
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft
File: hELcRgJABgEa1c9IzX5MSLuXoR4.mft (raw, json)
Hash identifier: pN6auWOFWbt8rJgg6Y1uX72R5hxEtapNcu/KdKCF8o4=
Subject key identifier: C8:90:6B:A0:68:3F:D1:42:DC:D9:C8:76:52:2E:54:BF:9C:94:3F:57
Authority key identifier: 84:42:DC:46:02:40:06:01:1A:D5:CF:48:CD:7E:4C:48:BB:97:A1:1E
Certificate issuer: /CN=A9153134/serialNumber=8442DC46024006011AD5CF48CD7E4C48BB97A11E
Certificate serial: 0196
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft
Manifest number: 016E
Signing time: Thu 21 May 2026 05:10:18 +0000
Manifest this update: Thu 21 May 2026 05:10:17 +0000
Manifest next update: Thu 28 May 2026 05:10:17 +0000
Files and hashes: 1: hELcRgJABgEa1c9IzX5MSLuXoR4.crl (hash: KM6+/RBGTj0yxRSU39vNddbeZvpNspsvwu7Qz1uty+k=)
2: F3B36C48545411EFA3BC6B2BC4F9AE02.roa (hash: l1+ZtMv6puo4GNMLOeWesmnYUJqPnxAR7QGxzptAf1s=)
3: F32DDE98545411EFA3BC6B2BC4F9AE02.roa (hash: 9spWTKwzhxwWPHkdhJR5HEllKF63m9l363gaTe3qP68=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.crl
rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 05:10:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 406 (0x196)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153134, serialNumber=8442DC46024006011AD5CF48CD7E4C48BB97A11E
Validity
Not Before: May 21 05:10:17 2026 GMT
Not After : May 28 05:10:17 2026 GMT
Subject: CN=6a0e93ba-30e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:78:38:52:a9:ea:87:f9:87:a3:54:0a:ae:c6:
9e:17:91:35:67:e5:f5:8c:ca:4e:b0:cc:98:f1:55:
47:4b:16:9e:90:ba:24:30:62:57:c7:85:96:7c:9d:
81:bc:48:49:71:d5:10:c4:d1:d1:8a:e6:ea:93:aa:
6a:68:1d:3d:1c:0b:9a:31:78:5c:58:29:fd:1b:54:
d3:12:ba:74:c0:f4:09:dc:3e:16:68:1e:82:53:13:
e6:94:62:8d:21:38:1e:4a:4a:c8:fb:71:13:24:0d:
9e:a2:06:f1:01:74:66:43:bc:4a:4e:67:c1:d5:a3:
55:d9:62:58:b5:1d:db:cf:77:79:e9:8f:bb:9a:fd:
f6:e1:e8:18:3d:ef:6e:f1:dc:fb:9f:db:e5:d2:b3:
93:59:0e:48:30:d6:98:20:10:ac:5c:aa:30:3a:db:
94:2e:e9:14:64:98:49:f9:4a:49:da:64:19:9e:34:
33:8e:60:5d:99:d8:08:25:1f:7b:2c:14:a3:58:60:
b4:4b:22:84:5a:bb:7d:3b:60:68:02:a4:90:d3:8b:
dc:dc:e0:0e:b5:ce:e4:74:e3:e4:9d:a9:cd:3c:12:
d2:29:98:68:2d:68:f0:8c:73:63:8a:00:f2:70:49:
83:12:5d:b7:77:03:97:0b:f1:c8:4b:97:70:1d:61:
8d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:90:6B:A0:68:3F:D1:42:DC:D9:C8:76:52:2E:54:BF:9C:94:3F:57
X509v3 Authority Key Identifier:
keyid:84:42:DC:46:02:40:06:01:1A:D5:CF:48:CD:7E:4C:48:BB:97:A1:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:ac:19:32:8e:a4:82:4f:d4:7f:0e:4a:6f:38:9f:0f:af:00:
a8:53:58:65:80:42:71:a4:2b:d4:67:e6:71:d9:b9:0b:76:c8:
06:28:e2:34:09:a4:47:e8:67:76:30:29:3f:a1:2d:88:80:7a:
07:fb:9c:f7:77:2b:bf:ca:68:d8:7b:cb:80:08:2e:d9:8e:4b:
b9:d3:c1:a9:56:e2:5d:6e:bd:9f:01:24:8e:7a:3c:86:84:4f:
43:5e:a0:00:ce:27:a7:07:7d:26:6b:85:f1:b0:3e:af:2c:61:
a0:d1:c8:14:43:6c:a6:da:d2:07:d3:52:4c:4a:cb:0e:68:9b:
8d:d9:be:94:58:64:26:f2:47:e0:37:1e:4b:77:e6:20:37:bb:
c5:1b:f1:a3:30:c0:03:ce:d9:f9:f8:dc:60:41:37:89:b6:cc:
cc:30:b2:81:64:4d:96:91:4d:bd:7a:bd:2c:ac:f9:87:eb:da:
a6:10:a6:ae:c8:fe:1a:23:cb:69:40:f6:46:81:fa:84:ed:12:
ba:56:1c:c6:d3:a4:37:f0:a6:86:22:c8:e7:70:69:e2:e2:cb:
de:16:06:30:ac:73:1d:88:da:15:a4:ae:ef:b1:71:2d:50:ec:
61:40:95:fb:80:1a:62:ff:f6:ce:db:e3:f5:a3:11:18:75:0f:
d5:d4:48:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:54:31 2026 by rpki-client