
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft
File: h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft (raw, json)
Hash identifier: DI9HNSya/V0aBnhNh52ut4w5mzii1JKY5upVEdppzk8=
Subject key identifier: D1:DF:ED:85:A4:DE:DA:47:85:90:19:99:D9:0D:70:51:6C:DE:C7:D5
Authority key identifier: 87:90:62:50:3F:D2:08:46:6F:74:EA:9A:F8:76:70:A8:7D:86:A7:36
Certificate issuer: /CN=A9174880/serialNumber=879062503FD208466F74EA9AF87670A87D86A736
Certificate serial: 3589
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft
Manifest number: 3589
Signing time: Tue 22 Sep 2026 14:16:54 +0000
Manifest this update: Tue 22 Sep 2026 14:16:53 +0000
Manifest next update: Tue 29 Sep 2026 14:16:53 +0000
Files and hashes: 1: h5BiUD_SCEZvdOqa-HZwqH2GpzY.crl (hash: uhzW+uU92hedLt0+Xoul6XmePTqvm0uaHV02ZVggcXE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.crl
rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 14:16:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13705 (0x3589)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174880, serialNumber=879062503FD208466F74EA9AF87670A87D86A736
Validity
Not Before: Sep 22 14:16:53 2026 GMT
Not After : Sep 29 14:16:53 2026 GMT
Subject: CN=6ab28dd6-3c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:f1:ef:9a:dd:99:29:1b:45:fc:05:f2:de:fa:
ec:96:a7:a5:ab:40:c0:8c:fe:86:07:ac:02:f8:c9:
97:da:56:23:06:1b:3f:45:6a:9f:00:bc:42:b7:67:
98:5f:72:b2:f5:1e:33:98:34:03:03:4b:5e:a7:fa:
d6:69:a7:6a:f8:bf:35:0a:38:1b:b5:d7:70:4a:16:
f8:71:66:72:c3:1e:16:ea:55:db:70:37:de:df:a1:
89:d8:1b:7d:a4:f0:95:d7:43:9e:49:be:88:ae:9d:
42:7e:54:c6:38:2d:50:3d:ae:db:b7:58:17:0c:48:
8f:e4:27:87:f1:98:18:f6:8a:5d:4f:77:a7:18:26:
91:73:80:d3:3f:58:e8:b5:f7:ab:53:1b:b2:30:5f:
c9:8f:c3:8d:fb:a7:bd:00:56:72:71:fa:f5:bf:fe:
53:88:50:41:b9:c9:a9:23:1f:c9:6f:84:04:9b:55:
d8:2a:5a:e6:ab:83:8d:69:54:8e:18:2a:9f:62:f2:
51:47:e5:c0:2c:24:04:c1:29:cd:f2:33:a1:fa:29:
f5:06:6c:60:50:24:dc:b5:39:37:23:fe:97:66:29:
67:33:f4:dd:d9:98:a4:59:4f:bd:e9:31:44:52:43:
a8:52:d4:96:97:d7:6f:1f:45:c0:ee:f5:77:56:a7:
d0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DF:ED:85:A4:DE:DA:47:85:90:19:99:D9:0D:70:51:6C:DE:C7:D5
X509v3 Authority Key Identifier:
keyid:87:90:62:50:3F:D2:08:46:6F:74:EA:9A:F8:76:70:A8:7D:86:A7:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:d9:fb:3e:eb:9b:e4:9a:26:32:85:24:4a:57:77:f9:0c:3d:
be:ee:f6:d4:cd:11:eb:93:e3:f9:f9:22:e6:de:3d:44:03:15:
26:3a:4f:b4:95:c8:c1:a5:9d:9d:5f:32:81:31:59:50:6a:06:
15:7c:77:e0:15:40:0e:a8:08:16:7e:d3:8d:3a:ab:46:61:66:
88:27:ec:3a:fa:7d:ea:14:25:06:a4:46:18:c1:ef:ad:e0:a8:
b4:c0:48:90:1f:f6:26:1b:38:73:41:17:6b:62:6b:cd:4c:c1:
a6:e2:c7:5d:70:9e:47:29:d6:66:3c:d3:fc:48:56:3c:6b:19:
ff:79:16:45:77:8b:2b:ab:7e:e7:4d:cd:d0:c5:10:33:41:11:
0f:6e:fa:4f:4f:3a:2a:37:dc:34:1b:7e:74:e1:79:6b:82:21:
f4:62:6c:9d:c9:13:b1:37:d9:c1:4a:f6:17:f3:a3:c9:55:6f:
d1:2c:61:0b:69:e2:b7:aa:d0:d2:e5:5d:44:4a:a3:c4:49:3c:
94:4a:63:e2:43:73:92:52:39:e2:c3:d1:18:c6:41:25:f7:62:
6c:5b:57:b8:cc:a5:a0:75:83:24:ba:4a:e5:42:40:1f:bf:da:
f5:6e:c2:31:4d:f9:51:ec:b2:05:c8:0d:5a:48:71:03:10:70:
40:d2:71:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:35:06 2026 by rpki-client