
$ rpki-client -vvf rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft
File: aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft (raw, json)
Hash identifier: AU/mqAR6sS6elWaocv7vAfNXI6xQeEqyqw7LLXKBYTg=
Subject key identifier: 99:64:7E:13:EA:56:66:AA:10:4C:7B:B9:70:A6:D0:6C:9F:7B:50:05
Authority key identifier: 68:77:41:DE:15:CD:88:3C:10:DD:BC:4F:C3:A2:DC:F5:48:5E:7D:F3
Certificate issuer: /CN=A9114D4F/serialNumber=687741DE15CD883C10DDBC4FC3A2DCF5485E7DF3
Certificate serial: 0184
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft
Manifest number: 017E
Signing time: Wed 19 Aug 2026 05:16:44 +0000
Manifest this update: Wed 19 Aug 2026 05:16:44 +0000
Manifest next update: Wed 26 Aug 2026 05:16:44 +0000
Files and hashes: 1: aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl (hash: U2XREEOGbap+IeQtRkKCH7GRHI0U4/LGotzTY8ETpaM=)
2: B70A38DCABD111F08E516516C4F9AE02.roa (hash: ej0+6PRzXsgl/obiA4CQWCET70nEM66QMDL6LuBaewE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl
rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 05:16:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 388 (0x184)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114D4F, serialNumber=687741DE15CD883C10DDBC4FC3A2DCF5485E7DF3
Validity
Not Before: Aug 19 05:16:44 2026 GMT
Not After : Aug 26 05:16:44 2026 GMT
Subject: CN=6a853c3c-abb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:aa:a8:3d:0a:44:ad:5f:58:83:39:3a:7e:a6:
28:fe:6f:05:a4:d1:c6:d6:5c:f4:5b:db:2b:6f:40:
60:c7:af:7d:10:b2:27:ad:72:9b:22:63:17:e4:59:
82:7b:75:65:ce:df:db:26:55:6f:07:6b:34:1a:1d:
b7:b7:ff:dc:4f:80:c1:71:67:98:cf:87:70:72:50:
fb:05:f9:d3:08:84:b6:bb:99:79:ab:e7:c8:2d:82:
d3:6f:01:6b:4d:a0:f0:d1:60:43:ab:0b:5d:d2:1e:
5a:01:bf:4d:c1:ee:11:26:06:0e:32:85:4b:a4:00:
74:23:5d:41:c7:bc:c1:df:3a:fe:d5:e1:d8:73:be:
a1:b1:75:09:3d:82:6f:5f:9e:ba:30:1c:da:87:51:
80:07:24:f3:db:e2:b7:f2:b7:8a:3c:5d:0b:04:17:
74:17:7f:e4:f7:51:02:f0:7f:d6:89:22:06:0c:f6:
da:3b:17:f3:2e:28:c5:c8:60:19:ed:66:e8:a6:e6:
5d:9e:b3:4c:ac:9a:f4:c1:48:47:6b:26:70:1a:a9:
e7:bf:fb:7f:4b:34:d9:87:10:6d:84:ce:2d:cf:4d:
24:c4:cf:4f:ed:e3:6c:1e:b9:98:d3:e3:bf:1b:c8:
52:7c:5d:35:8b:29:e1:0e:90:50:ae:cb:48:f6:30:
45:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:64:7E:13:EA:56:66:AA:10:4C:7B:B9:70:A6:D0:6C:9F:7B:50:05
X509v3 Authority Key Identifier:
keyid:68:77:41:DE:15:CD:88:3C:10:DD:BC:4F:C3:A2:DC:F5:48:5E:7D:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:d9:5f:09:77:b1:a6:c6:6b:1b:2a:b6:96:9b:db:ce:9d:cc:
05:ce:ee:cf:1b:f1:62:18:13:e1:bd:d8:7f:bc:d2:95:b8:78:
7f:2a:29:24:47:38:3b:6a:e9:79:e9:d8:10:42:21:f2:e2:6c:
09:fc:b8:e7:e3:73:b5:33:d2:f2:c8:b6:23:dc:25:32:93:e1:
a3:39:4f:c9:23:95:21:5c:31:8f:dd:e1:52:64:0f:ce:b0:36:
96:47:8c:c3:cf:f1:06:7b:fa:72:78:65:72:ef:30:2a:0f:3e:
a0:23:51:25:7e:40:33:1d:96:2c:29:4b:df:c7:c9:0c:4a:25:
46:80:fc:bd:68:db:5a:b9:76:51:86:56:8e:22:88:ff:f5:ac:
03:91:3a:f6:e4:1d:4a:49:f6:3e:96:cd:5e:64:a6:d0:67:5d:
62:62:6c:56:02:10:49:dc:75:68:b4:99:af:a0:a5:9b:36:90:
2d:1f:dc:e6:dd:4f:6d:24:58:53:3c:bb:9f:4f:df:f8:7d:eb:
3c:70:dd:cc:7f:6b:1f:8f:a4:0a:9c:bb:cc:10:56:dc:a6:36:
35:a7:63:95:5f:78:af:a7:39:c5:66:8d:38:b8:7a:90:da:55:
ce:8d:a3:f4:1f:13:a2:83:60:f2:b0:df:03:e4:77:89:11:46:
d7:c9:8f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:52:55 2026 by rpki-client