
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.mft
File: hn09aLZZeAOvVkZcDptTq2Z7cqg.mft (raw, json)
Hash identifier: XoJ8blUtt3sxCxoWm+tgsedABUglEknYh/2ffZ9Hmgk=
Subject key identifier: 7D:CE:E0:E5:7D:69:A2:DE:F9:4F:2E:5E:92:95:4B:BA:83:C1:93:AD
Authority key identifier: 86:7D:3D:68:B6:59:78:03:AF:56:46:5C:0E:9B:53:AB:66:7B:72:A8
Certificate issuer: /CN=A912CDC5/serialNumber=867D3D68B6597803AF56465C0E9B53AB667B72A8
Certificate serial: 077A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hn09aLZZeAOvVkZcDptTq2Z7cqg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.mft
Manifest number: 0772
Signing time: Sat 24 Oct 2026 21:41:41 +0000
Manifest this update: Sat 24 Oct 2026 21:41:40 +0000
Manifest next update: Sat 31 Oct 2026 21:41:40 +0000
Files and hashes: 1: hn09aLZZeAOvVkZcDptTq2Z7cqg.crl (hash: bvMKwG0iG0R7Va6NAKknCpoaeWAMiRtmKMliE9bSNDY=)
2: 4EC5B52480B811EBBEE2CA7FC4F9AE02.roa (hash: oGpaoJnN0XSnyU8TN0NZVM9McHxZfbUaTEUnM8LnSNk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.crl
rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hn09aLZZeAOvVkZcDptTq2Z7cqg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 21:41:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1914 (0x77a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912CDC5, serialNumber=867D3D68B6597803AF56465C0E9B53AB667B72A8
Validity
Not Before: Oct 24 21:41:40 2026 GMT
Not After : Oct 31 21:41:40 2026 GMT
Subject: CN=6add2614-f58a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3d:99:2c:5e:c9:91:ef:f8:16:6b:e0:20:b0:
cd:84:5d:8c:2e:c4:ce:c0:b8:55:f3:f4:1c:05:fa:
8c:d9:c7:2b:52:26:84:d7:19:43:d8:7d:ac:53:6a:
69:f0:94:41:f3:f3:9e:ee:f0:bf:a8:dd:e0:28:73:
5e:26:39:16:55:51:de:e4:8d:66:d1:ae:44:12:0c:
23:d9:dd:03:b0:61:f8:38:29:08:e1:90:c9:17:d1:
42:d4:ec:61:4f:63:95:89:4f:9f:65:cc:71:73:69:
8c:4d:a5:ac:fe:2b:7a:0e:be:92:86:79:47:15:75:
e7:38:c2:a3:42:2f:c2:d6:a3:3b:dd:ef:55:c9:32:
5e:44:7b:79:1f:69:2f:f9:a2:13:ce:a9:45:7a:1a:
2d:de:15:15:a0:00:d5:ab:3a:a3:5a:aa:e6:77:f9:
22:06:13:58:6a:f0:bd:19:6e:68:5d:c1:68:6a:31:
b6:10:7d:a9:5c:46:14:1c:5e:cf:a4:a2:b4:77:5a:
e5:88:7d:5e:c9:16:89:74:ab:a2:24:f5:11:73:a6:
3a:dd:c3:7a:61:78:9b:08:5b:88:56:00:56:d2:29:
d1:2c:12:98:02:e0:c0:f3:66:6a:6e:5b:b8:64:4f:
7e:ed:dd:7c:22:8a:1e:3d:ae:55:0d:62:a2:79:61:
5e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:CE:E0:E5:7D:69:A2:DE:F9:4F:2E:5E:92:95:4B:BA:83:C1:93:AD
X509v3 Authority Key Identifier:
