
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.mft
File: 05hHRxQle77zpal12QzQ3GW92-8.mft (raw, json)
Hash identifier: DzaFdZMV5krxMMHyQEMtbqeSWCqfC9EAkqYOWxkbGUM=
Subject key identifier: 6B:09:78:C1:68:39:BF:32:C8:74:4E:87:9B:7B:E4:BF:6C:23:B4:94
Authority key identifier: D3:98:47:47:14:25:7B:BE:F3:A5:A9:75:D9:0C:D0:DC:65:BD:DB:EF
Certificate issuer: /CN=A9197CBC/serialNumber=D398474714257BBEF3A5A975D90CD0DC65BDDBEF
Certificate serial: 0198
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05hHRxQle77zpal12QzQ3GW92-8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.mft
Manifest number: 0190
Signing time: Fri 25 Sep 2026 04:31:58 +0000
Manifest this update: Fri 25 Sep 2026 04:31:57 +0000
Manifest next update: Fri 02 Oct 2026 04:31:57 +0000
Files and hashes: 1: 05hHRxQle77zpal12QzQ3GW92-8.crl (hash: GqHbqwvELfaMyhG9FskJ+1CW+OF0Lp1/kbDqrHWcs5s=)
2: 13435546ABF211F0BA77FA0DC4F9AE02.roa (hash: 6Iz+Zjz7W/z2VSOl5A1kVCCKL4JJS2AWEccWCBcTKH8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.crl
rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05hHRxQle77zpal12QzQ3GW92-8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 04:31:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 408 (0x198)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197CBC, serialNumber=D398474714257BBEF3A5A975D90CD0DC65BDDBEF
Validity
Not Before: Sep 25 04:31:57 2026 GMT
Not After : Oct 2 04:31:57 2026 GMT
Subject: CN=6ab5f93e-471b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d6:0e:51:a2:f2:9b:bc:7d:a3:7c:ee:6f:2a:
ba:a4:3b:ee:12:a9:ae:1f:3f:49:0d:e5:52:cb:d4:
79:b4:82:7e:7a:b5:30:b4:eb:8a:ca:b1:2c:b0:2d:
c8:f0:60:22:c8:2b:ec:db:f2:a4:53:11:e9:7c:7f:
14:22:c9:b6:df:76:6b:53:66:b9:9c:56:07:72:d5:
97:85:62:ed:e0:4e:89:61:04:34:14:61:d1:be:dd:
75:5f:d0:c3:0f:ab:df:af:a5:55:1c:a0:fe:2a:e5:
e2:7f:df:45:4e:1e:15:0a:e7:a4:32:96:09:a2:8b:
75:5f:f9:43:f5:66:60:f0:e7:06:ba:af:03:05:36:
06:7b:60:72:de:90:cd:ea:01:e5:4f:87:5c:4c:07:
c7:9e:05:4e:a3:4c:54:53:a5:5e:a0:0e:b7:89:6f:
61:78:65:73:a6:7c:f5:f5:11:01:a6:c0:0b:1d:73:
ba:a2:4b:03:20:0f:3c:80:b7:20:98:d7:d5:96:71:
17:f3:8d:f2:24:bc:72:d6:ef:d4:39:b3:85:b3:dc:
e9:09:15:02:ad:5f:a4:28:2a:2f:43:7c:3d:2a:e0:
b7:a3:b0:91:41:d3:06:f8:f1:48:55:e8:ec:79:d1:
b6:8e:99:90:74:a4:51:37:e8:b0:ef:c3:b2:b0:73:
5b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:09:78:C1:68:39:BF:32:C8:74:4E:87:9B:7B:E4:BF:6C:23:B4:94
X509v3 Authority Key Identifier:
keyid:D3:98:47:47:14:25:7B:BE:F3:A5:A9:75:D9:0C:D0:DC:65:BD:DB:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05hHRxQle77zpal12QzQ3GW92-8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:5f:a9:37:d7:c9:30:a6:3f:5d:87:c2:96:3e:88:d3:24:df:
42:41:15:ca:01:90:57:48:86:37:11:92:79:5c:6b:6e:10:3b:
f9:30:7c:fd:f7:71:fe:6c:0c:f8:57:53:6c:ff:e0:8d:9e:48:
0f:55:79:89:2e:4e:c7:2b:75:3b:ec:96:01:90:89:1c:a3:14:
01:27:bf:cb:04:56:75:1e:00:4a:9a:53:5b:76:c5:e4:73:47:
95:a9:21:14:c3:66:63:a6:4d:bb:2f:ad:f2:c3:c0:33:95:5b:
ce:27:02:02:00:84:11:d2:40:dd:6b:45:76:45:c2:bb:ba:3a:
73:97:e3:83:1b:28:20:e5:63:ac:62:7c:cd:b4:3b:4a:a7:3a:
2d:64:78:42:26:96:5f:53:a1:0a:c8:d2:65:af:c0:cd:f1:97:
b4:f3:2d:14:68:17:48:44:9b:5a:66:d0:c9:7e:5f:e0:4b:4d:
b9:ac:5b:f8:7f:cf:96:d1:70:15:5c:be:6c:8b:7b:61:6b:e4:
3f:38:ce:e4:d6:2f:15:26:45:d6:e7:8b:a0:00:19:28:da:3f:
68:15:36:b4:9a:15:3a:b2:42:52:17:c8:45:2f:4e:c4:df:6a:
26:26:18:e8:62:5c:8b:c2:49:44:c6:32:01:83:2c:db:da:38:
aa:89:7c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:21:13 2026 by rpki-client