
rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 17:11:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4411 (0x113b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136DD6, serialNumber=7C7CA081950DAEFC7C54B8C44698B48E8D7C69B8
Validity
Not Before: Mar 24 17:11:52 2026 GMT
Not After : Mar 31 17:11:52 2026 GMT
Subject: CN=69c2c5d9-a593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:02:f7:fc:4b:e8:37:0a:8f:62:08:98:ce:bb:
cb:f9:b2:f0:3e:d0:6b:e8:5b:60:2a:10:e7:b1:ac:
64:28:ea:5f:ae:2c:ee:dc:9f:7c:c3:0d:c2:fb:4e:
0f:ee:ef:87:2d:7c:57:c6:21:3d:00:48:64:74:51:
eb:00:a1:b3:a7:59:7d:1d:43:28:4d:f8:f7:a8:8a:
39:49:68:f2:2d:71:b3:bc:7f:bf:28:40:17:91:9d:
a9:21:c5:56:71:67:34:c0:1a:9b:ac:84:ea:70:f0:
c9:74:9c:d8:85:ad:73:1f:f4:b0:2f:66:1e:c8:d7:
c3:e3:e2:1a:a6:8a:d8:20:e1:da:43:af:78:d9:3c:
22:3e:d3:40:6f:18:2e:2e:18:6f:3f:23:b2:e4:2a:
81:44:0b:64:db:d3:53:71:f0:ce:85:c4:c4:6d:6d:
5d:e4:28:3c:18:d9:d7:5e:e8:1e:60:37:2a:8f:81:
db:aa:92:2f:93:db:07:e9:81:d6:9b:16:d9:a0:60:
1a:b1:82:d7:31:e8:47:11:9d:f2:4e:9b:3b:9f:ca:
67:5e:80:90:92:85:f4:d1:c6:57:81:09:ce:d9:a2:
b1:1e:d4:6c:0e:63:7e:90:95:e0:af:3e:fb:a5:8b:
ba:c7:09:3e:68:31:53:22:5b:fd:3b:b6:ee:10:95:
0f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:04:36:88:22:66:E9:EE:6B:CC:64:5A:D3:1C:5D:A6:2B:3D:55:84
X509v3 Authority Key Identifier:
keyid:7C:7C:A0:81:95:0D:AE:FC:7C:54:B8:C4:46:98:B4:8E:8D:7C:69:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:4d:5b:74:27:b6:d1:72:32:23:55:91:47:91:f6:20:44:a4:
b9:8c:ed:e8:9f:15:03:af:da:82:72:76:5c:c2:d6:76:92:15:
77:fc:73:56:31:8f:98:8f:12:b2:72:d0:d3:cc:19:4f:a5:9e:
ef:19:82:cf:5b:6e:c4:a9:9e:b8:bd:e4:4c:58:44:74:68:cd:
60:c4:0b:d8:51:3d:d2:2e:54:03:81:99:02:4c:2b:60:87:9c:
10:72:fe:53:59:a9:23:df:87:86:48:3b:0f:75:04:fe:18:f6:
4d:cc:a2:9a:9a:55:34:98:fd:94:b9:6e:a6:bd:30:b6:46:48:
2f:3f:c1:5a:12:53:a5:e4:c8:f0:2c:f3:24:0a:15:92:10:c2:
ce:e2:f5:d5:3c:3f:5d:b7:84:73:42:9c:14:43:a3:ed:60:5a:
9e:03:5d:18:30:39:de:06:ed:f2:7d:1a:51:bc:0d:0c:1d:99:
c3:b4:15:36:a7:e6:e4:64:2d:01:f7:55:59:95:fc:83:d1:42:
25:27:3b:ea:9b:44:24:05:5e:9c:75:75:57:12:2d:19:bb:bc:
76:e0:9c:7d:cd:47:8a:fc:fc:81:3e:de:21:9a:2e:28:9e:8e:
71:aa:6c:16:df:78:e1:f4:2f:87:fa:a7:11:7e:9f:37:13:8c:
f3:dd:20:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:30:55 2026 by rpki-client