
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft
File: hELcRgJABgEa1c9IzX5MSLuXoR4.mft (raw, json)
Hash identifier: XNBMcVmvTv3lHdPnhA3eR1VGe518I76QPnE0MmLgrVk=
Subject key identifier: B8:D6:14:39:C1:52:15:34:D5:E1:93:95:0B:74:7E:5F:D7:44:FD:FA
Authority key identifier: 84:42:DC:46:02:40:06:01:1A:D5:CF:48:CD:7E:4C:48:BB:97:A1:1E
Certificate issuer: /CN=A9153134/serialNumber=8442DC46024006011AD5CF48CD7E4C48BB97A11E
Certificate serial: 0179
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft
Manifest number: 0151
Signing time: Wed 25 Mar 2026 04:40:02 +0000
Manifest this update: Wed 25 Mar 2026 04:40:02 +0000
Manifest next update: Wed 01 Apr 2026 04:40:02 +0000
Files and hashes: 1: hELcRgJABgEa1c9IzX5MSLuXoR4.crl (hash: OCe+0uymQGbgck9A7YGbV52EpHu5syUm6mLqTs9Wm6Q=)
2: F32DDE98545411EFA3BC6B2BC4F9AE02.roa (hash: 9spWTKwzhxwWPHkdhJR5HEllKF63m9l363gaTe3qP68=)
3: F3B36C48545411EFA3BC6B2BC4F9AE02.roa (hash: l1+ZtMv6puo4GNMLOeWesmnYUJqPnxAR7QGxzptAf1s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.crl
rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:40:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 377 (0x179)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153134, serialNumber=8442DC46024006011AD5CF48CD7E4C48BB97A11E
Validity
Not Before: Mar 25 04:40:02 2026 GMT
Not After : Apr 1 04:40:02 2026 GMT
Subject: CN=69c36722-1510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d6:b5:30:35:f7:ae:1c:c3:fc:d5:38:46:72:
ac:83:7f:e5:db:80:e8:61:37:9f:f5:9c:72:bf:df:
e2:47:05:b9:4e:d9:5c:6b:e4:1d:74:63:47:15:3e:
4c:56:4c:3e:c6:28:63:51:1c:a3:ed:ac:6d:81:0f:
e0:36:f7:a7:ce:37:2e:bb:1b:2e:cb:e6:45:6f:3c:
10:13:38:c7:8a:67:6a:6e:fe:df:82:d4:53:f9:e5:
d0:f3:88:34:84:a4:50:d3:42:18:98:1a:65:50:9d:
b7:e7:f6:f2:49:0f:27:75:d7:b4:b2:97:e9:c4:da:
92:aa:e2:d2:a9:c7:96:0a:53:5f:7f:e3:ce:02:12:
a8:00:07:84:e6:7b:a3:d1:9d:d4:52:69:90:87:12:
56:f8:c6:c1:d6:0b:c9:79:9f:a2:7b:ed:c3:a8:1d:
ca:2a:c9:8c:d2:7c:c1:8f:7e:8c:aa:5a:d6:0c:0d:
51:8b:ef:42:97:4a:7c:99:f1:ac:3b:b4:bd:91:34:
0e:a6:88:fa:ac:a7:83:2d:b9:ac:ec:7a:a8:fe:39:
2b:d7:92:e7:43:ef:b2:e3:c8:77:bd:1f:8d:8b:42:
07:fe:70:15:97:16:16:a0:9d:1a:e5:e3:ea:25:4b:
da:2d:cd:f4:14:58:0d:89:57:b3:0a:22:40:cd:33:
5c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D6:14:39:C1:52:15:34:D5:E1:93:95:0B:74:7E:5F:D7:44:FD:FA
X509v3 Authority Key Identifier:
keyid:84:42:DC:46:02:40:06:01:1A:D5:CF:48:CD:7E:4C:48:BB:97:A1:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:fc:cb:37:f2:3c:fc:e4:2b:42:71:51:f0:08:02:29:d2:81:
bd:02:31:a6:a6:be:ec:b2:80:b8:49:b4:e1:02:1f:e5:ed:56:
90:6e:49:37:1a:9a:12:8e:df:92:a6:80:5a:2b:37:1b:d3:20:
d8:a6:ad:65:97:a7:bd:d1:71:93:18:8b:bf:20:2b:d6:7e:be:
64:14:c7:0b:e0:ea:5b:30:05:7d:e4:c2:6c:2b:b9:fb:8d:7b:
fe:c1:00:f3:f7:df:62:4b:b1:52:2c:92:3a:60:84:c0:cf:db:
7b:c0:70:d2:bd:50:07:e2:83:75:59:a8:cb:c3:97:81:31:74:
b3:bc:5e:d8:70:4d:05:20:1a:c6:6d:75:c1:82:31:46:24:cc:
de:35:b4:f5:9c:9c:84:5d:80:d0:b0:b7:d0:77:0d:f2:9d:63:
d8:9c:95:8d:d9:96:0b:cf:d8:5e:ef:aa:f2:25:6b:b5:5e:c1:
f0:5d:86:0c:bc:4a:f5:97:b4:85:3b:83:62:d9:f6:f5:e8:21:
a2:fb:cb:d4:07:3b:15:f7:8b:3b:0f:fe:2d:ce:ba:12:79:a5:
1c:11:62:df:36:3a:36:e2:a4:c8:5d:cf:e1:1c:a6:57:f9:10:
e7:b1:91:7b:f2:38:b8:42:d4:46:6f:14:63:9e:46:b3:ff:04:
2f:78:be:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:55:13 2026 by rpki-client