
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft
File: fHyggZUNrvx8VLjERpi0jo18abg.mft (raw, json)
Hash identifier: 8TquCrDcgcWu+kPGjOKQVofdq+2bTv8dZ+Raq5DmX0E=
Subject key identifier: 32:46:28:75:A8:DA:B1:EA:67:95:2D:D5:29:0E:04:21:27:27:76:BD
Authority key identifier: 7C:7C:A0:81:95:0D:AE:FC:7C:54:B8:C4:46:98:B4:8E:8D:7C:69:B8
Certificate issuer: /CN=A9136DD6/serialNumber=7C7CA081950DAEFC7C54B8C44698B48E8D7C69B8
Certificate serial: 1154
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft
Manifest number: 1126
Signing time: Tue 12 May 2026 17:19:11 +0000
Manifest this update: Tue 12 May 2026 17:19:11 +0000
Manifest next update: Tue 19 May 2026 17:19:11 +0000
Files and hashes: 1: fHyggZUNrvx8VLjERpi0jo18abg.crl (hash: zjknXJ1sBSGacKPPSaxdbk0/BdjVl+PnNWRZYrf0iS8=)
2: 658A332E5C0311E999AF9478C4F9AE02.roa (hash: BZB39lC5xOkcP/b7gbdWDXa93HHDVKpHwXaLJhvFunQ=)
3: 5FADE68E288811EE97A1EC5CC4F9AE02.roa (hash: WQc9hbcV/9/ZJvWP0KRffXJvpdZU9wVHnwh3amFuHz0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.crl
rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4436 (0x1154)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136DD6, serialNumber=7C7CA081950DAEFC7C54B8C44698B48E8D7C69B8
Validity
Not Before: May 12 17:19:11 2026 GMT
Not After : May 19 17:19:11 2026 GMT
Subject: CN=6a03610f-67e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8f:b1:1d:c4:f3:08:1e:18:28:0b:0f:d6:e4:
3a:09:7b:82:66:7b:14:8e:b0:4a:b3:26:60:d2:b9:
a2:19:35:25:93:85:3e:a1:60:87:b7:39:ff:fb:dd:
9b:ac:ed:58:9e:53:39:6b:76:36:6b:b5:7d:17:7c:
37:bf:3c:26:d8:9d:0f:96:a9:c4:c9:ad:5a:a1:14:
20:62:23:ea:d2:0b:7c:54:55:9c:8f:13:c5:f0:13:
03:07:b3:f8:26:2e:56:e5:7b:10:ea:41:64:12:13:
0f:93:e1:ab:26:60:ac:3a:d2:13:30:4f:72:50:d7:
2e:48:41:96:6a:c2:19:02:89:46:4d:33:ab:d0:55:
c9:4d:6a:73:bb:84:a2:8b:d7:2e:84:98:3c:99:93:
f8:2a:0e:2a:fe:6d:48:c5:ed:d7:bb:62:1b:0e:60:
31:3d:10:e8:e1:7d:b3:14:81:9d:8c:87:96:27:da:
3d:6d:2d:86:7b:83:d3:1d:b9:85:18:6f:f0:e3:65:
cb:b3:68:d1:8e:2c:4a:b3:31:a9:ca:ef:bc:d3:65:
57:ae:46:e1:ad:e3:e9:15:bb:6c:e3:42:8c:14:58:
04:47:c5:e5:35:f4:4d:6f:ec:d2:fb:b5:a0:85:6c:
5c:40:ef:64:bb:cb:62:a9:72:15:ca:b8:71:86:63:
b9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:46:28:75:A8:DA:B1:EA:67:95:2D:D5:29:0E:04:21:27:27:76:BD
X509v3 Authority Key Identifier:
keyid:7C:7C:A0:81:95:0D:AE:FC:7C:54:B8:C4:46:98:B4:8E:8D:7C:69:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:20:66:b6:0c:c0:43:c7:c8:3d:d6:c9:d0:28:77:56:36:17:
73:e9:bf:f6:4b:ea:c6:1b:24:5c:64:0c:b8:89:2a:46:5b:62:
08:2c:66:87:fc:76:06:de:a5:83:54:f7:0f:aa:1d:53:da:8a:
15:bb:ab:4d:5e:ba:90:07:f8:14:dc:ea:a5:e6:a7:13:5f:c5:
92:07:1a:86:bb:9f:24:63:d5:b4:74:20:a8:87:08:e5:db:1e:
89:fd:1d:80:24:27:6a:fd:04:48:bb:f8:fc:1e:0b:fd:22:c6:
3c:4b:e7:d4:0a:02:08:41:c8:41:63:93:52:25:a6:5c:d4:5e:
68:25:ad:cc:54:64:4d:82:8f:cf:a9:e8:93:8a:78:7c:0e:d9:
53:e5:34:35:4d:7e:d3:b2:d9:15:3f:00:10:dd:4e:ba:80:5f:
29:d6:be:dc:3b:fb:97:7d:2a:08:9f:73:c4:c5:f0:41:79:28:
86:3e:6c:9d:4e:17:dc:4a:a0:bc:b9:68:6a:85:cb:51:25:81:
b6:36:0b:31:f4:22:bf:dd:90:d1:53:61:9f:ac:44:fc:38:e6:
cc:43:0b:df:db:ea:e2:ef:6e:35:9b:90:57:64:ff:62:14:96:
91:d8:61:82:07:d5:90:5b:71:9e:e1:08:97:1d:21:82:23:28:
8a:08:a6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:10:39 2026 by rpki-client