
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft
File: hF2I4KIVFF82fZMEvz9xrujrTC0.mft (raw, json)
Hash identifier: Ny+2B7xHktAKL2TaVZayL7bnz6myZ+FLkiKrMsg7kgA=
Subject key identifier: 32:99:3C:B8:76:33:E5:61:5B:B7:E5:4E:7E:2A:54:47:1F:F2:69:67
Authority key identifier: 84:5D:88:E0:A2:15:14:5F:36:7D:93:04:BF:3F:71:AE:E8:EB:4C:2D
Certificate issuer: /CN=A9194AE2/serialNumber=845D88E0A215145F367D9304BF3F71AEE8EB4C2D
Certificate serial: 019D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hF2I4KIVFF82fZMEvz9xrujrTC0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft
Manifest number: 0186
Signing time: Thu 23 Jul 2026 06:03:57 +0000
Manifest this update: Thu 23 Jul 2026 06:03:57 +0000
Manifest next update: Thu 30 Jul 2026 06:03:57 +0000
Files and hashes: 1: hF2I4KIVFF82fZMEvz9xrujrTC0.crl (hash: qcZAwM1K0kOFRwPdS9UemeHqWXpFIdP8maJlv6PkDOE=)
2: 2042987C6C4411EF9B263275C4F9AE02.roa (hash: 9GZpU2PHliAK9NY+OWOq5Tt+JHpwX/IWIj0455bKALU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.crl
rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hF2I4KIVFF82fZMEvz9xrujrTC0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:03:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 413 (0x19d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194AE2, serialNumber=845D88E0A215145F367D9304BF3F71AEE8EB4C2D
Validity
Not Before: Jul 23 06:03:57 2026 GMT
Not After : Jul 30 06:03:57 2026 GMT
Subject: CN=6a61aecd-ece5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:16:b1:d2:2c:db:63:e0:d2:95:65:4c:c6:e3:
59:f4:53:bd:c2:28:07:19:a2:a6:65:24:84:bc:8a:
f8:e2:9b:a3:ee:91:e1:0a:18:24:51:36:fa:d9:00:
d6:f0:b3:a1:40:b3:7e:df:86:1c:74:fe:ce:1e:fb:
e3:17:0d:32:ec:81:83:5a:6a:cf:8b:b8:e2:c4:3f:
a9:b8:ac:40:e0:33:6c:b7:b2:65:21:27:70:b6:8e:
91:c3:d9:19:01:5d:98:23:c1:f5:14:06:95:16:35:
ad:9e:d5:a4:bf:3d:06:39:90:82:12:44:c2:34:58:
3b:15:29:46:12:32:3b:3d:74:48:26:1b:18:ba:bd:
2b:6f:82:6a:88:eb:58:ad:59:a5:ab:5b:4c:93:08:
ba:c1:f3:fa:58:0f:86:18:0e:a2:47:cc:24:e4:09:
07:6f:e2:f6:a5:30:5c:bd:0a:23:c6:7e:b7:a3:39:
2d:1a:93:5e:b4:23:9f:a7:5e:eb:f8:46:94:79:72:
32:ff:a7:fb:28:f2:96:2e:ec:f4:6e:f5:81:12:b6:
5e:1b:2c:23:55:b2:b4:0f:6e:2e:b6:21:9a:a7:b6:
a8:ee:50:13:fe:9f:4a:9d:c5:bd:fc:82:f9:b3:39:
a6:bf:84:de:3f:df:be:cb:70:a9:6d:b3:14:ab:15:
78:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:99:3C:B8:76:33:E5:61:5B:B7:E5:4E:7E:2A:54:47:1F:F2:69:67
X509v3 Authority Key Identifier:
keyid:84:5D:88:E0:A2:15:14:5F:36:7D:93:04:BF:3F:71:AE:E8:EB:4C:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hF2I4KIVFF82fZMEvz9xrujrTC0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:d9:99:eb:84:71:de:9b:09:da:d8:65:c7:4d:73:75:9f:43:
ae:91:b3:40:c3:8e:d1:25:cb:e4:c9:85:d6:14:72:72:66:37:
88:79:ec:74:0b:32:02:32:61:4d:64:a5:ca:d1:6e:6b:06:21:
df:ec:9e:79:fb:48:90:19:1a:70:81:cb:f8:b3:d9:e3:fb:b8:
60:1f:de:82:6f:dd:6e:2c:61:cc:c6:3e:0d:f8:a8:bc:c0:88:
de:74:de:e5:30:6c:bc:51:50:73:e6:8f:3b:70:5a:04:51:a2:
b3:df:2d:c2:a4:71:20:b7:e4:29:ae:91:37:a0:18:d2:92:25:
fa:d2:9b:67:d8:cf:42:61:1c:ab:29:ad:86:7e:d7:e8:4e:69:
bf:89:08:d2:b5:35:99:6f:ef:0d:14:97:1f:25:82:e0:75:65:
53:f4:95:0d:51:f8:54:ab:55:41:d9:9d:ed:25:5e:64:37:c0:
17:bb:68:96:0d:96:8e:cc:ba:7f:3c:57:1b:2e:cd:be:68:2d:
70:31:bb:7a:f6:0b:2d:f4:94:a7:d0:5a:dd:9d:ce:97:c1:16:
3f:01:39:09:24:ad:c7:02:96:2c:a2:78:07:39:ca:20:7b:e3:
e9:12:cc:c1:7e:69:c9:ba:99:02:32:c3:3b:02:2f:54:71:ba:
28:e7:dd:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:39:11 2026 by rpki-client