
$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.mft
File: h9O9fQreBlCeuFrGullInZVAH38.mft (raw, json)
Hash identifier: D2guFeULhzlGGJYZqbF1+ifsqTgnBrjFZeNla1jUPNA=
Subject key identifier: AE:DA:17:FD:44:9E:52:10:2D:E9:5E:5C:12:47:86:C2:26:F8:98:89
Authority key identifier: 87:D3:BD:7D:0A:DE:06:50:9E:B8:5A:C6:BA:59:48:9D:95:40:1F:7F
Certificate issuer: /CN=A913AE13/serialNumber=87D3BD7D0ADE06509EB85AC6BA59489D95401F7F
Certificate serial: 05F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.mft
Manifest number: 05D2
Signing time: Tue 18 Aug 2026 23:29:29 +0000
Manifest this update: Tue 18 Aug 2026 23:29:28 +0000
Manifest next update: Tue 25 Aug 2026 23:29:28 +0000
Files and hashes: 1: h9O9fQreBlCeuFrGullInZVAH38.crl (hash: yqO2GHY7tgAIAwHE2CwoGUS+7fZmSIqLmlvTSyUJqTQ=)
2: D758E96CF8FF11ED98C6D45FC4F9AE02.roa (hash: mUW7mZkRK0183V8DRL68AAx4KDMDpyr2zgUqvRvduaY=)
3: DFC29B9EDA3311F0AF85FF988AD3641D.roa (hash: APVAdn0V+JjNqtnYFJXrw3vnTk5N1Az4I90CmHo6gTE=)
4: FAD3BBFCDA3311F08928C2DC8AD3641D.roa (hash: aSuiDoqVGUo9FqPyHFG/YLpJ9f8pam3kOcqDIBOTLpk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.crl
rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 23:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1526 (0x5f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913AE13, serialNumber=87D3BD7D0ADE06509EB85AC6BA59489D95401F7F
Validity
Not Before: Aug 18 23:29:28 2026 GMT
Not After : Aug 25 23:29:28 2026 GMT
Subject: CN=6a84ead8-cd27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:43:0c:72:d6:67:88:10:ef:97:21:70:d9:be:
29:9d:9b:f8:71:74:9b:80:cb:e5:cf:5c:34:ef:83:
43:af:6a:5f:8c:3e:03:b9:07:fe:62:5e:d2:70:ee:
7a:ea:8c:31:46:f8:64:98:3c:f7:a9:c7:ba:5a:85:
b7:4e:61:4c:e3:c2:ca:27:b4:41:d8:c6:f9:05:ee:
ae:0d:93:a6:f3:7c:b7:c2:bd:45:c1:dd:d5:ce:73:
d1:6e:8e:55:2e:da:e0:f0:6d:7a:0f:3a:a6:61:65:
d2:76:70:ef:64:f0:66:8d:5f:a1:f1:ed:8f:87:75:
7a:32:d4:e3:c6:cc:18:bb:22:df:f7:95:08:be:61:
a4:44:b4:4a:30:c1:0f:7e:21:d9:71:b7:4e:21:71:
db:47:3e:ce:da:1b:92:11:66:83:36:37:6e:a0:7f:
dd:10:b9:0c:7e:50:68:e9:11:da:34:7b:d4:41:b6:
d6:ba:a8:d1:8f:94:92:92:54:07:1e:b1:ad:6a:76:
14:da:c1:65:88:a5:83:d7:68:68:50:7b:42:88:b0:
ae:95:6e:4d:13:63:2a:dd:57:fc:21:48:13:87:65:
c9:0f:f8:09:0a:79:c2:82:75:37:4d:b2:d8:68:13:
6d:d9:d6:98:b5:95:0d:01:11:c9:80:df:31:a1:83:
fa:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:DA:17:FD:44:9E:52:10:2D:E9:5E:5C:12:47:86:C2:26:F8:98:89
X509v3 Authority Key Identifier:
keyid:87:D3:BD:7D:0A:DE:06:50:9E:B8:5A:C6:BA:59:48:9D:95:40:1F:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:b0:78:eb:3c:e9:65:6b:ee:22:b6:ca:c7:25:12:11:75:32:
30:c4:f9:c1:a1:38:6e:26:66:21:a8:67:df:da:b1:d0:3c:cb:
b9:9f:76:99:fd:12:85:72:f2:ac:e1:6c:67:b8:c8:07:b0:92:
4d:b7:d4:66:84:e9:20:a7:29:23:e3:88:0d:b9:ea:7c:72:44:
3f:9b:a0:81:80:de:4d:db:9e:fb:56:3c:cf:dc:60:8e:39:6c:
d8:fe:43:be:69:d0:12:ac:93:c2:46:97:d7:6c:9c:76:ec:57:
9b:75:32:1e:c0:f5:1a:0c:9d:28:a1:57:4e:26:9c:c1:55:96:
ad:0b:3d:d2:8a:06:b4:f6:79:2d:e8:b4:4b:89:bb:86:88:e2:
df:ec:b1:36:58:1c:f6:08:b0:50:b6:f4:dd:68:f6:c9:68:43:
76:64:9a:a9:a9:c4:e6:ba:c2:98:85:0c:37:31:7d:6e:a8:81:
02:0f:f1:f9:aa:fd:64:11:dd:ae:4c:bf:cb:11:bc:f8:33:08:
e2:e6:f5:dd:0f:4d:d6:50:28:25:01:05:71:17:e7:ff:10:cb:
e0:71:28:66:91:26:96:cb:0f:bb:08:92:19:28:4d:2a:9d:4e:
6f:0f:b3:02:7b:e6:5c:97:e9:73:db:8e:a2:ac:5e:2d:fd:ce:
09:29:89:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:50:42 2026 by rpki-client