
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/H2wzTrxkYqJkUoZ6u1-E72itwCw.mft
File: H2wzTrxkYqJkUoZ6u1-E72itwCw.mft (raw, json)
Hash identifier: oAj72VwT4icYv+/qV0U8DFnxT2GLHBO6XSSdtpr0wO4=
Subject key identifier: 75:7E:AA:35:46:CC:89:7A:9E:19:50:A2:BC:F3:78:71:58:E3:D1:96
Authority key identifier: 1F:6C:33:4E:BC:64:62:A2:64:52:86:7A:BB:5F:84:EF:68:AD:C0:2C
Certificate issuer: /CN=A9138447/serialNumber=1F6C334EBC6462A26452867ABB5F84EF68ADC02C
Certificate serial: 09F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2wzTrxkYqJkUoZ6u1-E72itwCw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/H2wzTrxkYqJkUoZ6u1-E72itwCw.mft
Manifest number: 09DD
Signing time: Fri 02 Oct 2026 20:08:14 +0000
Manifest this update: Fri 02 Oct 2026 20:08:13 +0000
Manifest next update: Fri 09 Oct 2026 20:08:13 +0000
Files and hashes: 1: H2wzTrxkYqJkUoZ6u1-E72itwCw.crl (hash: 4a/QNuanVZDA2UXbSdJstcEPSAIY2OJrxDu62RxVVbY=)
2: 46F4E81842B611F1BDBC0B88BD833773.roa (hash: kRpPpGlJ8I0/+ZwIGr7snXVvHIdZiK+7MPbuAUSeFqM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/H2wzTrxkYqJkUoZ6u1-E72itwCw.crl
rsync://rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/H2wzTrxkYqJkUoZ6u1-E72itwCw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2wzTrxkYqJkUoZ6u1-E72itwCw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 20:08:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2544 (0x9f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138447, serialNumber=1F6C334EBC6462A26452867ABB5F84EF68ADC02C
Validity
Not Before: Oct 2 20:08:13 2026 GMT
Not After : Oct 9 20:08:13 2026 GMT
Subject: CN=6ac00f2e-0c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c8:45:87:8c:24:d9:4f:cc:d8:b5:70:41:ab:
d4:83:13:d1:ff:01:97:00:64:62:f4:4d:56:22:ad:
1a:f1:e8:d9:e2:77:dd:2f:69:a3:a1:c7:90:5c:3a:
10:fe:0e:47:a4:a9:17:6f:ea:d6:d2:07:6f:d0:e4:
38:66:ba:cc:29:4e:a1:67:a8:ca:03:9e:24:45:0b:
08:9c:56:db:b1:60:aa:1e:2f:f3:b3:c8:21:e6:bf:
ea:8a:0c:c3:b8:d2:eb:6d:e4:4b:c3:4c:44:99:36:
62:7d:ca:18:98:bb:b1:66:16:c5:19:1d:cc:77:3f:
cb:55:bc:dc:8b:60:d5:8a:6f:07:e4:b9:d1:8b:0c:
0b:b4:d0:c5:c0:70:ac:69:86:06:b7:a6:fa:52:70:
d9:6c:4a:ec:76:07:15:69:0f:3d:86:80:04:b5:ea:
be:20:78:35:8a:75:ab:7e:72:5f:7c:09:16:56:fe:
f5:29:ec:84:40:06:40:0f:f8:66:2c:3a:ca:4e:05:
69:36:d0:41:94:d9:6f:4c:bb:9c:0e:3c:d4:d7:68:
db:86:3e:a5:fa:ca:14:92:cf:11:c6:26:4e:b0:38:
cd:45:73:f2:9e:37:6e:e2:80:87:7e:8c:1f:dd:3a:
1e:a5:52:98:87:60:18:23:d6:2c:98:a8:1d:82:42:
a0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:7E:AA:35:46:CC:89:7A:9E:19:50:A2:BC:F3:78:71:58:E3:D1:96
X509v3 Authority Key Identifier:
keyid:1F:6C:33:4E:BC:64:62:A2:64:52:86:7A:BB:5F:84:EF:68:AD:C0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/H2wzTrxkYqJkUoZ6u1-E72itwCw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2wzTrxkYqJkUoZ6u1-E72itwCw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/H2wzTrxkYqJkUoZ6u1-E72itwCw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:4e:42:91:48:da:f2:89:28:06:35:11:95:8c:23:cf:9a:c4:
45:09:5b:78:e2:b6:75:50:d6:11:be:e6:98:f7:2a:59:15:bd:
aa:d7:e1:0c:4a:3e:a8:cd:04:40:78:9b:a9:0d:f3:9d:e7:d6:
70:d1:e2:60:2c:ec:55:76:cf:6f:96:d7:ce:dd:eb:79:8f:fe:
38:c4:b9:65:71:dd:0d:6d:76:5d:48:8c:fa:96:40:af:f9:13:
75:33:be:e3:af:5b:f3:2b:79:a3:4c:a9:65:a8:ea:7d:48:86:
3a:15:bc:fa:76:50:02:63:3c:20:55:5c:97:0d:b9:93:44:cb:
2c:61:12:ec:8d:89:8d:08:b3:8b:01:aa:4e:b4:4b:5b:ca:4d:
ab:2f:13:6e:b7:fa:dc:34:a3:68:13:ae:f0:64:0b:89:03:2a:
2c:69:61:7e:76:54:ab:2d:11:1d:66:fe:7f:df:1a:91:01:fa:
5e:ff:7d:e4:db:c8:89:27:bd:bd:0a:1c:02:10:0a:d8:ff:73:
00:8b:af:f3:6c:79:85:64:0a:eb:5e:9d:14:b0:c6:c7:cb:b5:
09:a6:b0:fc:68:88:db:ee:58:04:04:da:74:d1:f5:cf:18:d3:
c3:a6:b5:c2:4c:78:45:7d:34:a8:2f:ef:fe:8a:3b:b1:d3:69:
0d:da:cd:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 15:16:19 2026 by rpki-client