
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft
File: HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft (raw, json)
Hash identifier: uZcmT0J9GeF3p22NTndEwO2+ApAh2lmZYKG7m0/j4HE=
Subject key identifier: D3:C4:05:03:21:EA:B7:90:D2:BC:AF:EE:E5:05:20:5C:53:CB:8F:32
Authority key identifier: 1C:42:2B:B1:FC:96:FE:60:D4:B2:FF:5F:6C:12:45:0E:CC:9E:E9:6C
Certificate issuer: /CN=A9163609/serialNumber=1C422BB1FC96FE60D4B2FF5F6C12450ECC9EE96C
Certificate serial: 02C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HEIrsfyW_mDUsv9fbBJFDsye6Ww.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft
Manifest number: 02B9
Signing time: Fri 25 Sep 2026 01:27:06 +0000
Manifest this update: Fri 25 Sep 2026 01:27:05 +0000
Manifest next update: Fri 02 Oct 2026 01:27:05 +0000
Files and hashes: 1: HEIrsfyW_mDUsv9fbBJFDsye6Ww.crl (hash: DFGu/+q1fYnph6w7Qc460Pwa5gQZ0K/BLcx4XmACTHw=)
2: 4Nm4cUgaAqJbFSvTnbxQNF9jQzE.asa (hash: Xs+VY24SytYmkpk3hC7Bpp3vyNK1OEYGmwv/Xfm0vyw=)
3: F2AB2F288FE011EDA9919C57C4F9AE02.roa (hash: KTnG5DXA4ykdIF+F6HQFhuSS9PnoKt4qehFaA66nt4k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.crl
rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HEIrsfyW_mDUsv9fbBJFDsye6Ww.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 01:27:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 704 (0x2c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9163609, serialNumber=1C422BB1FC96FE60D4B2FF5F6C12450ECC9EE96C
Validity
Not Before: Sep 25 01:27:05 2026 GMT
Not After : Oct 2 01:27:05 2026 GMT
Subject: CN=6ab5cdea-12c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8f:eb:78:af:f1:40:a9:3b:7d:7c:07:9d:56:
6a:18:f7:a0:98:da:51:65:83:c8:d6:28:68:bf:b2:
4a:a6:15:48:d0:ad:a4:08:6c:61:ce:e8:b4:7c:f3:
cc:d2:4c:32:83:b4:f7:bd:dc:28:0d:88:ec:06:d3:
e9:52:53:c8:51:81:d8:17:75:fb:9d:97:b7:68:73:
59:d9:b7:c3:16:f9:b3:76:8f:74:00:0b:94:2e:2b:
7f:5a:10:dc:21:85:7f:e8:9e:b0:98:b3:1e:b5:88:
dd:b0:8f:f8:5d:3a:bd:37:b6:cb:34:47:41:2b:66:
cf:30:8e:fa:b7:95:35:fa:c6:97:60:a2:3f:14:d3:
fb:ad:09:80:84:a9:f8:c6:c9:ea:fd:03:59:dd:88:
5c:21:8f:fd:63:f4:fe:3f:8e:da:1d:20:8a:f9:8e:
7c:87:d1:d3:77:8a:c7:2a:ba:3f:56:1b:85:66:4b:
6f:b9:4f:33:ab:a4:f7:4f:eb:cf:6f:be:bb:62:13:
00:26:26:d3:db:66:86:66:81:28:72:58:0d:80:fa:
31:4c:b1:e5:7b:d2:a7:ab:ad:37:63:c0:2f:46:f6:
b9:61:c4:2a:3c:21:12:ca:e8:e1:dc:04:c3:6a:76:
e7:59:ee:53:88:df:dc:8b:c1:cd:0d:ab:32:cc:c1:
cc:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C4:05:03:21:EA:B7:90:D2:BC:AF:EE:E5:05:20:5C:53:CB:8F:32
X509v3 Authority Key Identifier:
keyid:1C:42:2B:B1:FC:96:FE:60:D4:B2:FF:5F:6C:12:45:0E:CC:9E:E9:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HEIrsfyW_mDUsv9fbBJFDsye6Ww.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d7:65:aa:11:71:2f:86:b0:ec:90:06:a4:5c:4d:bc:08:e5:d2:
32:cf:ef:29:3d:41:a6:c0:0b:41:d0:75:af:5f:c4:03:7d:eb:
52:a8:bb:ed:c2:2c:0b:f8:1d:85:c9:db:cc:2b:7a:04:61:84:
88:4d:1e:57:89:7a:d1:90:42:3c:a1:31:a9:79:6a:ab:da:20:
83:41:c3:2a:12:88:7e:03:7e:6e:67:a8:6b:d5:cf:57:a5:18:
ab:67:83:b7:d1:4e:af:10:a7:a1:ed:50:26:32:bf:ff:cc:65:
44:b5:8c:7c:9e:06:1c:da:84:90:17:3d:0b:68:a9:be:83:8a:
d5:72:f7:c4:1b:93:eb:43:61:62:f0:56:77:28:70:ea:1e:66:
72:2f:da:b1:e2:20:64:d3:be:ce:cf:55:85:8e:70:c0:c1:3f:
30:f6:07:05:4c:5e:34:43:6c:f2:5f:57:0e:e9:2a:48:44:e9:
f2:d3:be:31:a9:41:1b:8e:f3:fc:ff:3e:c8:87:48:a8:be:23:
d6:c2:ea:96:07:a0:12:6b:3e:92:63:f7:4a:d4:22:65:e6:5f:
8d:a3:34:4e:8b:6f:3c:03:1b:15:89:c6:b0:07:c6:cb:52:05:
54:43:1c:95:9a:77:e3:78:58:06:1b:23:93:d9:b3:df:1e:5a:
ff:f7:b4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:01:58 2026 by rpki-client