
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft
File: -HfnZ8AkHlKW_jMylZne-j0toUE.mft (raw, json)
Hash identifier: Lh+JQNwaFm92qJJo+aHBaI8v5XhPys04q2aLVznlTxY=
Subject key identifier: B0:8D:EC:00:DE:1B:80:FA:FA:20:7B:38:54:09:FC:74:17:D6:93:45
Authority key identifier: F8:77:E7:67:C0:24:1E:52:96:FE:33:32:95:99:DE:FA:3D:2D:A1:41
Certificate issuer: /CN=A9145515/serialNumber=F877E767C0241E5296FE33329599DEFA3D2DA141
Certificate serial: 0C87
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HfnZ8AkHlKW_jMylZne-j0toUE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft
Manifest number: 0C7E
Signing time: Mon 28 Sep 2026 18:45:13 +0000
Manifest this update: Mon 28 Sep 2026 18:45:12 +0000
Manifest next update: Mon 05 Oct 2026 18:45:12 +0000
Files and hashes: 1: -HfnZ8AkHlKW_jMylZne-j0toUE.crl (hash: 4RLDCFt0ZbgKFeLqFEuz+h/7SoDGSUxapIFDtQ9xMB8=)
2: 60875A5C2A3711EABEA9BF73C4F9AE02.roa (hash: fKNon6NCgCOGVHkPldMfFkQTkW6jIWPmLvSkFUdw9rQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.crl
rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HfnZ8AkHlKW_jMylZne-j0toUE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 18:45:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3207 (0xc87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145515, serialNumber=F877E767C0241E5296FE33329599DEFA3D2DA141
Validity
Not Before: Sep 28 18:45:12 2026 GMT
Not After : Oct 5 18:45:12 2026 GMT
Subject: CN=6abab5b9-4de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:06:50:36:73:08:ee:61:f3:b5:92:34:05:36:
93:27:11:93:6b:07:91:7d:9a:1e:5a:0b:15:54:7b:
7d:bf:1f:e2:cb:85:e5:4d:0d:f7:95:e2:b1:32:98:
d5:85:f6:c7:16:f7:4b:80:81:0d:2b:99:36:98:3b:
48:ef:ce:57:c3:1e:f8:2a:ec:13:13:a3:d9:ce:35:
d6:52:f5:a4:21:a3:c2:81:a4:30:03:1e:c6:9d:08:
3e:f4:59:6a:b6:d5:1b:69:55:17:c9:d4:e1:95:af:
2c:26:47:67:5c:25:7c:c5:86:ad:39:5c:25:be:0e:
7c:33:41:67:f3:b2:62:e7:91:71:cd:a9:8f:65:f9:
9e:83:36:d6:13:4a:fc:14:d3:24:96:15:9c:e0:73:
7c:c5:4f:61:02:c2:d5:ab:db:8d:ac:79:d6:a9:75:
54:d6:9f:74:89:a6:4b:00:d3:f0:44:83:ae:d6:f4:
8f:06:fd:cf:ad:65:45:23:70:12:66:27:e9:ee:2f:
96:61:07:73:3f:46:77:b4:7e:f4:28:1c:d1:84:11:
ef:8a:28:52:f2:ff:ad:22:ed:b9:2e:e6:12:06:f4:
51:0c:a1:7f:19:e9:c9:3f:58:43:5f:98:ac:d5:de:
3e:cb:3b:5d:a4:5a:77:48:66:2c:50:ce:30:6a:ac:
51:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:8D:EC:00:DE:1B:80:FA:FA:20:7B:38:54:09:FC:74:17:D6:93:45
X509v3 Authority Key Identifier:
keyid:F8:77:E7:67:C0:24:1E:52:96:FE:33:32:95:99:DE:FA:3D:2D:A1:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HfnZ8AkHlKW_jMylZne-j0toUE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:98:b3:b1:76:e5:40:d1:ea:0a:81:67:bb:a2:f1:03:98:94:
ff:d1:b6:a4:a3:44:c7:e8:0a:d4:4c:16:12:5c:ee:d1:06:80:
84:b2:c3:d0:2b:18:48:29:ce:c1:1b:bb:7b:f4:66:93:e1:17:
08:28:8f:f0:80:e3:bc:20:e0:51:ed:79:9c:42:0e:85:67:31:
3c:6c:2e:b4:80:e8:1f:7d:8a:c8:50:a8:19:63:9e:b8:77:03:
d4:f5:5d:e1:3c:ea:36:8f:fa:50:db:a7:fe:e1:aa:1a:f4:f5:
c7:8f:43:95:8e:29:20:56:e6:84:47:e2:0a:cf:a2:f4:93:39:
a2:a6:2f:80:17:fd:12:bb:99:de:3a:9a:94:7c:27:31:53:72:
aa:c1:28:88:49:a8:c2:d9:0f:77:ab:c4:d4:2c:4b:17:04:89:
0a:52:d5:08:81:0c:c5:ef:4b:63:b6:e9:15:50:69:c8:86:71:
06:79:8e:c4:50:a5:be:55:45:17:c1:6b:c2:d5:53:2f:54:47:
b8:af:b6:aa:01:ed:11:97:12:d2:76:6e:78:fb:bd:85:05:2a:
67:60:78:ae:22:d8:09:1c:2c:06:3e:04:4e:17:7b:32:95:66:
89:71:00:9a:f9:b9:8e:07:6b:97:72:81:dc:19:d0:a6:e6:79:
30:57:d0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 03:40:16 2026 by rpki-client