
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft
File: h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft (raw, json)
Hash identifier: A2+Li/NJUVLytsA5apViz+YXY6HwiD6AZ9Rz7sWy99o=
Subject key identifier: 1E:34:6D:CA:45:9C:CA:18:C1:2E:7F:DE:48:46:8A:47:A8:66:94:76
Authority key identifier: 87:DA:44:A4:CF:83:9C:38:81:C6:BC:38:68:3C:CD:C3:08:CA:7C:E9
Certificate issuer: /CN=A919D180/serialNumber=87DA44A4CF839C3881C6BC38683CCDC308CA7CE9
Certificate serial: 0160
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9pEpM-DnDiBxrw4aDzNwwjKfOk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft
Manifest number: 014E
Signing time: Sat 03 Oct 2026 06:07:43 +0000
Manifest this update: Sat 03 Oct 2026 06:07:42 +0000
Manifest next update: Sat 10 Oct 2026 06:07:42 +0000
Files and hashes: 1: h9pEpM-DnDiBxrw4aDzNwwjKfOk.crl (hash: mjYIGyvGmjxmQj9hRJCQ0A28LRzfRsT/72+S9SUYbRM=)
2: 8A991E5AD6DC11EF9E9B2B15C4F9AE02.roa (hash: XNgGFgwjyc461p4JNKdvJk4zW9gJQhSshCp4+fjMbAY=)
3: C8D5160AE75E11EF97E59E40C4F9AE02.roa (hash: P4tVkKssSKb9dDeUTAtVa6Ci3IKXk3pij9DywFDumYU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.crl
rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9pEpM-DnDiBxrw4aDzNwwjKfOk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 06:07:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 352 (0x160)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D180, serialNumber=87DA44A4CF839C3881C6BC38683CCDC308CA7CE9
Validity
Not Before: Oct 3 06:07:42 2026 GMT
Not After : Oct 10 06:07:42 2026 GMT
Subject: CN=6ac09baf-c5cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f2:05:5e:0a:bb:eb:19:44:f9:f2:35:5b:d0:
47:bc:85:56:1e:47:3d:c6:8a:57:58:29:e9:0b:ec:
c4:51:eb:ed:22:96:32:2a:b3:a4:39:05:35:af:cc:
8c:56:b4:49:47:83:eb:3e:01:20:be:2e:32:71:bc:
68:11:87:44:c0:30:31:f5:fe:e7:aa:01:ad:5f:2e:
03:28:91:4c:5e:f6:b2:90:74:a3:09:02:e6:2b:6f:
9f:92:cd:08:bc:e9:95:7e:12:bc:09:9c:26:d7:ed:
b9:25:6e:59:6a:70:9a:6f:b2:f1:a6:5f:15:e6:00:
97:ac:c3:d8:89:eb:68:b0:3a:67:2e:dd:a3:70:a1:
c0:ce:af:1e:53:99:b5:6c:50:e9:50:d9:99:80:49:
f7:12:a5:75:bf:d9:54:a7:e1:e6:c7:94:ee:47:03:
9b:2c:fd:11:6b:57:fa:40:9b:25:44:d8:33:d2:aa:
f2:39:80:7e:90:ad:5f:1c:52:2f:38:9f:7c:d3:e4:
db:ab:3e:14:d2:01:55:22:00:59:af:98:a9:23:ea:
46:2a:8d:43:02:49:e3:6a:9a:0d:26:1c:cd:54:57:
15:b8:1f:34:0a:e8:a6:e6:3d:3d:ce:db:38:ba:9b:
e1:f0:93:90:a4:80:92:b9:59:48:07:68:c2:62:67:
d4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:34:6D:CA:45:9C:CA:18:C1:2E:7F:DE:48:46:8A:47:A8:66:94:76
X509v3 Authority Key Identifier:
keyid:87:DA:44:A4:CF:83:9C:38:81:C6:BC:38:68:3C:CD:C3:08:CA:7C:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9pEpM-DnDiBxrw4aDzNwwjKfOk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:12:8d:00:21:1b:5f:92:2e:8d:b6:50:3c:9b:cf:5f:3c:54:
3c:f2:e6:c4:70:90:fc:72:d6:c2:11:d4:db:5d:6b:2b:f9:6d:
8c:95:00:92:81:dc:ed:d3:67:0a:90:7b:22:84:7e:66:98:a5:
87:51:22:35:c0:f7:ee:1a:6e:70:ec:eb:ce:f8:24:93:50:44:
7b:cf:89:00:7c:c6:87:4a:f7:53:ea:7a:da:51:da:5c:f7:73:
ac:a0:a8:39:19:ba:84:95:54:df:10:01:c7:75:a4:1f:5f:c0:
47:80:a0:36:7b:3a:5b:0e:3f:c2:eb:4e:ea:10:98:e3:c1:9c:
69:b6:6a:64:a3:b7:30:c2:39:5c:4f:c8:a8:c5:2a:ac:c8:3b:
0c:51:19:9a:7a:bf:e6:6d:ff:52:1e:7a:93:ea:96:95:f5:97:
1b:f6:a8:94:96:3d:b0:93:e5:e2:5d:7b:aa:e9:63:da:5f:22:
0b:1e:a4:5c:62:93:4c:73:8d:57:6c:98:ff:62:70:11:19:e5:
a0:cf:85:d3:82:b1:2a:9a:2c:2d:3b:11:3b:e0:b3:98:aa:c2:
f5:a1:94:32:d3:65:fc:73:b5:5d:28:48:81:e0:67:6b:0e:fe:
d5:36:07:c2:d5:a8:28:39:7f:9a:d7:58:14:2f:52:00:72:27:
37:fc:8c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 17:41:59 2026 by rpki-client