
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft
File: HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft (raw, json)
Hash identifier: mXr0qgPXKgjULW87OR7LqjbxVRJLamN+xt+szHPJHrs=
Subject key identifier: 6C:87:99:0E:1A:82:4F:96:F8:98:C6:72:39:E2:39:5D:BF:E6:E4:75
Authority key identifier: 1D:F9:C0:CE:F9:A7:7D:CD:15:BB:51:F9:3F:D3:42:99:9B:E1:16:58
Certificate issuer: /CN=A9178C1E/serialNumber=1DF9C0CEF9A77DCD15BB51F93FD342999BE11658
Certificate serial: 01F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft
Manifest number: 01F1
Signing time: Wed 23 Sep 2026 03:15:11 +0000
Manifest this update: Wed 23 Sep 2026 03:15:10 +0000
Manifest next update: Wed 30 Sep 2026 03:15:10 +0000
Files and hashes: 1: HfnAzvmnfc0Vu1H5P9NCmZvhFlg.crl (hash: OIF6IeauAGwcTv9Da/gQ3x1FrSY0lrsy6mfButVcPAM=)
2: 4AFD4994CDD011EEA5534481C4F9AE02.roa (hash: LectFDdTSMn7loXlQ2Wf7gPQucdUaSBxJzRdeIEEXm4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.crl
rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 03:15:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 504 (0x1f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178C1E, serialNumber=1DF9C0CEF9A77DCD15BB51F93FD342999BE11658
Validity
Not Before: Sep 23 03:15:10 2026 GMT
Not After : Sep 30 03:15:10 2026 GMT
Subject: CN=6ab3443f-2cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1a:df:6b:c0:fb:f4:c8:c8:c2:43:b2:19:3b:
a5:bc:f9:5d:4e:f2:4a:f7:61:77:06:93:de:33:06:
41:43:4e:a3:c5:bc:b7:95:55:0f:96:f3:70:6d:a0:
f0:72:96:65:ce:71:e2:6b:70:f6:dc:e4:1a:d1:c3:
87:9b:1e:95:dd:f8:8d:9f:2d:39:41:a3:5c:ad:30:
86:c0:a6:73:fb:28:0e:bc:d2:64:7e:38:0b:a0:f1:
19:01:97:81:db:df:c1:82:ee:30:0a:69:ea:8a:a4:
48:69:60:b9:a9:46:d3:ec:2d:85:1a:bd:96:03:e6:
93:5a:9f:04:9a:e4:b1:41:78:08:25:b0:4a:56:66:
d0:66:29:b0:af:80:30:12:4a:73:78:7f:24:28:ea:
7a:7f:3c:11:72:f6:c5:ae:db:5d:08:3d:7a:b9:94:
ed:7c:a6:fc:a5:bb:4a:7f:ee:d4:57:b9:2e:dd:df:
45:c7:a2:ab:eb:28:42:b9:93:3a:0b:6f:41:76:7c:
66:74:d4:4a:e9:77:38:e1:ef:dd:9a:f2:5b:68:6e:
99:fb:29:bd:32:b7:eb:b5:27:b0:8a:29:c2:4a:d5:
3a:7f:2c:e2:c4:5f:93:3a:d4:46:98:21:bd:5b:93:
a5:7b:34:c8:2b:8d:2f:df:1a:2d:db:59:5d:e9:0d:
bc:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:87:99:0E:1A:82:4F:96:F8:98:C6:72:39:E2:39:5D:BF:E6:E4:75
X509v3 Authority Key Identifier:
keyid:1D:F9:C0:CE:F9:A7:7D:CD:15:BB:51:F9:3F:D3:42:99:9B:E1:16:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:06:c9:d6:22:28:c3:7c:86:1b:2a:e7:4e:10:49:c8:18:b6:
60:95:d1:56:d7:3b:d3:11:51:98:4c:c6:68:2f:f2:17:20:07:
7c:a6:0f:8c:95:af:2b:c1:38:e2:72:f6:c1:8c:38:34:24:dc:
2e:4f:2d:23:4f:9a:09:31:4f:b8:e0:d8:6c:8b:ea:70:08:3c:
13:1b:8c:9b:45:b2:cd:f4:a7:0b:67:99:a1:3d:f2:06:37:3c:
6a:c9:55:ba:e6:10:88:54:15:f3:e4:0b:91:7b:b5:f0:51:1f:
fa:19:ca:dd:6a:36:9b:b3:06:af:69:f4:47:67:4b:a0:88:a0:
19:1d:ae:f8:16:eb:6a:12:7d:0b:5c:59:8a:c1:07:bf:5c:4f:
e7:4b:db:2a:05:f7:cf:8d:aa:19:0a:0e:57:b1:f6:60:4c:8a:
d4:ca:46:d3:d3:fa:2f:9c:6b:8f:eb:62:81:fe:e0:0b:e2:a7:
41:4d:4f:8c:cc:8b:4c:6c:16:d2:25:0f:44:bc:89:0e:a6:d8:
e8:9f:65:67:a5:b8:19:63:21:1b:c6:b9:17:c0:a0:17:c4:2d:
d9:0c:60:4a:e5:33:6f:af:63:e9:f7:6d:75:8b:a8:a1:07:11:
cd:8f:97:41:40:4a:a7:a6:77:2b:d9:d7:83:4a:f5:ae:bc:17:
1a:df:d3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:16:51 2026 by rpki-client