
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.mft
File: RhQllCdGSHS-fet79CEnLLI9oYg.mft (raw, json)
Hash identifier: 9SLA3v3ttuc7MfEsZz+pgr2ttFDSFW57ILRsKG4135M=
Subject key identifier: 28:22:81:98:2E:56:F8:CD:E8:AF:2A:3F:97:07:26:AD:ED:10:AA:0E
Authority key identifier: 46:14:25:94:27:46:48:74:BE:7D:EB:7B:F4:21:27:2C:B2:3D:A1:88
Certificate issuer: /CN=A9146304/serialNumber=4614259427464874BE7DEB7BF421272CB23DA188
Certificate serial: 11BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RhQllCdGSHS-fet79CEnLLI9oYg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.mft
Manifest number: 11B0
Signing time: Fri 04 Sep 2026 17:08:25 +0000
Manifest this update: Fri 04 Sep 2026 17:08:24 +0000
Manifest next update: Fri 11 Sep 2026 17:08:24 +0000
Files and hashes: 1: RhQllCdGSHS-fet79CEnLLI9oYg.crl (hash: V9jHdzUKysKVNTrE5UmaNPP3b3ZqsxxxmxeSIgKT33c=)
2: 65B35A86577011EC8F00A65AC4F9AE02.roa (hash: ei/KvFaC24XXw0sfw8PzNcUmeph2F1of8SKZD0r3ZLA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.crl
rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RhQllCdGSHS-fet79CEnLLI9oYg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 17:08:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4538 (0x11ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146304, serialNumber=4614259427464874BE7DEB7BF421272CB23DA188
Validity
Not Before: Sep 4 17:08:24 2026 GMT
Not After : Sep 11 17:08:24 2026 GMT
Subject: CN=6a9afb09-927f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3e:90:23:34:8d:96:b2:78:65:d8:38:8a:f6:
57:9c:2d:08:40:cf:48:62:9d:48:c9:0a:03:3c:97:
0b:45:67:0f:b6:eb:53:7c:2e:92:2d:5b:91:43:38:
c2:e8:aa:6f:3a:f4:51:a8:ca:55:c5:91:ec:c7:a9:
e3:eb:de:dc:a6:0b:2f:02:37:78:ba:2e:21:c9:f9:
a6:9b:cb:7c:a9:ba:81:10:fb:ff:b8:e0:35:4a:ae:
3f:58:d2:ba:b6:03:19:a9:4f:8d:23:b1:e8:ae:8e:
76:5b:7b:76:5f:46:86:26:98:83:31:23:c6:5e:26:
ed:9b:6f:d2:c0:b2:46:de:ce:72:25:ec:7b:13:77:
ca:ad:84:44:4a:3e:8b:2d:93:3a:dc:44:74:5b:e7:
dc:99:f1:34:08:4b:74:98:ab:f3:ff:03:ec:3b:06:
b4:04:ae:b0:d1:57:a3:57:d4:8e:7e:00:59:d3:d3:
73:e3:23:33:6a:80:77:85:f4:33:5a:1c:9d:0e:55:
06:39:ee:16:1a:6a:14:6a:9a:a4:45:1f:9a:a3:2f:
ca:da:c8:ab:4a:f3:6d:09:7c:ff:32:c4:0b:b4:20:
ef:fc:5e:83:be:b1:23:61:ab:34:28:39:11:6b:2e:
13:e9:cc:95:d1:73:ab:75:e8:b7:ea:1b:8f:f4:f3:
6a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:22:81:98:2E:56:F8:CD:E8:AF:2A:3F:97:07:26:AD:ED:10:AA:0E
X509v3 Authority Key Identifier:
keyid:46:14:25:94:27:46:48:74:BE:7D:EB:7B:F4:21:27:2C:B2:3D:A1:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RhQllCdGSHS-fet79CEnLLI9oYg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:6e:d9:e9:34:b5:b0:db:d1:33:21:b1:73:3b:7f:62:43:fb:
a3:64:ec:f6:e8:3a:c1:14:b9:7d:82:b3:cc:a9:3d:c3:0b:04:
04:61:0f:55:ea:da:34:3c:a7:ec:39:16:1a:03:fe:d2:06:58:
e4:5c:a7:c7:ab:f1:ae:37:9f:79:06:5d:e1:e0:eb:43:9d:d9:
b0:4a:35:76:1a:dc:6d:82:08:23:c0:0f:1b:07:33:82:fc:14:
ca:8b:e2:9d:fd:ca:be:1c:91:c4:6b:c1:5b:35:40:94:41:ac:
98:ad:4c:1d:bf:3a:e7:7d:92:b6:51:10:95:28:c1:86:16:13:
d1:56:14:ea:03:74:62:89:18:9a:36:cf:15:5d:38:91:49:ce:
f5:fc:9f:94:17:d0:98:bf:a1:64:df:b9:85:da:39:93:01:95:
60:68:12:11:9b:14:33:b6:97:2d:e7:44:20:ce:77:37:7e:0f:
03:a1:f4:88:71:45:6e:3b:ac:3e:6a:b4:0a:dc:44:63:99:5d:
fb:5d:6a:8b:71:55:ff:2a:e7:f2:1a:e0:75:b5:6d:6a:29:1d:
cf:98:34:c0:a9:a6:23:85:84:0d:ea:a6:ba:26:ec:8b:05:79:
13:a9:c0:ed:53:48:3a:d7:3c:d3:5a:5d:93:2c:3e:8e:b6:67:
f8:5a:9f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:44:58 2026 by rpki-client