
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.mft
File: hEvW0alyz9K2C4TeDLY-XVSvqM8.mft (raw, json)
Hash identifier: 4V//k90EPWeB2L71ENKQUnBKynSev4SuCoORTkD+ago=
Subject key identifier: 2E:17:6F:AA:CE:99:A5:0E:75:C1:F5:1E:DD:D0:BD:7A:A5:A1:63:CF
Authority key identifier: 84:4B:D6:D1:A9:72:CF:D2:B6:0B:84:DE:0C:B6:3E:5D:54:AF:A8:CF
Certificate issuer: /CN=A9161CEF/serialNumber=844BD6D1A972CFD2B60B84DE0CB63E5D54AFA8CF
Certificate serial: ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEvW0alyz9K2C4TeDLY-XVSvqM8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.mft
Manifest number: 0CEC
Signing time: Tue 06 Oct 2026 19:02:28 +0000
Manifest this update: Tue 06 Oct 2026 19:02:27 +0000
Manifest next update: Tue 13 Oct 2026 19:02:27 +0000
Files and hashes: 1: hEvW0alyz9K2C4TeDLY-XVSvqM8.crl (hash: ErxdBzuPX74FiPxMliuYAYRu4iyEaXDZBPQaF/GZPoY=)
2: 42B2A584790C11F0BFDABE73C4F9AE02.roa (hash: d07BUh1ehjR2H6atZT4gZxx1nTwyrrMun9HGnJk0rnE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.crl
rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEvW0alyz9K2C4TeDLY-XVSvqM8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 19:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 237 (0xed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161CEF, serialNumber=844BD6D1A972CFD2B60B84DE0CB63E5D54AFA8CF
Validity
Not Before: Oct 6 19:02:27 2026 GMT
Not After : Oct 13 19:02:27 2026 GMT
Subject: CN=6ac545c4-4686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:49:bf:ba:11:29:c4:0c:3f:cd:26:96:45:57:
2a:d7:69:62:5a:9d:2d:fc:eb:4e:61:34:2b:dc:d8:
09:1f:dd:75:7e:78:a7:dc:4d:5d:0e:3f:0e:f7:22:
08:eb:6a:92:50:39:5e:fb:4f:be:c1:16:c1:54:41:
7b:39:86:4a:ba:45:76:01:22:65:08:81:ba:a0:69:
0e:b6:82:15:c8:ca:ab:e0:71:3e:52:c1:d4:41:29:
b3:5f:a1:cd:e9:94:cb:ff:76:9a:ad:ea:be:53:de:
85:53:08:45:26:9c:d6:a3:77:52:01:91:f1:c5:6c:
02:ba:ca:10:5e:22:44:bf:1f:bd:9a:71:03:95:37:
21:81:92:42:9e:da:ff:fb:5e:fe:0e:98:36:56:bd:
2c:ca:02:5c:c3:d6:49:77:80:a2:a8:30:ab:06:6c:
eb:9f:b3:0e:0e:b9:24:90:00:8c:00:2b:89:29:85:
e0:33:25:3e:20:b2:e2:20:b5:9a:44:4e:84:9c:be:
57:52:27:2a:be:92:ad:71:19:4e:4b:dc:98:d7:f8:
25:a5:f6:17:21:5c:dc:40:a1:6a:0f:ef:32:84:01:
66:2a:5d:c1:c7:8d:ee:01:ba:6e:f4:21:89:ca:28:
a1:32:c9:10:28:02:b7:e6:06:68:29:a8:14:64:7f:
36:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:17:6F:AA:CE:99:A5:0E:75:C1:F5:1E:DD:D0:BD:7A:A5:A1:63:CF
X509v3 Authority Key Identifier:
keyid:84:4B:D6:D1:A9:72:CF:D2:B6:0B:84:DE:0C:B6:3E:5D:54:AF:A8:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEvW0alyz9K2C4TeDLY-XVSvqM8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:bc:ef:b8:8f:f4:05:e0:ac:ed:e8:c0:cf:2b:02:c4:bf:2a:
d8:cd:48:5a:30:e2:e7:54:40:12:8c:ee:5e:70:50:b0:10:12:
c7:67:aa:01:a5:01:1a:f2:c4:b3:95:4f:e3:75:e2:95:44:54:
5c:bb:fc:15:ea:bd:a3:29:48:57:31:d0:fd:b3:e8:50:60:59:
c5:5d:b6:18:2c:38:3a:17:a6:58:09:a9:6d:02:d8:e4:cf:ec:
19:83:07:c4:2e:14:8e:1c:5b:45:75:eb:82:a1:44:e6:85:0a:
b5:b6:d4:12:d3:b9:94:46:a4:72:69:9b:3e:27:6b:53:8e:ba:
b9:4d:dd:a0:1e:2e:cf:35:bd:dc:7f:30:cb:b8:a1:82:f6:4c:
2c:0c:fa:1e:80:9f:6b:29:08:e7:ea:01:4f:8a:0b:9a:7b:35:
67:63:27:5b:59:79:37:0a:68:80:83:0d:b3:b6:1f:a8:15:60:
70:21:c7:e9:5c:86:9f:1a:63:21:88:59:3d:24:95:44:f0:9c:
32:08:86:56:f3:a2:58:28:60:a0:15:29:94:32:90:84:8b:a7:
cb:e4:d2:2c:66:9b:af:14:b9:0d:a7:de:c5:b3:2f:a5:da:c9:
d3:a8:0b:b6:27:f7:d7:c8:af:ca:5e:ef:c9:7f:9b:88:7f:27:
50:46:00:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 01:06:17 2026 by rpki-client