
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft
File: hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft (raw, json)
Hash identifier: otU/YGvz2r/BgWKScuNQLam+6UNp0E9kveb7Sg7A62k=
Subject key identifier: B1:8E:64:9B:37:68:45:B1:27:15:0E:B4:F9:68:F4:5F:36:0F:91:B7
Authority key identifier: 85:C5:67:25:91:03:D9:E2:29:2E:64:DB:FB:79:FD:39:B2:56:FD:E4
Certificate issuer: /CN=A9196DCA/serialNumber=85C567259103D9E2292E64DBFB79FD39B256FDE4
Certificate serial: 0141
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcVnJZED2eIpLmTb-3n9ObJW_eQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft
Manifest number: 0141
Signing time: Mon 21 Sep 2026 05:24:01 +0000
Manifest this update: Mon 21 Sep 2026 05:24:00 +0000
Manifest next update: Mon 28 Sep 2026 05:24:00 +0000
Files and hashes: 1: hcVnJZED2eIpLmTb-3n9ObJW_eQ.crl (hash: 2+UFjEvnFytXVS83Iee1JF6lPIqLjUwftcaAz34gj2E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.crl
rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcVnJZED2eIpLmTb-3n9ObJW_eQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 05:24:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 321 (0x141)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196DCA, serialNumber=85C567259103D9E2292E64DBFB79FD39B256FDE4
Validity
Not Before: Sep 21 05:24:00 2026 GMT
Not After : Sep 28 05:24:00 2026 GMT
Subject: CN=6ab0bf71-b425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:32:c1:70:93:43:40:d9:b6:1a:7a:3e:fd:d4:
c8:63:cd:99:88:8e:4a:58:b6:34:31:6f:7a:7b:0f:
62:03:e4:c5:61:5a:54:a3:aa:03:a0:69:dd:97:79:
e2:71:43:9a:44:08:75:ff:c4:52:85:dc:25:c1:08:
b1:e3:0d:18:5b:ab:51:03:06:89:97:16:28:ce:e5:
02:23:84:42:3c:aa:38:f6:7e:44:69:21:fb:2c:ae:
f1:01:0e:fd:77:60:9c:ed:7f:5d:11:2e:37:5d:03:
0b:db:0d:f4:d1:53:d1:ba:2d:d9:30:f9:ad:d5:fa:
50:b1:7e:af:09:78:ac:87:40:f4:6d:ad:1d:2d:d2:
53:28:cf:86:fa:23:5c:03:73:17:1d:40:ec:16:dc:
c8:9b:ae:b3:c9:12:02:52:16:45:f9:3d:93:f5:ad:
81:a8:de:1b:86:76:30:e7:78:01:5c:e5:24:ca:5c:
f8:e3:89:98:99:76:47:1a:f2:bf:22:8c:93:5c:25:
2e:94:ea:d6:01:90:d3:ea:a1:33:8b:a6:aa:1b:da:
aa:52:e8:f8:cf:c7:7c:3b:2e:11:82:3c:7c:9a:7d:
72:45:3e:f3:fd:71:15:b2:fa:d4:09:b0:50:c7:16:
97:4d:e9:cc:59:07:16:e3:bf:ad:71:99:b9:31:ec:
92:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:8E:64:9B:37:68:45:B1:27:15:0E:B4:F9:68:F4:5F:36:0F:91:B7
X509v3 Authority Key Identifier:
