
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft
File: aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft (raw, json)
Hash identifier: wz0T/vAz/Njq+TitD2y8GAdnNlONooQH5wJh1HCUGz4=
Subject key identifier: 0D:18:13:AD:FC:71:9C:22:28:A4:69:26:B9:0C:C5:61:29:EA:1F:40
Authority key identifier: 68:77:41:DE:15:CD:88:3C:10:DD:BC:4F:C3:A2:DC:F5:48:5E:7D:F3
Certificate issuer: /CN=A9114D4F/serialNumber=687741DE15CD883C10DDBC4FC3A2DCF5485E7DF3
Certificate serial: 019B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft
Manifest number: 0195
Signing time: Sat 03 Oct 2026 05:03:07 +0000
Manifest this update: Sat 03 Oct 2026 05:03:07 +0000
Manifest next update: Sat 10 Oct 2026 05:03:07 +0000
Files and hashes: 1: aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl (hash: 2aEdOKd5/iZNaCVFpeqiVeaRE8jZ6pNjgDGR+/njmH8=)
2: B70A38DCABD111F08E516516C4F9AE02.roa (hash: ej0+6PRzXsgl/obiA4CQWCET70nEM66QMDL6LuBaewE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl
rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 05:03:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 411 (0x19b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114D4F, serialNumber=687741DE15CD883C10DDBC4FC3A2DCF5485E7DF3
Validity
Not Before: Oct 3 05:03:07 2026 GMT
Not After : Oct 10 05:03:07 2026 GMT
Subject: CN=6ac08c8b-7a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c1:67:84:41:66:89:86:e4:81:c5:f5:e2:04:
c0:34:ba:ab:f8:52:03:16:c1:dd:fb:84:57:3b:a4:
06:82:6f:03:d0:ca:2f:2b:ac:6a:0f:ba:e6:f6:74:
0f:92:e6:1b:70:bb:49:63:14:09:80:01:b5:ab:93:
ff:8b:0f:fd:4c:c7:ce:21:3a:f0:66:c9:06:34:70:
80:01:c0:fa:f1:6d:12:cf:94:94:af:1d:ed:a3:9e:
a1:f0:bd:05:81:66:03:d3:28:c2:ee:91:11:02:63:
49:a4:f8:6e:f9:5b:61:f4:ed:03:e9:9d:af:f6:da:
d2:8d:67:14:bd:66:26:e2:6c:d4:d9:17:b6:91:21:
49:9a:e9:d6:46:bb:fd:82:0d:7d:b8:c1:bf:6e:86:
c5:cb:a5:0e:8d:ec:91:9c:d7:1b:33:90:47:81:90:
a7:a6:24:32:f8:91:52:34:0e:b9:f5:83:cb:8c:00:
af:07:e5:02:8e:c4:87:45:30:32:42:17:bc:59:bf:
fe:8b:af:bd:50:e6:25:38:b5:05:50:a3:b4:e5:37:
1c:09:88:eb:46:60:38:4a:37:f0:5e:4f:00:e7:dd:
b4:71:1b:b3:95:ea:b0:30:3b:36:55:3f:f9:6f:56:
5a:80:26:26:fd:66:44:66:20:0c:36:7d:e4:85:b8:
6b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:18:13:AD:FC:71:9C:22:28:A4:69:26:B9:0C:C5:61:29:EA:1F:40
X509v3 Authority Key Identifier:
keyid:68:77:41:DE:15:CD:88:3C:10:DD:BC:4F:C3:A2:DC:F5:48:5E:7D:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:51:62:6b:5b:bc:cd:7f:9f:df:d4:a2:ef:69:4b:cd:9e:cf:
73:20:74:b3:27:69:ff:c8:11:2a:ed:2e:15:24:4d:11:32:4f:
12:79:9e:5d:79:08:2e:69:df:6e:b5:95:d8:f4:a5:e4:3b:45:
a4:a3:c3:7b:f9:99:c9:80:16:7c:7b:44:a9:a0:ed:5d:fe:04:
4d:79:c1:f6:bd:ef:0f:54:a4:41:7b:2b:12:41:ca:e9:6d:d7:
43:42:b1:f3:3a:8d:b8:e0:b4:e8:7a:98:44:33:6d:ca:c3:2a:
44:16:af:73:e0:4b:80:46:fd:3b:c1:8b:c7:78:35:0c:b7:a2:
7d:bb:f2:28:4e:59:9d:d4:28:e9:ec:00:8c:fd:44:61:f5:5f:
3f:14:5b:de:33:ba:3c:9e:cb:45:d2:66:8f:35:c1:43:44:14:
6d:19:d1:64:6a:01:1b:23:ee:7e:4b:ac:42:6a:b5:58:63:3c:
63:cc:cd:81:49:5e:a3:3b:31:0a:4c:a0:70:7f:1f:3d:84:5d:
69:bc:24:a2:20:a3:8a:32:ed:32:f7:df:d2:51:e4:4c:e5:6c:
20:9a:2b:98:e1:3f:52:a0:39:07:dd:ac:f2:8f:39:2e:7d:46:
13:d5:1b:3f:3c:36:6b:7f:16:33:f0:9f:66:7c:70:16:77:85:
f8:3e:7a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:39:11 2026 by rpki-client