
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft
File: hELcRgJABgEa1c9IzX5MSLuXoR4.mft (raw, json)
Hash identifier: x/UKaBX5nspxZJ3Q5Z1LsSdzIxEwLIywp1GsatGsg0g=
Subject key identifier: 3C:7F:25:DA:E2:93:2F:C3:C6:3A:81:59:D5:C7:88:0B:D3:50:A1:87
Authority key identifier: 84:42:DC:46:02:40:06:01:1A:D5:CF:48:CD:7E:4C:48:BB:97:A1:1E
Certificate issuer: /CN=A9153134/serialNumber=8442DC46024006011AD5CF48CD7E4C48BB97A11E
Certificate serial: 01DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft
Manifest number: 01B1
Signing time: Fri 25 Sep 2026 04:25:37 +0000
Manifest this update: Fri 25 Sep 2026 04:25:37 +0000
Manifest next update: Fri 02 Oct 2026 04:25:37 +0000
Files and hashes: 1: hELcRgJABgEa1c9IzX5MSLuXoR4.crl (hash: aG1fIAouMDsx/yVzA7dHRLKghXfoEa83r+u7vwUPY3U=)
2: F32DDE98545411EFA3BC6B2BC4F9AE02.roa (hash: SAEXcobn5WfR++eemr4q7u6jryaGVSo+R/HbEDcAQGY=)
3: F3B36C48545411EFA3BC6B2BC4F9AE02.roa (hash: 1Yn/q//XKIoyU7nYOwYtLT8tKiEy2Qn2d2N7RVj95ek=)
4: voqlZ0tCIdMJjYS75BQF9f7yz5A.asa (hash: 8ZdqhgKkHUtits1R9vUwqzwv/XCWGUyAuC/vBQkTotg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.crl
rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 04:25:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 476 (0x1dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153134, serialNumber=8442DC46024006011AD5CF48CD7E4C48BB97A11E
Validity
Not Before: Sep 25 04:25:37 2026 GMT
Not After : Oct 2 04:25:37 2026 GMT
Subject: CN=6ab5f7c1-0779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:18:d6:89:03:07:d6:ed:c1:69:52:94:51:66:
c0:3b:20:51:7d:b8:e5:40:de:af:37:49:93:c0:2b:
78:28:1d:44:58:aa:b0:1b:7d:61:45:4b:a4:d0:e2:
10:20:50:ec:22:68:49:16:3c:eb:11:8e:2b:56:28:
90:66:76:0f:fe:c9:94:85:b0:4a:de:d7:c9:5d:f7:
56:43:d8:b7:ce:e7:a6:a6:89:bb:21:c5:16:4f:27:
65:58:c0:ee:13:34:2d:21:36:c9:fa:4e:e2:15:39:
17:7d:d3:cf:39:d0:36:ad:b7:d9:93:7f:24:96:c9:
0d:f2:97:1a:8a:9e:00:8d:bf:96:98:18:ca:83:37:
28:d6:ff:b6:90:8f:f9:0b:34:97:86:d7:2a:2d:77:
05:71:c0:43:7f:75:a1:46:c7:f5:fc:99:fd:b5:b6:
0e:67:ca:98:2e:6e:f9:9e:9a:9d:21:5d:96:9a:9f:
ae:b0:de:8f:95:1a:7f:1b:13:61:7a:ce:4c:3c:9d:
48:ba:53:bd:4e:f0:4e:52:21:f9:e7:d8:51:4e:3a:
8c:d8:7e:7a:22:4a:6c:0d:46:57:5a:35:4a:7e:c1:
18:f6:1f:a7:fe:36:b7:1f:3b:24:f5:dd:a1:7b:6b:
2b:c3:88:19:fd:a5:51:2e:aa:6a:a5:ba:af:89:f9:
56:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7F:25:DA:E2:93:2F:C3:C6:3A:81:59:D5:C7:88:0B:D3:50:A1:87
X509v3 Authority Key Identifier:
keyid:84:42:DC:46:02:40:06:01:1A:D5:CF:48:CD:7E:4C:48:BB:97:A1:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:8e:71:cd:8f:54:78:a0:ca:a2:31:f4:7c:64:3a:5b:b3:44:
67:7a:11:c6:56:19:02:31:30:2b:17:0e:9e:b9:26:9a:3d:a6:
34:a0:32:8f:58:22:a4:50:d4:63:21:1d:5f:f5:7d:67:6b:a7:
1c:c7:10:fc:f3:03:17:7b:85:56:df:96:c9:31:62:0f:55:1d:
21:a3:cc:cb:cc:8a:48:0f:fc:27:6d:ee:1a:41:80:85:9e:c6:
6e:06:45:2c:98:92:2d:87:fa:e5:1a:d8:aa:3b:94:9c:94:51:
77:86:97:82:e9:9d:6b:97:2f:db:8a:d7:e7:c8:54:03:8d:c0:
1b:41:ca:ef:42:ec:4e:5e:ae:cb:0d:4b:5b:75:06:32:96:87:
d7:7b:2e:ad:07:93:94:6a:8b:51:11:1d:df:7a:40:70:25:8c:
be:76:46:6c:37:ea:45:9d:75:11:f5:53:fb:79:78:de:3d:84:
43:d0:81:f7:75:4e:4d:c4:7b:6b:50:c3:1b:30:d4:03:d2:e7:
29:7b:7c:97:8f:3e:95:31:f3:e8:45:c1:66:03:85:0b:cd:24:
51:e3:6c:e4:d7:3b:cb:c9:60:0c:7f:21:93:a8:dc:10:72:26:
25:9b:53:b0:57:ef:d5:6d:86:7f:36:a3:88:82:f8:60:05:0b:
10:7d:cc:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:41:36 2026 by rpki-client