keyid:85:C5:67:25:91:03:D9:E2:29:2E:64:DB:FB:79:FD:39:B2:56:FD:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcVnJZED2eIpLmTb-3n9ObJW_eQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e3:5e:c0:cf:68:cf:b1:bf:b4:6a:d2:7c:cb:de:07:04:74:
db:84:23:0c:ff:99:49:60:e0:01:6c:ee:1f:2a:31:3c:46:42:
d1:69:37:74:96:55:d4:d3:1d:f0:e1:e7:68:2c:23:8e:55:3d:
28:19:de:32:0b:ca:77:b5:df:a7:9f:3e:47:d2:6c:bd:e6:9a:
2e:90:ab:38:bb:47:8c:df:a9:ee:e8:56:07:cd:73:23:7b:32:
2f:91:2f:8b:84:b2:3a:54:83:ff:d0:96:75:dc:9b:ba:9d:b5:
0d:5b:a3:25:a8:87:f3:52:f8:a9:bd:92:86:8a:e6:7d:de:c4:
cd:1d:29:06:4c:47:c7:e2:19:95:a4:8d:5a:c7:f2:6f:4f:c3:
7d:ee:f5:37:82:3e:9d:d8:9c:d1:cd:ea:1c:0c:1f:8b:b8:f3:
e0:a6:c7:e9:7c:24:c2:d5:6f:af:e8:84:3b:62:7c:a2:82:22:
b2:36:96:65:0a:f3:64:d2:90:e4:07:3f:29:64:71:b4:6c:09:
36:97:64:f5:02:2f:77:a8:0a:31:53:06:be:c8:ba:c0:6e:09:
a1:2f:94:36:73:0f:1a:3a:9f:15:2c:87:7a:f7:d8:26:ee:60:
15:a2:5d:61:8a:00:ef:82:96:b6:53:91:de:d7:3e:9c:83:3d:
85:6f:74:28
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTZEQ0ExMTAvBgNVBAUTKDg1QzU2NzI1OTEwM0Q5RTIyOTJFNjREQkZCNzlGRDM5
QjI1NkZERTQwHhcNMjYwOTIxMDUyNDAwWhcNMjYwOTI4MDUyNDAwWjAYMRYwFAYD
VQQDEw02YWIwYmY3MS1iNDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxjLBcJNDQNm2Gno+/dTIY82ZiI5KWLY0MW96ew9iA+TFYVpUo6oDoGndl3ni
cUOaRAh1/8RShdwlwQix4w0YW6tRAwaJlxYozuUCI4RCPKo49n5EaSH7LK7xAQ79
d2Cc7X9dES43XQML2w300VPRui3ZMPmt1fpQsX6vCXish0D0ba0dLdJTKM+G+iNc
A3MXHUDsFtzIm66zyRICUhZF+T2T9a2BqN4bhnYw53gBXOUkylz444mYmXZHGvK/
IoyTXCUulOrWAZDT6qEzi6aqG9qqUuj4z8d8Oy4Rgjx8mn1yRT7z/XEVsvrUCbBQ
xxaXTenMWQcW47+tcZm5MeySAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLGOZJs3
aEWxJxUOtPlo9F82D5G3MB8GA1UdIwQYMBaAFIXFZyWRA9niKS5k2/t5/TmyVv3k
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkRDQS81ODNGRkM5NENC
MUYxMUVGQjdBQzI3ODZDNEY5QUUwMi9oY1ZuSlpFRDJlSXBMbVRiLTNuOU9iSldf
ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hjVm5KWkVEMmVJcExtVGItM245T2JKV19lUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NkRDQS81ODNGRkM5NENCMUYxMUVGQjdBQzI3ODZDNEY5QUUwMi9oY1ZuSlpFRDJl
SXBMbVRiLTNuOU9iSldfZVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAX+NewM9oz7G/tGrSfMveBwR024QjDP+ZSWDgAWzuHyoxPEZC0Wk3dJZV1NMd
8OHnaCwjjlU9KBneMgvKd7Xfp58+R9JsveaaLpCrOLtHjN+p7uhWB81zI3syL5Ev
i4SyOlSD/9CWddybup21DVujJaiH81L4qb2Shormfd7EzR0pBkxHx+IZlaSNWsfy
b0/Dfe71N4I+ndic0c3qHAwfi7jz4KbH6XwkwtVvr+iEO2J8ooIisjaWZQrzZNKQ
5Ac/KWRxtGwJNpdk9QIvd6gKMVMGvsi6wG4JoS+UNnMPGjqfFSyHevfYJu5gFaJd
YYoA74KWtlOR3tc+nIM9hW90KA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 20:15:36 2026 by rpki-client