keyid:86:7D:3D:68:B6:59:78:03:AF:56:46:5C:0E:9B:53:AB:66:7B:72:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hn09aLZZeAOvVkZcDptTq2Z7cqg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:d8:1c:64:99:5e:7e:37:12:f1:94:82:fb:f0:32:98:9b:07:
63:79:d1:2a:dd:9a:2d:af:7a:c8:02:16:75:97:6a:39:e3:d1:
36:53:65:23:5b:17:27:80:08:e0:68:f8:c0:52:bb:ce:58:d9:
51:bc:06:38:0f:0c:a9:a5:74:9b:a3:b1:88:09:7c:af:26:2f:
84:e8:21:25:8d:88:60:ec:97:64:40:b8:28:65:7f:8b:36:91:
59:fa:39:95:2a:7d:a9:8f:1b:2b:0d:94:08:0d:c8:78:62:88:
f7:1e:28:9a:d5:37:c1:17:c7:83:c4:f6:d2:b5:69:c7:55:32:
de:38:3b:cb:51:29:7b:09:c0:2f:b9:eb:8e:82:3d:c6:3d:cd:
ec:60:42:96:c2:cf:e4:4d:3d:6b:ce:66:ed:60:88:03:45:52:
9a:fa:7b:b7:2e:04:e8:fd:a8:41:c2:16:a5:d6:01:06:fb:cb:
d4:c1:e6:87:fd:93:48:1a:b2:8e:57:2b:56:ed:6d:52:c1:d6:
5a:87:3e:78:10:1d:20:a8:51:6e:16:02:67:4b:13:3c:a4:e6:
78:ce:24:d8:4f:4a:9b:a1:c2:42:a3:d1:63:a2:21:fc:b6:28:
31:17:51:8d:68:22:a1:92:14:a9:30:3e:7e:e6:7c:5c:c3:58:
dd:1d:a7:b3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB3owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkNEQzUxMTAvBgNVBAUTKDg2N0QzRDY4QjY1OTc4MDNBRjU2NDY1QzBFOUI1M0FC
NjY3QjcyQTgwHhcNMjYxMDI0MjE0MTQwWhcNMjYxMDMxMjE0MTQwWjAYMRYwFAYD
VQQDEw02YWRkMjYxNC1mNThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsj2ZLF7Jke/4FmvgILDNhF2MLsTOwLhV8/QcBfqM2ccrUiaE1xlD2H2sU2pp
8JRB8/Oe7vC/qN3gKHNeJjkWVVHe5I1m0a5EEgwj2d0DsGH4OCkI4ZDJF9FC1Oxh
T2OViU+fZcxxc2mMTaWs/it6Dr6ShnlHFXXnOMKjQi/C1qM73e9VyTJeRHt5H2kv
+aITzqlFehot3hUVoADVqzqjWqrmd/kiBhNYavC9GW5oXcFoajG2EH2pXEYUHF7P
pKK0d1rliH1eyRaJdKuiJPURc6Y63cN6YXibCFuIVgBW0inRLBKYAuDA82Zqblu4
ZE9+7d18IooePa5VDWKieWFevQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH3O4OV9
aaLe+U8uXpKVS7qDwZOtMB8GA1UdIwQYMBaAFIZ9PWi2WXgDr1ZGXA6bU6tme3Ko
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0RDNS9FOUYyOTJDNjgw
QjYxMUVCQkVDQkYzNzlDNEY5QUUwMi9objA5YUxaWmVBT3ZWa1pjRHB0VHEyWjdj
cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2huMDlhTFpaZUFPdlZrWmNEcHRUcTJaN2NxZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
Q0RDNS9FOUYyOTJDNjgwQjYxMUVCQkVDQkYzNzlDNEY5QUUwMi9objA5YUxaWmVB
T3ZWa1pjRHB0VHEyWjdjcWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATtgcZJlefjcS8ZSC+/AymJsHY3nRKt2aLa96yAIWdZdqOePRNlNlI1sXJ4AI
4Gj4wFK7zljZUbwGOA8MqaV0m6OxiAl8ryYvhOghJY2IYOyXZEC4KGV/izaRWfo5
lSp9qY8bKw2UCA3IeGKI9x4omtU3wRfHg8T20rVpx1Uy3jg7y1EpewnAL7nrjoI9
xj3N7GBClsLP5E09a85m7WCIA0VSmvp7ty4E6P2oQcIWpdYBBvvL1MHmh/2TSBqy
jlcrVu1tUsHWWoc+eBAdIKhRbhYCZ0sTPKTmeM4k2E9Km6HCQqPRY6Ih/LYoMRdR
jWgioZIUqTA+fuZ8XMNY3R2nsw==
-----END CERTIFICATE-----
Generated at Mon Oct 26 11:19:42 2026 by rpki-client