
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.mft
File: hgOgrKcgSw7-1k23DeUcdboDk1U.mft (raw, json)
Hash identifier: r93cTwUM3y6Wgm0J99uZVM4IuWaok5tldf4SSJit0f0=
Subject key identifier: A1:79:00:55:7F:E2:2F:E5:50:8B:08:F4:97:6A:04:58:6D:DF:CA:CB
Authority key identifier: 86:03:A0:AC:A7:20:4B:0E:FE:D6:4D:B7:0D:E5:1C:75:BA:03:93:55
Certificate issuer: /CN=A9118EB2/serialNumber=8603A0ACA7204B0EFED64DB70DE51C75BA039355
Certificate serial: 03C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgOgrKcgSw7-1k23DeUcdboDk1U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.mft
Manifest number: 03AC
Signing time: Wed 07 Oct 2026 00:51:40 +0000
Manifest this update: Wed 07 Oct 2026 00:51:39 +0000
Manifest next update: Wed 14 Oct 2026 00:51:39 +0000
Files and hashes: 1: hgOgrKcgSw7-1k23DeUcdboDk1U.crl (hash: A9oU6kgyb4bQSWLEaISFhlQ1T2vq9kAYutvoD8wo7RA=)
2: 208C7D2E066C11EDB31C2239C4F9AE02.roa (hash: ++TOpbIz4D1k0QpqFIUl2h1hNZQ4CZfs4q8RLlyTsbo=)
3: 673C2B68A8BA11F096079D46C4F9AE02.roa (hash: lnnL+su9O1+tyTc7UZqdIqQQ4ZWtCaqAPlr6TpKkWjo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.crl
rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgOgrKcgSw7-1k23DeUcdboDk1U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 00:51:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 967 (0x3c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118EB2, serialNumber=8603A0ACA7204B0EFED64DB70DE51C75BA039355
Validity
Not Before: Oct 7 00:51:39 2026 GMT
Not After : Oct 14 00:51:39 2026 GMT
Subject: CN=6ac5979c-32af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:69:c3:04:6f:ae:dd:40:c1:a3:4b:d5:89:ae:
ea:e5:08:88:b4:30:46:d7:2e:d6:9e:70:c8:c7:5e:
5d:6a:a4:35:69:de:d5:0d:ba:3b:2e:75:02:d8:e3:
cf:95:84:57:d5:f5:88:bf:45:96:a2:a3:a8:8a:62:
e5:04:cf:91:1c:e0:39:9d:e4:f6:2a:13:1e:f1:4a:
74:fa:ca:6d:9f:be:8b:5c:2e:6d:1a:d7:95:54:ae:
64:7f:ca:63:4c:a3:8d:68:06:c7:ad:4a:8c:29:fd:
e9:c5:26:14:d3:53:92:bd:33:d8:23:92:c7:4a:d5:
a8:92:fe:21:81:18:45:b1:9e:ba:0b:02:a0:d8:40:
95:51:a6:a9:89:c7:9f:e9:96:26:50:2d:2b:53:13:
82:5d:d4:47:6d:ca:40:0d:62:87:9b:bd:c6:5a:b8:
f9:6f:e8:24:49:c0:36:9f:e9:87:d0:b4:e7:1d:74:
6b:d4:aa:b6:57:ab:3b:61:b9:39:ae:3a:90:92:65:
96:f9:cc:5b:5f:25:a9:04:d6:5b:77:9a:8b:97:28:
02:1f:d1:6b:5d:cd:0b:63:6f:47:2f:ca:fe:a7:40:
67:9f:b6:18:b8:7d:6f:f7:40:31:f9:cc:ff:2d:d6:
8c:81:c1:a3:ba:33:f1:80:b6:89:b6:cc:8b:ce:22:
b1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:79:00:55:7F:E2:2F:E5:50:8B:08:F4:97:6A:04:58:6D:DF:CA:CB
X509v3 Authority Key Identifier:
keyid:86:03:A0:AC:A7:20:4B:0E:FE:D6:4D:B7:0D:E5:1C:75:BA:03:93:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgOgrKcgSw7-1k23DeUcdboDk1U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:50:80:6b:89:9e:f3:f5:c9:d0:a8:a3:85:11:83:3c:6d:79:
d8:89:4a:bf:7f:47:d8:07:e4:22:ff:99:b5:c7:db:70:59:05:
48:5e:d8:0d:d5:ef:d8:16:30:c1:96:32:a4:c4:41:b2:5e:8d:
47:09:fa:9f:79:27:fc:38:0e:78:97:58:80:70:fb:15:63:cc:
3f:31:d3:83:d2:c2:15:6a:4d:54:43:a7:c8:85:0d:b4:ad:3a:
85:5b:59:6c:d1:27:ef:ad:64:87:d1:a5:76:8d:45:80:78:92:
88:2c:db:54:fa:f8:b7:33:a8:20:f4:19:37:1c:1d:7b:74:99:
db:e9:e8:69:25:c8:d1:2e:d1:79:53:49:92:ac:96:83:64:46:
2e:be:b5:ca:ba:ea:53:5f:a8:7f:56:ba:33:b1:6c:18:47:fd:
e1:a5:2f:7c:ce:eb:ca:ac:a7:da:04:3b:09:63:72:05:8a:02:
d0:2f:12:8e:77:4c:ba:c9:10:f5:8f:3a:71:c0:a6:cb:f9:40:
a9:c2:9e:65:32:bb:06:23:84:ec:47:0e:4d:d4:a6:13:c5:38:
c1:13:b4:10:42:ed:be:c7:05:d7:7a:70:5e:79:bb:ec:c6:90:
4a:6d:27:9d:b0:4c:be:31:9b:69:f8:ad:af:9c:c0:ab:f7:3e:
3c:3a:15:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:58:09 2026 by rpki-client