
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157705/33FAE6F440CE11EABECD676AC4F9AE02/1hg6YWfsLkpyRwcPHws5trnJU-E.mft
File: 1hg6YWfsLkpyRwcPHws5trnJU-E.mft (raw, json)
Hash identifier: wOUU3wBaAkeizdC4KSTP+fkf+8tEUE0y+40JuJhC+Y8=
Subject key identifier: 08:BA:4B:BD:D3:48:C7:A3:F9:F0:3B:D6:97:D9:CF:1C:76:D6:B4:D2
Authority key identifier: D6:18:3A:61:67:EC:2E:4A:72:47:07:0F:1F:0B:39:B6:B9:C9:53:E1
Certificate issuer: /CN=A9157705/serialNumber=D6183A6167EC2E4A7247070F1F0B39B6B9C953E1
Certificate serial: 0BE3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1hg6YWfsLkpyRwcPHws5trnJU-E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157705/33FAE6F440CE11EABECD676AC4F9AE02/1hg6YWfsLkpyRwcPHws5trnJU-E.mft
Manifest number: 0BDA
Signing time: Mon 22 Jun 2026 18:55:01 +0000
Manifest this update: Mon 22 Jun 2026 18:55:01 +0000
Manifest next update: Mon 29 Jun 2026 18:55:01 +0000
Files and hashes: 1: 1hg6YWfsLkpyRwcPHws5trnJU-E.crl (hash: e+odI22B3SEooXfQXh/aMQR2cIFteoB5Cv7lJnfczPM=)
2: E82A7D8840CE11EABBE63B6BC4F9AE02.roa (hash: 8MXVztiKKbK6wjRU2YtWDioVy4EZAGZC4gBbMApdP3U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157705/33FAE6F440CE11EABECD676AC4F9AE02/1hg6YWfsLkpyRwcPHws5trnJU-E.crl
rsync://rpki.apnic.net/member_repository/A9157705/33FAE6F440CE11EABECD676AC4F9AE02/1hg6YWfsLkpyRwcPHws5trnJU-E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1hg6YWfsLkpyRwcPHws5trnJU-E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 18:55:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3043 (0xbe3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157705, serialNumber=D6183A6167EC2E4A7247070F1F0B39B6B9C953E1
Validity
Not Before: Jun 22 18:55:01 2026 GMT
Not After : Jun 29 18:55:01 2026 GMT
Subject: CN=6a398505-afeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:09:ed:86:47:3d:6b:cc:0e:a6:7d:b9:02:8d:
8e:9a:11:25:48:ac:8e:5c:93:8f:96:fb:f5:14:b9:
ed:60:ad:74:bf:47:c5:9d:07:c1:49:03:38:e3:3d:
7b:c4:2f:82:55:7d:fd:29:0c:02:d1:d3:8e:c8:5b:
20:9c:71:ef:39:10:55:61:69:0e:a3:ac:38:64:d7:
ba:70:43:64:a2:21:fb:75:b9:56:c1:24:22:c7:74:
87:30:85:e6:e0:8b:39:36:5d:35:d3:8a:3d:f8:cd:
a8:b1:59:52:1b:63:04:41:ea:1b:f3:42:31:a0:fb:
61:fb:47:73:83:e3:57:58:b1:31:55:5f:2f:c4:9c:
26:8c:81:1e:15:4e:eb:c3:16:f6:f0:42:56:0a:ea:
4f:2e:62:58:15:09:5d:0a:d2:45:c7:e3:70:84:c9:
91:da:ed:bd:81:5e:5e:96:0b:cc:c7:0f:75:71:9c:
c9:e0:ac:85:ba:dc:83:f3:ab:8d:cb:74:2f:77:5c:
92:e2:b8:13:02:bc:94:63:7d:2c:5d:66:b8:6a:74:
c2:e9:64:89:74:f7:44:da:ce:94:8c:2a:5e:e3:08:
83:e8:ea:92:64:9b:2a:61:4d:31:b6:94:57:5a:51:
0f:34:a3:89:6e:27:08:31:e1:d7:6a:5c:ab:d2:1e:
03:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:BA:4B:BD:D3:48:C7:A3:F9:F0:3B:D6:97:D9:CF:1C:76:D6:B4:D2
X509v3 Authority Key Identifier:
keyid:D6:18:3A:61:67:EC:2E:4A:72:47:07:0F:1F:0B:39:B6:B9:C9:53:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157705/33FAE6F440CE11EABECD676AC4F9AE02/1hg6YWfsLkpyRwcPHws5trnJU-E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1hg6YWfsLkpyRwcPHws5trnJU-E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157705/33FAE6F440CE11EABECD676AC4F9AE02/1hg6YWfsLkpyRwcPHws5trnJU-E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:28:ca:1a:84:7c:5c:2f:4c:53:36:7e:78:b4:bb:84:e2:05:
b2:6a:6b:47:9d:d9:d9:f4:19:7e:8c:9d:49:36:53:7c:ac:bd:
b4:33:91:d9:9b:a9:10:52:96:74:30:84:4e:39:10:c0:7d:48:
3e:6c:fc:5b:54:87:7c:68:60:4d:74:ef:3e:f1:fb:0d:b4:02:
6e:54:c1:57:e2:9b:1f:d9:a5:f9:77:dd:bd:b0:99:07:f1:f4:
26:a6:9c:8b:2c:e8:8e:eb:1c:4b:17:9b:4d:fc:7c:fe:36:07:
e7:cd:33:59:7a:bb:2c:02:ca:1b:60:4d:5a:1c:dc:f0:08:1b:
0d:b8:5b:6d:9e:bb:24:58:d9:da:0f:17:28:b0:da:08:13:21:
84:ff:e9:ee:75:9a:a8:09:e5:d8:65:a8:e0:fb:11:82:c2:46:
af:19:7c:57:ef:99:61:d3:00:e4:88:7a:22:c3:df:00:3b:c3:
8f:c2:1d:12:2f:7e:40:70:97:25:17:61:ba:86:b0:48:a3:1b:
db:29:21:1f:48:bb:97:6f:ac:60:8f:67:d7:7a:90:e7:8c:f5:
c2:6f:c8:1f:ae:52:86:17:b7:18:97:3c:51:e5:33:3b:d0:a6:
79:0c:aa:d0:f8:a9:46:0e:c0:0b:dd:a9:63:aa:c7:1f:f6:34:
0a:33:41:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:25:00 2026 by rpki-client