
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.mft
File: hGiwIZf8m3cK-EBVe_QVoLYTgg0.mft (raw, json)
Hash identifier: A6ryHkffrj4cxEMDPtV46kn/yTfEynVOpMKp5p3aimk=
Subject key identifier: 48:51:1A:7E:A1:31:8D:20:AD:09:21:D0:6E:F8:E3:B2:4F:05:4B:96
Authority key identifier: 84:68:B0:21:97:FC:9B:77:0A:F8:40:55:7B:F4:15:A0:B6:13:82:0D
Certificate issuer: /CN=A9198767/serialNumber=8468B02197FC9B770AF840557BF415A0B613820D
Certificate serial: 020B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGiwIZf8m3cK-EBVe_QVoLYTgg0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.mft
Manifest number: 01FE
Signing time: Thu 23 Jul 2026 04:34:08 +0000
Manifest this update: Thu 23 Jul 2026 04:34:07 +0000
Manifest next update: Thu 30 Jul 2026 04:34:07 +0000
Files and hashes: 1: hGiwIZf8m3cK-EBVe_QVoLYTgg0.crl (hash: p68tpvShK8ZxlzAnXdYE4suhn1HEPciS69mo9vD2Nd8=)
2: 7BABB4BE884C11EE81C71A38C4F9AE02.roa (hash: 9Cz73WT7Rn3Trdhhklo6EWl3uWAxMBB/0nYJ5e8QOZY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.crl
rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGiwIZf8m3cK-EBVe_QVoLYTgg0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:34:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 523 (0x20b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9198767, serialNumber=8468B02197FC9B770AF840557BF415A0B613820D
Validity
Not Before: Jul 23 04:34:07 2026 GMT
Not After : Jul 30 04:34:07 2026 GMT
Subject: CN=6a6199c0-4aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7e:71:a4:3e:04:19:55:90:c3:49:a7:e8:ae:
e2:c7:0d:0b:e3:31:f8:b5:8f:9e:bb:0f:d2:a7:f6:
a6:80:f4:dd:b6:70:54:f1:e8:54:4b:14:86:fb:75:
31:a7:c2:a8:85:14:62:a0:85:58:9c:26:b8:4a:d9:
ee:09:72:b5:fb:5a:fb:a3:a2:40:64:61:a2:30:07:
1f:cb:95:57:f0:94:1f:64:8f:f5:e4:87:80:65:fc:
f5:69:9d:a9:af:86:ba:e2:be:ca:79:33:46:6c:ad:
d4:26:07:ea:41:75:a6:0b:04:db:30:79:b7:7b:88:
2d:0c:ce:0a:e9:76:69:ea:9f:fc:dc:f5:ea:8d:f9:
ad:81:ca:37:62:8d:13:e0:a7:03:6c:20:d3:b0:d7:
af:88:05:00:bc:ea:bc:5b:90:cf:6b:10:58:94:70:
48:ce:5f:fa:c6:8c:af:9a:c4:39:f1:8d:b9:61:d7:
eb:77:08:7a:2c:0f:1b:fc:78:20:fc:bc:08:94:b5:
35:0e:4b:e0:68:8e:ad:b0:19:1a:ae:1b:17:ee:ec:
17:a1:1c:ca:0a:db:e8:9d:a2:b4:c3:01:8e:dc:f9:
74:97:15:c9:55:ff:fc:b5:9f:c9:c4:a5:c5:f6:77:
6a:20:d4:e9:08:8e:4a:97:3e:e6:3c:a3:8f:4b:86:
80:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:51:1A:7E:A1:31:8D:20:AD:09:21:D0:6E:F8:E3:B2:4F:05:4B:96
X509v3 Authority Key Identifier:
keyid:84:68:B0:21:97:FC:9B:77:0A:F8:40:55:7B:F4:15:A0:B6:13:82:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGiwIZf8m3cK-EBVe_QVoLYTgg0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:d4:96:28:2b:3b:f3:38:12:6a:c8:79:ff:8e:3d:99:2f:e7:
99:66:ad:09:4e:1d:1b:14:a0:b7:63:c9:90:7f:98:d7:c9:18:
10:58:45:a5:80:44:df:44:0b:ba:c3:e6:6f:28:bd:e5:d8:ca:
93:8b:0e:60:5e:23:6a:c5:f7:5b:f6:8e:0f:4a:f8:86:1a:af:
9f:ee:9f:64:4f:fb:b0:18:f6:7c:df:5d:26:86:66:ff:63:7a:
aa:2c:fe:f2:13:88:d1:a4:02:79:4f:a0:44:6c:4d:23:3f:b0:
b6:f9:0a:a0:2d:41:a7:3b:9c:3e:f7:22:8c:a7:8b:58:58:98:
00:2a:8e:d4:10:e7:f6:31:b6:96:e3:b2:f3:24:07:6f:da:9e:
60:69:84:62:2b:35:85:6a:72:b5:2b:64:85:98:b6:46:29:37:
5f:4a:e4:55:c0:36:d5:ad:35:0d:5f:96:bc:e2:01:46:9b:d2:
77:ad:6d:3f:8c:5e:2c:06:9f:0c:4a:dc:4f:dd:5a:84:2a:f2:
ae:5e:31:2b:bb:29:71:a1:1f:cc:6e:34:30:9a:73:6f:c6:8c:
dc:29:94:46:48:6e:c2:fb:01:95:08:90:a1:61:33:1b:4d:16:
d8:b6:88:fa:0f:e7:95:6c:98:2e:50:71:30:d2:6f:ee:f5:4f:
cd:50:7e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:49:24 2026 by rpki-client