
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DC94/9C5C8E2C6AB711F188E872EF6247A888/MHhieRqQd5CGxXf5OTGDidaLcag.mft
File: MHhieRqQd5CGxXf5OTGDidaLcag.mft (raw, json)
Hash identifier: /pyKjc+xxktrt8ZPrcnsUchL2g1EjvHpM/ogVmskkm4=
Subject key identifier: 8E:98:6D:B4:18:50:67:D0:BE:12:5F:BA:E0:9B:52:BD:98:58:AC:32
Authority key identifier: 30:78:62:79:1A:90:77:90:86:C5:77:F9:39:31:83:89:D6:8B:71:A8
Certificate issuer: /CN=A912DC94/serialNumber=307862791A90779086C577F939318389D68B71A8
Certificate serial: 22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHhieRqQd5CGxXf5OTGDidaLcag.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DC94/9C5C8E2C6AB711F188E872EF6247A888/MHhieRqQd5CGxXf5OTGDidaLcag.mft
Manifest number: 21
Signing time: Wed 19 Aug 2026 09:37:13 +0000
Manifest this update: Wed 19 Aug 2026 09:37:13 +0000
Manifest next update: Wed 26 Aug 2026 09:37:13 +0000
Files and hashes: 1: MHhieRqQd5CGxXf5OTGDidaLcag.crl (hash: Jwx1JD1S538+xdxvkgNAdoGcJXaUJBJQ5craY5rJyMI=)
2: 4F16B51A6AB811F18EBFB70E6347A888.roa (hash: g04zLld4UYO3F+kCZ6KaWBxSqXKNmClRuSZYSKekq78=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912DC94/9C5C8E2C6AB711F188E872EF6247A888/MHhieRqQd5CGxXf5OTGDidaLcag.crl
rsync://rpki.apnic.net/member_repository/A912DC94/9C5C8E2C6AB711F188E872EF6247A888/MHhieRqQd5CGxXf5OTGDidaLcag.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHhieRqQd5CGxXf5OTGDidaLcag.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 09:37:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34 (0x22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DC94, serialNumber=307862791A90779086C577F939318389D68B71A8
Validity
Not Before: Aug 19 09:37:13 2026 GMT
Not After : Aug 26 09:37:13 2026 GMT
Subject: CN=6a857949-8d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b5:23:3f:3e:58:3e:59:ab:74:83:a8:b4:7c:
76:45:13:b6:c5:b6:35:0e:1d:3f:0f:ab:31:68:b3:
16:ea:e7:7e:80:55:8f:9d:9e:7e:58:3b:15:db:0e:
93:d6:20:f6:6c:13:2d:af:75:51:1b:4a:6e:7a:b5:
37:15:26:8a:f4:d2:b2:e6:d1:43:0b:46:5b:c6:90:
d3:da:25:0a:3f:8f:6c:a2:80:45:63:03:4f:31:af:
6a:9a:64:0e:60:df:fe:f2:4f:e9:a3:42:97:d3:9b:
c2:5b:4b:d7:69:47:24:6c:67:41:4e:3b:cc:88:7e:
58:6e:04:a1:df:08:75:eb:09:db:ff:c4:5c:07:cd:
e9:3f:db:32:8a:0e:b2:cb:63:30:9b:b3:60:a8:c8:
ee:43:ac:05:94:fb:48:6f:b4:95:88:3f:f0:41:d6:
34:ff:fa:5f:75:05:60:5d:ad:04:8c:1e:fb:2f:0f:
f6:d1:77:df:5e:d0:45:36:27:d3:92:6b:14:e3:7c:
ec:77:65:e6:10:e6:71:3d:c2:20:11:e5:cf:f3:74:
42:c0:51:40:cd:c6:f4:15:8a:2c:53:fc:cf:8d:5d:
b3:cf:de:cc:fb:58:bb:23:f3:bd:5c:76:23:42:f9:
ab:7b:89:e5:e3:49:46:e2:e0:74:45:20:4d:68:c1:
25:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:98:6D:B4:18:50:67:D0:BE:12:5F:BA:E0:9B:52:BD:98:58:AC:32
X509v3 Authority Key Identifier:
keyid:30:78:62:79:1A:90:77:90:86:C5:77:F9:39:31:83:89:D6:8B:71:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DC94/9C5C8E2C6AB711F188E872EF6247A888/MHhieRqQd5CGxXf5OTGDidaLcag.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHhieRqQd5CGxXf5OTGDidaLcag.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DC94/9C5C8E2C6AB711F188E872EF6247A888/MHhieRqQd5CGxXf5OTGDidaLcag.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:d3:0f:24:0f:e0:3d:18:c9:60:d8:c5:bb:08:6d:8e:dc:54:
13:be:da:76:1b:c3:25:3b:af:f2:45:9b:95:d6:4f:a8:09:7e:
68:88:72:cc:b0:e6:4d:7a:0a:46:7c:8b:b9:52:42:4f:57:4b:
3d:29:70:a9:2c:da:6a:72:57:b7:1f:7f:a0:a4:51:3c:c1:34:
b3:a9:4b:81:42:07:01:76:3c:30:11:02:96:fd:6a:12:cd:49:
88:13:69:f7:59:f4:33:35:8d:aa:9f:78:1c:9d:eb:b4:0e:dd:
9c:ee:e1:bc:da:8f:81:28:98:be:d3:9b:52:6f:98:57:d1:d5:
c8:80:1b:82:89:b7:29:ae:20:03:f4:40:c7:da:f8:be:f8:83:
be:da:32:38:11:d7:61:57:a8:bd:d9:f2:bd:fb:a0:8e:d4:03:
d1:8e:08:d1:2a:04:4f:2d:57:82:21:30:a2:4a:73:9f:3f:1b:
91:3d:39:a7:66:0f:5a:47:5c:35:e9:d8:57:46:81:96:29:11:
b2:58:86:e7:dc:7b:16:78:96:10:1d:13:29:19:fd:3b:48:d8:
b6:23:21:85:55:e6:a2:83:27:b1:a6:10:9d:d0:2d:f5:af:d7:
35:ab:33:99:f4:0c:79:92:b6:44:94:18:56:79:21:44:e1:7a:
74:60:9e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:43:41 2026 by rpki-client