
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914AF32/9DEC07409E5011E89803D826C4F9AE02/hHBzG4maje6yn-pRuQ3BWNvaKvA.mft
File: hHBzG4maje6yn-pRuQ3BWNvaKvA.mft (raw, json)
Hash identifier: NvJlz0SLRT/CQVJY8PHinTxhuqGJfRIiimFgWZ9ECNk=
Subject key identifier: F8:D8:7D:39:24:36:F9:78:AD:09:53:64:C0:A8:31:BB:C6:EE:B1:38
Authority key identifier: 84:70:73:1B:89:9A:8D:EE:B2:9F:EA:51:B9:0D:C1:58:DB:DA:2A:F0
Certificate issuer: /CN=A914AF32/serialNumber=8470731B899A8DEEB29FEA51B90DC158DBDA2AF0
Certificate serial: 1489
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHBzG4maje6yn-pRuQ3BWNvaKvA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914AF32/9DEC07409E5011E89803D826C4F9AE02/hHBzG4maje6yn-pRuQ3BWNvaKvA.mft
Manifest number: 1472
Signing time: Thu 24 Sep 2026 16:50:39 +0000
Manifest this update: Thu 24 Sep 2026 16:50:39 +0000
Manifest next update: Thu 01 Oct 2026 16:50:39 +0000
Files and hashes: 1: hHBzG4maje6yn-pRuQ3BWNvaKvA.crl (hash: KveHa4C2rVPCWdDIgtxI5n1hqCuVLTAJzHAwjhK/s/I=)
2: 813A255423A611F09025FC11C4F9AE02.roa (hash: RaOIdSyJbLBmHHTBAcqvM2xNuH84JM4tWrC9RYmAhrM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914AF32/9DEC07409E5011E89803D826C4F9AE02/hHBzG4maje6yn-pRuQ3BWNvaKvA.crl
rsync://rpki.apnic.net/member_repository/A914AF32/9DEC07409E5011E89803D826C4F9AE02/hHBzG4maje6yn-pRuQ3BWNvaKvA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHBzG4maje6yn-pRuQ3BWNvaKvA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 16:50:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5257 (0x1489)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914AF32, serialNumber=8470731B899A8DEEB29FEA51B90DC158DBDA2AF0
Validity
Not Before: Sep 24 16:50:39 2026 GMT
Not After : Oct 1 16:50:39 2026 GMT
Subject: CN=6ab554df-b764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fe:cf:4a:8f:e5:9f:03:b1:54:99:f9:95:08:
5d:4d:a8:0b:ff:e4:8e:94:bc:0d:69:54:f5:e4:13:
76:fd:77:80:2e:c8:f3:52:0d:9a:c2:59:cd:75:93:
75:11:5b:ca:fd:74:a7:c7:bd:1a:ce:5a:0d:7b:2b:
d9:aa:28:f0:f3:62:bf:71:4a:cb:4e:22:98:5a:8b:
7a:81:9b:db:81:f1:a7:dd:92:ac:3d:22:59:7a:5f:
cf:15:2c:99:84:71:e8:33:49:bf:3c:fc:1f:3c:1d:
5d:89:07:a5:36:4b:8b:6a:90:02:a5:31:7a:53:26:
10:d8:2a:2e:8b:3b:21:7d:5d:90:20:39:83:5a:c6:
ef:e1:86:f5:5a:35:53:de:0b:23:88:3a:36:30:7f:
c4:a3:a0:88:13:9f:89:bc:db:fc:7d:d1:a3:42:a1:
a9:d2:aa:fd:f8:0b:bd:6c:35:59:f2:20:75:cb:f0:
7b:92:48:0b:c7:6d:2a:cd:85:9b:76:31:1a:b2:44:
9f:d0:8e:36:67:4b:15:d1:ea:81:06:cb:f7:6a:9b:
6a:40:ba:fd:15:c0:1c:12:48:39:ee:d1:d6:ab:b0:
cd:bb:4e:18:19:6e:96:57:a7:89:fc:30:73:32:1f:
72:eb:e9:5b:c6:58:43:73:b3:bc:4d:27:cb:dc:af:
5c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D8:7D:39:24:36:F9:78:AD:09:53:64:C0:A8:31:BB:C6:EE:B1:38
X509v3 Authority Key Identifier:
keyid:84:70:73:1B:89:9A:8D:EE:B2:9F:EA:51:B9:0D:C1:58:DB:DA:2A:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914AF32/9DEC07409E5011E89803D826C4F9AE02/hHBzG4maje6yn-pRuQ3BWNvaKvA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHBzG4maje6yn-pRuQ3BWNvaKvA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914AF32/9DEC07409E5011E89803D826C4F9AE02/hHBzG4maje6yn-pRuQ3BWNvaKvA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:c5:b5:e2:d1:62:a6:e9:4f:db:0c:37:7e:7d:16:aa:09:ae:
5f:26:87:96:51:59:81:49:2a:62:b5:23:1d:cd:44:58:56:d1:
fd:e5:27:27:9f:36:25:ea:0a:e0:ad:0c:cc:67:a2:87:45:78:
fc:4e:45:9d:aa:2d:99:0d:69:08:50:58:52:40:99:37:0b:3d:
58:d9:f5:72:4d:c9:f6:9a:c2:f8:cf:93:8a:a9:64:ac:8a:6d:
a6:e1:90:4a:ca:aa:2f:1e:ac:d3:d1:fd:7c:9c:2e:0f:3b:5c:
63:29:2b:8b:65:90:f1:d6:fa:35:b4:99:2b:96:7b:53:d9:ca:
83:3c:de:ff:e8:77:74:69:2d:42:d2:fb:d1:4f:6c:88:c5:99:
61:8b:46:f7:26:3c:98:7e:29:d4:24:99:b5:c6:eb:2f:02:e2:
60:f9:02:20:df:52:c2:72:d7:c8:50:92:6c:1e:0f:96:1d:21:
6e:73:3e:06:4a:04:b7:da:c9:24:56:1d:d0:87:33:86:99:0b:
14:a9:9c:d0:0b:39:25:4f:8e:34:e5:06:d0:8a:40:03:40:5f:
84:1e:e9:c9:1b:cb:57:c5:a9:b3:66:91:89:33:18:81:95:fe:
6b:e2:2f:28:6a:87:36:e4:ad:aa:8e:fc:14:3c:6e:fe:8b:ff:
ab:e4:d8:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:02:39 2026 by rpki-client