
$ rpki-client -vvf rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft
File: aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft (raw, json)
Hash identifier: iWcu1bFtur1R2WAIoBasWtOIzUhuWGcbTCxnH/VGTfU=
Subject key identifier: 41:8C:01:35:6C:24:40:53:B6:FA:CC:F6:1C:58:36:8B:43:1A:69:74
Authority key identifier: 68:77:41:DE:15:CD:88:3C:10:DD:BC:4F:C3:A2:DC:F5:48:5E:7D:F3
Certificate issuer: /CN=A9114D4F/serialNumber=687741DE15CD883C10DDBC4FC3A2DCF5485E7DF3
Certificate serial: 0165
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft
Manifest number: 015F
Signing time: Fri 19 Jun 2026 05:07:14 +0000
Manifest this update: Fri 19 Jun 2026 05:07:13 +0000
Manifest next update: Fri 26 Jun 2026 05:07:13 +0000
Files and hashes: 1: aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl (hash: 3ttvxWb9P5TI7IsYNgXRlPo96af6zxrG5z08RsJH/qk=)
2: B70A38DCABD111F08E516516C4F9AE02.roa (hash: ej0+6PRzXsgl/obiA4CQWCET70nEM66QMDL6LuBaewE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl
rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Jun 2026 05:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 357 (0x165)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114D4F, serialNumber=687741DE15CD883C10DDBC4FC3A2DCF5485E7DF3
Validity
Not Before: Jun 19 05:07:13 2026 GMT
Not After : Jun 26 05:07:13 2026 GMT
Subject: CN=6a34ce82-fcbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bc:65:83:c4:01:bf:11:6d:f0:7b:e2:81:d2:
88:04:3a:12:ce:98:64:f4:f8:5d:e6:37:bc:96:cd:
87:37:32:bc:34:f3:ae:77:cc:63:e4:52:c8:04:f2:
e4:b5:7f:d3:99:75:4f:a0:3a:a3:4a:f8:76:44:3d:
e6:83:f4:65:be:82:d2:ca:ef:1b:4a:78:2a:c6:e1:
e2:5b:c6:c6:47:e4:bb:2b:57:d5:15:75:69:f6:6c:
d9:8e:86:8b:c2:e6:0b:a8:97:e3:9d:cf:da:96:da:
cd:56:7d:1a:5b:9b:c5:9c:72:48:ac:70:ac:6d:fa:
47:19:45:f4:70:55:2c:0a:07:57:c3:9a:da:7b:d5:
d1:20:ca:8b:d0:86:5b:5f:e1:0c:1b:85:01:94:5a:
11:0a:39:f2:c2:c8:f5:0b:a8:1d:ef:d5:5a:bb:20:
c1:04:88:2a:2f:ab:78:5b:72:44:dd:2e:13:f3:c3:
f7:b9:27:de:0d:e1:97:94:e8:27:a4:df:d3:cf:ef:
7b:db:f3:12:f8:f9:bf:26:64:2e:4b:49:a6:77:9f:
42:46:8e:da:be:d9:8a:d0:c8:bc:5e:f2:a4:58:92:
63:4a:92:9a:fa:d9:fd:eb:df:fb:c9:05:81:f3:ab:
e8:c1:07:37:64:03:3e:bf:d0:cf:22:f8:96:4a:ce:
4e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:8C:01:35:6C:24:40:53:B6:FA:CC:F6:1C:58:36:8B:43:1A:69:74
X509v3 Authority Key Identifier:
