
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912DC94/9C5C8E2C6AB711F188E872EF6247A888/MHhieRqQd5CGxXf5OTGDidaLcag.mft
File: MHhieRqQd5CGxXf5OTGDidaLcag.mft (raw, json)
Hash identifier: hriUPI8Sgo2OMOaSmgQcwT5Re+lR4+RsEXkzM4pHfWY=
Subject key identifier: 44:6A:1E:BF:0A:8F:FD:19:26:6F:A1:A1:ED:B3:E7:A4:77:D6:02:18
Authority key identifier: 30:78:62:79:1A:90:77:90:86:C5:77:F9:39:31:83:89:D6:8B:71:A8
Certificate issuer: /CN=A912DC94/serialNumber=307862791A90779086C577F939318389D68B71A8
Certificate serial: 3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHhieRqQd5CGxXf5OTGDidaLcag.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DC94/9C5C8E2C6AB711F188E872EF6247A888/MHhieRqQd5CGxXf5OTGDidaLcag.mft
Manifest number: 3B
Signing time: Mon 05 Oct 2026 09:03:08 +0000
Manifest this update: Mon 05 Oct 2026 09:03:07 +0000
Manifest next update: Mon 12 Oct 2026 09:03:07 +0000
Files and hashes: 1: MHhieRqQd5CGxXf5OTGDidaLcag.crl (hash: +bqj0/LQLpYRgXCNjJUCkwhTGfQbseiNx0xD3QOUZSs=)
2: 4F16B51A6AB811F18EBFB70E6347A888.roa (hash: LiHm9eQxrU9GoUOxKX4spMHoNTas521hkzSooCizj3Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912DC94/9C5C8E2C6AB711F188E872EF6247A888/MHhieRqQd5CGxXf5OTGDidaLcag.crl
rsync://rpki.apnic.net/member_repository/A912DC94/9C5C8E2C6AB711F188E872EF6247A888/MHhieRqQd5CGxXf5OTGDidaLcag.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHhieRqQd5CGxXf5OTGDidaLcag.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 09:03:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61 (0x3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DC94, serialNumber=307862791A90779086C577F939318389D68B71A8
Validity
Not Before: Oct 5 09:03:07 2026 GMT
Not After : Oct 12 09:03:07 2026 GMT
Subject: CN=6ac367cc-fe93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:de:9d:97:d2:96:3f:9a:74:ee:a9:93:a4:65:
ce:da:f5:6a:33:07:26:e1:41:34:b7:cd:a0:b6:5c:
e9:9a:b9:bc:66:49:5e:1e:4a:bc:26:aa:8c:54:a2:
bd:7c:34:91:dd:15:ec:f9:5e:8a:68:55:25:fd:05:
58:b7:93:86:6f:2c:2f:11:a1:99:86:b2:93:3b:02:
aa:3a:d6:e1:f2:c5:30:23:7b:2f:29:72:74:d3:f3:
d2:ec:70:59:29:80:18:d8:2b:10:16:43:6f:25:42:
04:fd:c4:59:ef:20:00:54:a9:9d:26:c4:cd:34:31:
00:08:9e:7f:90:88:c2:74:20:41:76:55:cb:e5:fa:
8a:bc:19:00:64:1e:b8:58:55:e9:71:72:ce:e9:39:
25:e7:ce:c7:95:c3:08:fb:60:49:e5:a3:96:ee:b6:
8f:a5:ec:74:3f:67:0d:29:fe:a7:30:4c:ca:40:50:
f2:be:b6:c1:eb:2d:3d:66:7f:05:76:9e:ba:af:f0:
72:52:3e:ed:cd:93:94:0c:ff:96:c9:1b:36:f5:a8:
67:ec:29:a2:79:14:b9:53:5f:d4:95:fa:de:0f:3c:
7b:06:48:2a:d1:a7:ec:70:cd:88:3c:8e:dd:82:ad:
22:a0:9a:3a:b5:2f:f1:a9:b4:1f:cc:7a:a2:c5:f0:
37:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:6A:1E:BF:0A:8F:FD:19:26:6F:A1:A1:ED:B3:E7:A4:77:D6:02:18
X509v3 Authority Key Identifier:
keyid:30:78:62:79:1A:90:77:90:86:C5:77:F9:39:31:83:89:D6:8B:71:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DC94/9C5C8E2C6AB711F188E872EF6247A888/MHhieRqQd5CGxXf5OTGDidaLcag.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHhieRqQd5CGxXf5OTGDidaLcag.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DC94/9C5C8E2C6AB711F188E872EF6247A888/MHhieRqQd5CGxXf5OTGDidaLcag.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ed:b1:38:85:d9:92:87:e5:b8:ff:e0:c6:15:0a:1b:56:47:
66:22:4b:37:38:06:36:23:e1:eb:89:dd:b6:49:bd:5a:d8:c8:
c0:c9:fd:ed:33:11:95:fe:95:66:cd:c3:f0:8a:5e:e2:f5:44:
2a:f5:f5:bc:2e:f5:67:ef:d0:e5:8a:4e:65:4f:49:89:4f:43:
93:3e:ba:34:31:0e:c3:29:2d:9a:48:35:17:de:0f:a4:4b:ab:
4d:d7:18:c7:cd:92:6b:9e:d6:38:1d:3d:9e:6b:d4:95:fe:c7:
2f:03:67:fd:35:74:d3:91:a2:41:55:c9:51:12:25:cc:13:cf:
e2:cf:d2:10:07:55:c7:d7:45:c0:56:dd:96:41:7b:8c:9e:99:
c5:78:73:4a:25:ba:19:a3:e1:fa:7c:87:72:bd:03:fb:a7:6b:
5e:43:5c:9f:85:16:a7:bc:23:03:32:d4:39:2e:39:76:b7:f7:
a1:59:2e:35:2d:21:50:c6:1e:38:dc:0c:f0:26:4d:ca:8f:6a:
52:c8:c8:9c:54:e4:cf:7f:53:a8:0f:4a:16:72:7a:52:c3:0c:
4f:09:74:b5:a0:58:4e:67:1f:81:0e:ea:25:d5:79:fc:aa:cf:
f5:e8:a9:f5:c2:5f:db:71:76:54:c8:b1:5e:85:a9:dc:8e:99:
38:6b:0d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 08:50:45 2026 by rpki-client