
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft
File: HJuixf6owDTaVR_a3GKlOnoC5ds.mft (raw, json)
Hash identifier: Z5i4wSide7gR95alkVU1I5Yfum+JuvvC+D2HkU3W2+k=
Subject key identifier: F9:D3:73:1E:F5:05:E5:E0:5A:6B:C3:76:55:5D:D3:B3:9E:74:9F:6F
Authority key identifier: 1C:9B:A2:C5:FE:A8:C0:34:DA:55:1F:DA:DC:62:A5:3A:7A:02:E5:DB
Certificate issuer: /CN=A9193D86/serialNumber=1C9BA2C5FEA8C034DA551FDADC62A53A7A02E5DB
Certificate serial: 0A6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft
Manifest number: 0A49
Signing time: Thu 24 Sep 2026 19:38:59 +0000
Manifest this update: Thu 24 Sep 2026 19:38:58 +0000
Manifest next update: Thu 01 Oct 2026 19:38:58 +0000
Files and hashes: 1: HJuixf6owDTaVR_a3GKlOnoC5ds.crl (hash: 9+FQ01cUQNsOfJLS/p1HD7JXq9ao4iZtKtV5hCwx1yY=)
2: 79C02FB0CC8511EC8D238672C4F9AE02.roa (hash: PEyE0w8+UrcKJlHY3jaK16cYhVK4lg74ijcsWV2DoxU=)
3: 52FC6006A19911EA96035C38C4F9AE02.roa (hash: WcxNaiIGqzItQBb7CYbwvBMMYMGcLD8tEl0Q7aIbezo=)
4: 7B136C42CC8511EC8D238672C4F9AE02.roa (hash: f4XaB+bRmsoNFuDMRRMiph6D0qfKs6SQvSg9M2XJC3I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.crl
rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 19:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2667 (0xa6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193D86, serialNumber=1C9BA2C5FEA8C034DA551FDADC62A53A7A02E5DB
Validity
Not Before: Sep 24 19:38:58 2026 GMT
Not After : Oct 1 19:38:58 2026 GMT
Subject: CN=6ab57c52-02a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b3:42:d4:70:40:c4:96:29:8d:c5:5f:b2:8f:
a5:be:cc:e0:f0:24:2c:99:ce:7a:cf:3b:86:b0:4c:
80:39:06:b0:de:23:ec:bc:30:ab:3d:a0:6f:d7:2c:
6e:28:12:c6:9c:49:06:d6:19:30:41:fd:d7:9d:68:
a8:5f:d0:99:8a:08:0a:26:e3:0b:09:8d:c2:07:af:
60:44:c2:66:22:c0:7d:d8:41:41:56:eb:54:b7:ca:
99:41:48:f2:a3:1c:26:b0:ac:12:ae:bc:2e:86:d3:
e1:04:2a:33:40:e3:c0:35:ef:84:61:c1:8b:63:01:
e8:63:88:30:b2:ff:24:1c:00:f6:1c:c1:b0:f4:90:
04:75:64:80:51:c0:77:d6:38:aa:75:d3:94:b9:90:
14:7e:23:10:17:68:4f:4c:15:ca:0f:20:68:2d:5d:
98:f8:d7:53:ba:f3:a2:b8:9c:a2:31:7a:57:4f:f8:
73:78:73:2f:3f:73:23:fc:05:84:85:39:74:f7:f8:
21:74:0a:0a:68:4c:66:4f:e9:a8:9d:4c:7b:ca:39:
f2:83:7c:7e:41:f2:08:ae:cf:88:9f:da:5e:36:4e:
23:c0:33:fa:a7:41:d9:54:0e:1b:9e:d1:11:94:45:
f2:48:28:3b:54:03:a1:2b:e6:02:19:79:b4:58:9c:
4d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D3:73:1E:F5:05:E5:E0:5A:6B:C3:76:55:5D:D3:B3:9E:74:9F:6F
X509v3 Authority Key Identifier:
keyid:1C:9B:A2:C5:FE:A8:C0:34:DA:55:1F:DA:DC:62:A5:3A:7A:02:E5:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:58:f8:6a:d9:06:87:f7:58:e6:96:70:cd:65:e6:9b:91:cd:
df:6b:47:14:74:79:d8:06:d9:ee:33:59:ca:df:a5:6a:fb:3d:
f7:46:aa:26:41:53:bc:53:4e:75:90:24:34:50:0a:a4:9e:d3:
1d:bb:75:48:83:20:b4:29:ff:3c:e6:b7:1d:13:ba:5f:be:fb:
09:60:55:bd:81:22:91:87:48:df:b1:21:68:78:d7:f4:78:80:
b1:b0:55:13:a9:81:ab:c8:55:e1:63:76:c5:c2:93:8c:c9:63:
ed:34:8a:e1:18:1c:41:60:80:0b:db:ae:bb:f6:8c:0f:d3:f1:
5f:90:73:8b:ba:8a:0c:99:aa:13:67:fe:45:7e:67:c5:10:8c:
f8:6f:37:29:94:42:c4:cf:f8:58:d7:56:e2:33:60:ad:fe:21:
ab:f5:8c:55:27:ad:1d:a5:06:41:9e:84:3e:c0:39:52:28:61:
bf:cb:7d:c2:cd:65:9e:8c:b5:a4:97:74:50:73:9f:26:97:27:
87:05:a0:52:21:15:fe:62:b8:79:41:b2:a9:c1:cd:45:f2:cb:
a8:33:f0:57:be:52:57:6d:21:0a:31:e7:cf:34:72:6f:61:99:
6a:69:57:65:cf:96:e2:4e:60:68:ea:c6:61:8b:cd:b0:54:d5:
55:74:17:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:01:13 2026 by rpki-client