
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft
File: -HInxmU9abruLplIhCzrC0BJ54Y.mft (raw, json)
Hash identifier: RUTJxtRPgMnAoLzzOxk9SiZ2Y9QnBbDWYyO4dzX6xoQ=
Subject key identifier: 9C:36:C7:60:AE:CF:B7:D0:B5:18:CC:DC:6F:1C:0B:7D:F1:B0:BB:33
Authority key identifier: F8:72:27:C6:65:3D:69:BA:EE:2E:99:48:84:2C:EB:0B:40:49:E7:86
Certificate issuer: /CN=A916D23A/serialNumber=F87227C6653D69BAEE2E9948842CEB0B4049E786
Certificate serial: 0BEF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft
Manifest number: 0BDD
Signing time: Thu 10 Sep 2026 18:57:20 +0000
Manifest this update: Thu 10 Sep 2026 18:57:19 +0000
Manifest next update: Thu 17 Sep 2026 18:57:19 +0000
Files and hashes: 1: -HInxmU9abruLplIhCzrC0BJ54Y.crl (hash: o5Vm6x2SkbwVMNMM1uyr2AgoUVcIs38TRAGKpzHVNyc=)
2: E265728A877911EA9E28DF0BC4F9AE02.roa (hash: sl6bCaksY9LpaTb4Wrhp951W5eBEQgZTVtuSIcJwSxc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.crl
rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 18:57:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3055 (0xbef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D23A, serialNumber=F87227C6653D69BAEE2E9948842CEB0B4049E786
Validity
Not Before: Sep 10 18:57:19 2026 GMT
Not After : Sep 17 18:57:19 2026 GMT
Subject: CN=6aa2fd90-0b1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:76:17:3a:97:fe:7a:4e:d8:49:61:fb:cf:45:
3a:e8:65:bd:59:38:69:e8:9f:d2:15:bd:35:80:29:
93:82:44:a1:55:ab:7f:f9:e0:27:84:92:ed:b5:79:
71:c8:d7:25:19:fa:6b:a8:71:f1:9c:42:6f:ce:35:
74:b2:00:4f:58:d1:34:9a:8a:48:7f:ae:3a:73:52:
74:d7:31:71:cb:b9:64:56:43:2a:24:f8:28:8a:f6:
84:5b:5c:c4:db:eb:9d:99:b0:1d:47:79:93:1a:3d:
a6:78:60:95:c6:2c:69:d8:f5:93:a8:d0:0e:28:5e:
c0:36:21:ab:bd:a4:5c:13:bd:aa:72:07:44:d5:c3:
dc:39:9b:4e:8a:12:84:b9:d9:37:ef:b5:56:15:61:
46:e3:cc:bf:6d:bb:06:2d:0a:03:83:34:0e:c5:00:
41:86:8f:f0:a9:73:37:56:44:f3:d7:88:31:b6:c7:
52:e6:f1:60:61:48:70:ce:66:97:84:55:72:81:3e:
fd:87:90:d1:69:7f:67:f2:24:a5:d4:c9:03:e1:72:
1c:17:6b:d9:2a:fb:b5:83:c5:1e:6a:86:dd:0e:6b:
6a:87:18:e3:1b:4a:7f:6c:ea:21:6a:16:ff:6f:14:
e1:f4:fc:3b:e6:d0:ba:ea:5c:0f:a9:e9:5d:eb:25:
dc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:36:C7:60:AE:CF:B7:D0:B5:18:CC:DC:6F:1C:0B:7D:F1:B0:BB:33
X509v3 Authority Key Identifier:
keyid:F8:72:27:C6:65:3D:69:BA:EE:2E:99:48:84:2C:EB:0B:40:49:E7:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:98:e6:06:1a:56:2d:69:c8:85:e8:01:7e:a1:0a:b2:f7:0c:
4c:ba:3b:5b:c3:3b:16:80:56:23:1a:99:8e:ba:6b:c7:0e:a5:
2f:02:0b:45:c6:47:d0:5e:15:d0:85:d8:ae:82:79:a3:9f:24:
3e:eb:a4:d0:b6:f4:ba:a8:f4:cb:81:dc:40:36:68:40:9a:2a:
11:b3:aa:44:81:8c:9c:5e:e8:32:7f:9d:14:d6:ec:fc:6f:49:
f8:84:36:f9:7f:59:43:1e:e9:db:22:d6:32:3d:3c:12:60:25:
86:61:31:5a:c0:b3:da:68:21:1a:ff:ec:89:7f:23:74:4c:17:
42:79:9a:e7:d1:f1:95:af:82:b2:2b:25:8c:c1:d6:5f:41:11:
54:c2:43:92:c7:99:d0:52:f1:1a:5c:a9:85:e2:19:a3:3f:f8:
14:09:2e:d9:dd:4b:60:79:9b:69:f4:ae:ca:95:77:f0:b3:d8:
ef:8a:26:1c:ac:41:36:fb:b0:4d:2d:bb:98:1a:41:1e:c4:db:
ea:f8:45:39:b6:f3:20:51:6c:ae:fb:47:1f:9d:64:82:0e:85:
e2:62:e6:bc:a7:fa:5b:04:7c:1d:be:36:98:0b:f0:87:c1:fb:
8c:25:0a:c2:c5:1b:48:31:80:b2:34:69:7e:8c:a1:78:53:31:
c0:ec:2b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 06:16:51 2026 by rpki-client