keyid:68:77:41:DE:15:CD:88:3C:10:DD:BC:4F:C3:A2:DC:F5:48:5E:7D:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:11:ec:a8:ca:62:2f:05:70:76:03:cc:12:35:12:5c:1f:ff:
6f:4a:c0:b7:71:5e:18:7f:b4:09:e3:ce:c8:37:a4:25:76:47:
49:37:ff:da:15:c4:8c:d6:b6:74:af:8c:f2:48:e9:7b:9a:2b:
ed:e3:ba:7e:83:61:1c:0d:ef:34:01:ad:0b:2f:1f:54:b0:21:
ad:d4:90:82:18:c4:59:95:8e:a6:72:8b:c0:ba:f1:53:79:b2:
b2:63:a4:c6:79:b7:eb:ef:d7:fb:b6:c6:43:d4:a5:f9:d9:53:
94:9e:5d:ef:4f:c2:a0:94:f3:fd:c4:7b:6a:7c:9d:4a:71:81:
7e:3b:bd:08:bd:30:d7:91:92:cf:dc:38:7f:54:ea:37:a7:5a:
09:a4:94:29:5d:64:bd:c7:36:c4:d6:d0:9f:bc:62:69:ed:ac:
1b:2e:3f:67:50:b9:d5:63:b2:83:8c:61:78:96:c6:7a:6d:d4:
f0:84:39:20:a1:69:4f:39:7d:9f:5e:84:f0:84:90:1a:cb:81:
be:d7:bc:4e:fb:14:42:3e:af:3b:5f:6b:96:1c:b1:77:e4:2e:
f7:d4:4b:bc:56:27:1a:49:2c:83:a6:ae:e6:c8:9d:e7:a0:2a:
fb:f1:51:46:42:16:7e:7b:f1:c8:12:dc:78:e2:0d:b2:41:7d:
0f:fa:6b:93
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTRENEYxMTAvBgNVBAUTKDY4Nzc0MURFMTVDRDg4M0MxMEREQkM0RkMzQTJEQ0Y1
NDg1RTdERjMwHhcNMjYwNjE5MDUwNzEzWhcNMjYwNjI2MDUwNzEzWjAYMRYwFAYD
VQQDEw02YTM0Y2U4Mi1mY2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAorxlg8QBvxFt8HvigdKIBDoSzphk9Phd5je8ls2HNzK8NPOud8xj5FLIBPLk
tX/TmXVPoDqjSvh2RD3mg/RlvoLSyu8bSngqxuHiW8bGR+S7K1fVFXVp9mzZjoaL
wuYLqJfjnc/altrNVn0aW5vFnHJIrHCsbfpHGUX0cFUsCgdXw5rae9XRIMqL0IZb
X+EMG4UBlFoRCjnywsj1C6gd79VauyDBBIgqL6t4W3JE3S4T88P3uSfeDeGXlOgn
pN/Tz+972/MS+Pm/JmQuS0mmd59CRo7avtmK0Mi8XvKkWJJjSpKa+tn969/7yQWB
86vowQc3ZAM+v9DPIviWSs5OUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEGMATVs
JEBTtvrM9hxYNotDGml0MB8GA1UdIwQYMBaAFGh3Qd4VzYg8EN28T8Oi3PVIXn3z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEQ0Ri8wRTNBQ0NGQzVC
OUMxMUVGOUIxNTQ5NDRDNEY5QUUwMi9hSGRCM2hYTmlEd1EzYnhQdzZMYzlVaGVm
Zk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FIZEIzaFhOaUR3UTNieFB3NkxjOVVoZWZmTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NEQ0Ri8wRTNBQ0NGQzVCOUMxMUVGOUIxNTQ5NDRDNEY5QUUwMi9hSGRCM2hYTmlE
d1EzYnhQdzZMYzlVaGVmZk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKBHsqMpiLwVwdgPMEjUSXB//b0rAt3FeGH+0CePOyDekJXZHSTf/2hXEjNa2
dK+M8kjpe5or7eO6foNhHA3vNAGtCy8fVLAhrdSQghjEWZWOpnKLwLrxU3mysmOk
xnm36+/X+7bGQ9Sl+dlTlJ5d70/CoJTz/cR7anydSnGBfju9CL0w15GSz9w4f1Tq
N6daCaSUKV1kvcc2xNbQn7xiae2sGy4/Z1C51WOyg4xheJbGem3U8IQ5IKFpTzl9
n16E8ISQGsuBvte8TvsUQj6vO19rlhyxd+Qu99RLvFYnGkksg6au5sid56Aq+/FR
RkIWfnvxyBLceOINskF9D/prkw==
-----END CERTIFICATE-----
Generated at Sat Jun 20 08:23:24 2026 by rpki-client