
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.mft
File: hgOgrKcgSw7-1k23DeUcdboDk1U.mft (raw, json)
Hash identifier: nd2M6MlMaCOCGrhZf/QyCfidsENDuRjZfQ5MsGxAzC8=
Subject key identifier: 9A:9B:6D:49:47:2D:2B:0F:95:38:AB:7E:E2:0C:6C:9A:D3:19:22:B8
Authority key identifier: 86:03:A0:AC:A7:20:4B:0E:FE:D6:4D:B7:0D:E5:1C:75:BA:03:93:55
Certificate issuer: /CN=A9118EB2/serialNumber=8603A0ACA7204B0EFED64DB70DE51C75BA039355
Certificate serial: 03AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgOgrKcgSw7-1k23DeUcdboDk1U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.mft
Manifest number: 0393
Signing time: Wed 19 Aug 2026 01:11:20 +0000
Manifest this update: Wed 19 Aug 2026 01:11:20 +0000
Manifest next update: Wed 26 Aug 2026 01:11:20 +0000
Files and hashes: 1: hgOgrKcgSw7-1k23DeUcdboDk1U.crl (hash: 6eZdlRcGGb+3c+iBDmx3syfsFHidA2c/Dz2KjpRx9Vo=)
2: 208C7D2E066C11EDB31C2239C4F9AE02.roa (hash: ++TOpbIz4D1k0QpqFIUl2h1hNZQ4CZfs4q8RLlyTsbo=)
3: 673C2B68A8BA11F096079D46C4F9AE02.roa (hash: lnnL+su9O1+tyTc7UZqdIqQQ4ZWtCaqAPlr6TpKkWjo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.crl
rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgOgrKcgSw7-1k23DeUcdboDk1U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 01:11:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 942 (0x3ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118EB2, serialNumber=8603A0ACA7204B0EFED64DB70DE51C75BA039355
Validity
Not Before: Aug 19 01:11:20 2026 GMT
Not After : Aug 26 01:11:20 2026 GMT
Subject: CN=6a8502b8-d852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:19:8f:dc:f9:e2:d3:cf:a0:69:94:14:35:35:
d3:e5:e3:62:24:48:e8:a6:7d:fb:b1:fe:90:0c:fe:
91:da:0e:15:05:e5:01:00:09:2f:31:0a:02:01:77:
c4:05:af:cd:d6:42:1b:5c:22:ee:71:b5:2c:fd:a6:
07:68:bb:f0:f1:8d:ce:75:df:ce:86:38:3e:70:db:
29:f9:0e:ca:9e:30:94:e8:32:cf:5a:9b:dc:e7:89:
b5:7f:bb:0a:cf:bd:ab:1b:b2:f1:10:f8:fe:70:5f:
ce:e0:3b:58:0f:d3:56:19:c1:9c:a0:42:43:e1:a9:
b2:0a:34:2c:b0:cd:19:6a:84:6d:54:2a:ad:5e:64:
ae:4a:10:0b:ef:8f:3c:08:98:cf:9b:e5:58:83:0b:
95:8c:1d:7d:72:8b:42:1d:8c:ff:c2:4c:9b:69:85:
3f:cd:67:a9:c8:ab:80:a6:d9:71:5e:ad:88:22:48:
17:bb:2c:0b:eb:ec:c4:39:64:dd:bc:53:07:d5:3b:
b4:df:3c:08:5a:7e:66:bf:57:aa:35:e1:39:41:21:
bf:9c:31:77:35:e0:d3:09:be:3a:bf:5a:e3:f9:a6:
a8:ac:d6:6c:01:42:b2:68:17:e5:e2:99:e1:ee:95:
70:3f:9d:39:89:32:c1:26:27:59:6f:b9:f8:cc:58:
8e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:9B:6D:49:47:2D:2B:0F:95:38:AB:7E:E2:0C:6C:9A:D3:19:22:B8
X509v3 Authority Key Identifier:
keyid:86:03:A0:AC:A7:20:4B:0E:FE:D6:4D:B7:0D:E5:1C:75:BA:03:93:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgOgrKcgSw7-1k23DeUcdboDk1U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:68:57:64:bd:f8:af:13:2d:fe:fc:4f:e6:1e:f1:91:dd:b2:
93:91:fe:ec:34:1d:1a:4e:b6:dc:50:b0:3d:5d:2a:c2:80:99:
63:fc:32:31:5a:1e:ee:30:fc:a3:f0:0c:72:53:3a:92:6a:b0:
09:f7:85:04:5a:e0:33:92:fb:bd:f1:e5:1d:c5:55:a2:5f:c4:
42:f8:ce:7e:45:22:30:8d:a4:48:74:39:b3:bb:31:cb:f4:70:
d6:19:31:ad:f0:a0:41:0b:b5:f7:c7:6c:62:44:74:ed:0d:dd:
b7:1d:a8:99:01:93:cb:fc:6d:01:b0:ad:0e:d0:06:24:ec:43:
fd:69:e9:6b:f6:e6:89:91:c4:d1:23:47:d6:59:5b:8d:c5:fc:
1d:e1:c6:e8:c9:60:44:5b:fe:18:26:cd:4a:e2:f2:41:93:d5:
d5:fc:dd:b6:f0:39:99:99:38:0f:e2:da:23:e0:3c:a2:a2:94:
1a:d0:29:27:5b:3a:cc:26:7d:79:de:34:7a:cf:b5:83:df:6f:
aa:5e:b3:8b:10:a3:63:92:73:ed:17:d3:76:4f:78:3f:93:3d:
06:4d:1c:01:76:63:0d:29:5d:5e:16:b3:e3:d3:e1:09:71:65:
39:41:b6:af:d4:9a:1a:ee:ff:06:6d:86:16:e1:5d:19:7b:5d:
40:1a:9f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:51:28 2026 by rpki-client