
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft
File: H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft (raw, json)
Hash identifier: U0iEHWO5qSTCkApPEXqF7hrfoVG9vgL1hF7gYaOlfHI=
Subject key identifier: 16:8C:D2:5B:B2:B9:ED:35:53:D2:6A:17:CA:AA:04:F1:07:F3:4D:AA
Authority key identifier: 1F:D5:A1:82:D5:93:34:75:70:F2:D9:18:6D:24:84:C9:09:5C:5F:FB
Certificate issuer: /CN=A912708C/serialNumber=1FD5A182D593347570F2D9186D2484C9095C5FFB
Certificate serial: 06C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9WhgtWTNHVw8tkYbSSEyQlcX_s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft
Manifest number: 06BA
Signing time: Sun 04 Oct 2026 22:25:24 +0000
Manifest this update: Sun 04 Oct 2026 22:25:24 +0000
Manifest next update: Sun 11 Oct 2026 22:25:24 +0000
Files and hashes: 1: H9WhgtWTNHVw8tkYbSSEyQlcX_s.crl (hash: my/uBHk5Cu1IVtp2OxIdiLkc7UMD0qjzwgtitiRTnZE=)
2: 8AA59866C55511EBA7DB557EC4F9AE02.roa (hash: U5SVHSqfAtFqllA4pS+cC/mt0EepiCEBUnphM+qpIOc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.crl
rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9WhgtWTNHVw8tkYbSSEyQlcX_s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 22:25:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1731 (0x6c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912708C, serialNumber=1FD5A182D593347570F2D9186D2484C9095C5FFB
Validity
Not Before: Oct 4 22:25:24 2026 GMT
Not After : Oct 11 22:25:24 2026 GMT
Subject: CN=6ac2d254-73a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ab:a2:06:8c:60:0a:0b:65:b8:b9:e9:93:0d:
cb:df:9d:92:9b:a4:41:8f:0f:4c:46:1b:fa:fc:5b:
15:ba:81:58:dc:5d:4e:70:d2:60:dc:2e:4b:65:e1:
df:52:02:f8:62:51:1b:17:2e:7d:66:92:42:0e:f9:
ea:5d:b1:13:7b:40:b1:6e:e3:19:b0:09:2e:7d:43:
bf:f2:bd:c6:6b:6d:66:cb:5a:b7:7a:9a:cd:2a:ac:
03:00:69:a8:7e:41:e3:02:50:a8:d5:19:8b:4e:50:
b6:94:b0:5a:4a:a7:b0:8c:5a:ee:fe:bc:0e:45:80:
34:6f:71:37:be:73:77:f0:82:6a:41:c2:6b:f4:7d:
06:cd:14:9a:18:68:a1:8e:fa:0e:e2:91:e6:ce:12:
0c:6a:d5:3b:b3:12:92:f9:46:59:f7:c3:2f:86:e0:
ef:53:e1:ab:b7:7c:3e:af:5f:10:70:5a:5f:c3:42:
48:25:53:fe:ed:ae:12:f6:26:a2:12:5e:35:6c:e1:
96:98:af:99:97:27:1a:5b:4f:c8:05:f5:36:2a:b4:
4a:ea:04:ff:61:86:8a:74:3c:42:4b:77:93:64:1d:
17:35:28:5b:2c:86:21:76:4e:51:a1:20:01:df:4c:
47:64:9b:d3:97:d2:dd:2a:80:e6:1b:10:41:73:c6:
a4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:8C:D2:5B:B2:B9:ED:35:53:D2:6A:17:CA:AA:04:F1:07:F3:4D:AA
X509v3 Authority Key Identifier:
keyid:1F:D5:A1:82:D5:93:34:75:70:F2:D9:18:6D:24:84:C9:09:5C:5F:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9WhgtWTNHVw8tkYbSSEyQlcX_s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:b4:9d:72:f7:56:a7:b6:93:1b:53:72:66:ac:8e:08:76:f8:
8d:3a:08:27:04:54:c0:6d:8e:5c:18:ac:52:9d:69:11:6d:68:
92:58:c3:aa:7d:21:bf:5b:17:4b:7a:0e:d0:c6:e3:e6:c4:1d:
74:c0:62:50:a0:cf:27:2a:dc:a8:01:2d:41:35:a0:90:a1:67:
b8:82:0b:61:13:c0:c4:15:7b:00:e0:03:36:2c:8a:ef:1f:ce:
a9:b9:18:45:49:fe:f6:3c:0d:08:93:d9:9a:c9:7f:fa:09:e3:
74:b7:a8:39:0f:fb:ae:92:1b:74:fb:93:e5:64:76:b4:3f:59:
79:5b:2c:96:76:a5:f1:01:f0:15:73:01:d5:b3:87:e0:6c:94:
0f:45:42:3f:f7:f0:e3:a4:82:e9:8a:2c:2b:a7:58:ee:f1:a3:
53:6b:ed:e8:92:64:7b:8a:8f:2f:16:f0:10:2b:91:2f:3c:86:
fd:80:4e:2b:13:47:88:36:9b:54:61:57:db:3f:f8:35:53:5c:
a3:33:14:54:cc:b3:80:25:b3:26:02:fc:4f:27:0e:a0:11:f0:
6b:02:12:57:a5:cd:34:ca:b7:b9:e6:39:cf:4d:9c:01:94:65:
c3:02:4d:16:0c:ff:fd:de:7e:6d:e5:7b:9c:b5:67:c1:69:d5:
84:a5:8c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 18:44:53 2026 by rpki-client