
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.mft
File: hPqw1oT6rxaVCqyjjm1lOszyWLw.mft (raw, json)
Hash identifier: 9tQR5dH4Yo+rIFsUlnHAjLzQrGbsojr0rPkcw2bQwus=
Subject key identifier: D9:1D:BD:9A:87:47:4E:74:58:1A:61:BC:68:C7:FE:0B:B3:8C:18:96
Authority key identifier: 84:FA:B0:D6:84:FA:AF:16:95:0A:AC:A3:8E:6D:65:3A:CC:F2:58:BC
Certificate issuer: /CN=A914247C/serialNumber=84FAB0D684FAAF16950AACA38E6D653ACCF258BC
Certificate serial: 0C0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hPqw1oT6rxaVCqyjjm1lOszyWLw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.mft
Manifest number: 0C01
Signing time: Tue 22 Sep 2026 18:46:19 +0000
Manifest this update: Tue 22 Sep 2026 18:46:19 +0000
Manifest next update: Tue 29 Sep 2026 18:46:19 +0000
Files and hashes: 1: hPqw1oT6rxaVCqyjjm1lOszyWLw.crl (hash: 4BlgEoRJqrqEIdiyo1Y1Pfhcj9eeGd2EMVOkfxjWKEM=)
2: xw2c09sWQfZpcBVcUHX0fdmqBmU.asa (hash: nNkYtcmmLRmBXicntCSFxNN2FznBahJQiXKC8m1+WCw=)
3: E1AB1F92430F11EAA60DB885C4F9AE02.roa (hash: OCv24/16TkkF7CfAW+nV2T28WIs19rHh0mty8R6qkAI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.crl
rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hPqw1oT6rxaVCqyjjm1lOszyWLw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 15:21:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3085 (0xc0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914247C, serialNumber=84FAB0D684FAAF16950AACA38E6D653ACCF258BC
Validity
Not Before: Sep 22 18:46:19 2026 GMT
Not After : Sep 29 18:46:19 2026 GMT
Subject: CN=6ab2ccfb-5e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d4:20:13:19:13:c7:1f:ad:6d:64:79:51:ac:
b5:a6:3b:fe:d8:21:58:9e:a8:5c:6a:94:40:b6:ca:
06:da:2f:09:59:d5:be:e7:80:86:1a:92:7b:b3:76:
54:33:33:21:a9:8a:06:0b:79:7c:e7:7e:69:2e:df:
b3:bb:22:9c:c7:03:ca:5f:5f:e7:9b:97:93:67:83:
d7:98:a6:b6:67:dd:35:bf:12:6e:4d:04:bd:55:27:
e8:2f:d5:cc:cf:86:38:48:9e:c1:19:e7:4c:34:91:
9f:21:72:16:3c:84:76:46:3a:ec:31:ed:4b:df:57:
0a:b7:a0:6f:af:f2:3e:d9:06:43:4e:df:d5:5c:59:
6f:8e:24:4b:1a:2d:9c:93:e9:13:e6:ed:27:70:bf:
37:22:84:6a:e8:01:a5:ef:2c:55:61:f0:17:d7:b5:
f0:94:5b:b8:a2:60:7a:89:42:cb:b8:52:9a:32:5a:
4f:b9:19:55:8a:11:fe:09:a2:54:c8:23:7c:65:5b:
d6:54:b2:e2:28:b5:b8:9d:a8:3b:34:60:ef:f5:30:
1b:43:11:6c:77:4c:cf:e3:a0:4a:87:b7:6c:e4:bf:
ca:26:26:35:6b:c5:47:6c:60:82:0a:02:5a:d1:dc:
cc:a4:ec:c3:cf:cd:a7:0c:44:65:54:10:d6:37:13:
2b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:1D:BD:9A:87:47:4E:74:58:1A:61:BC:68:C7:FE:0B:B3:8C:18:96
X509v3 Authority Key Identifier:
keyid:84:FA:B0:D6:84:FA:AF:16:95:0A:AC:A3:8E:6D:65:3A:CC:F2:58:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hPqw1oT6rxaVCqyjjm1lOszyWLw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:96:74:3f:44:da:e3:32:7c:02:f5:79:33:71:a4:37:7c:da:
19:a6:87:91:77:88:d2:2a:db:85:b7:9d:e1:f9:fe:3e:ac:47:
ce:ff:a5:e8:7c:cb:4f:3b:24:0d:5f:0f:b8:05:06:8d:2e:a0:
aa:60:84:af:4f:21:a7:99:f0:9e:ea:28:2d:eb:19:e8:91:c8:
32:55:36:2c:bd:1a:d8:91:a7:71:73:5d:1a:94:e4:0d:69:3c:
8a:38:95:4d:fc:da:64:b8:be:e8:32:d7:c4:94:d4:f7:c0:62:
5f:d3:bd:92:4d:cc:58:9e:11:af:83:8b:f4:6b:f6:3e:fe:15:
e3:97:11:fe:19:e2:97:61:50:fd:51:1a:4a:3c:ae:22:e8:9f:
ef:d0:92:06:47:af:69:e5:fa:3a:c8:cb:a6:80:56:74:8d:52:
e0:be:63:43:e7:6b:9e:9a:9d:7a:2c:b4:d4:c6:b3:20:ad:b3:
af:e6:09:6c:b4:9e:df:4d:86:b7:4c:c6:69:2a:dd:d5:df:11:
81:4a:de:64:11:4a:15:20:f6:ff:9b:c1:11:91:41:e5:81:4e:
42:ac:a2:e9:cf:c2:33:6a:79:37:34:81:9f:e9:81:57:9d:8d:
30:4d:8c:6f:13:1d:dc:5c:b5:43:d8:8e:dc:0b:b3:0b:be:e8:
ec:6e:01:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:56:34 2026 by rpki-client