
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft
File: he6Mb5WNbzwfFdLBq8T-m75s7tc.mft (raw, json)
Hash identifier: 1+KitD3sE1CNDEDcPfoRYn1BoYku0apJphM3W4XiWkw=
Subject key identifier: 20:7B:EB:A3:CC:01:CD:C5:5C:48:AE:E9:EC:40:69:8D:0E:6E:B2:78
Authority key identifier: 85:EE:8C:6F:95:8D:6F:3C:1F:15:D2:C1:AB:C4:FE:9B:BE:6C:EE:D7
Certificate issuer: /CN=A9175165/serialNumber=85EE8C6F958D6F3C1F15D2C1ABC4FE9BBE6CEED7
Certificate serial: 1217
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6Mb5WNbzwfFdLBq8T-m75s7tc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft
Manifest number: 120C
Signing time: Tue 18 Aug 2026 17:19:49 +0000
Manifest this update: Tue 18 Aug 2026 17:19:48 +0000
Manifest next update: Tue 25 Aug 2026 17:19:48 +0000
Files and hashes: 1: he6Mb5WNbzwfFdLBq8T-m75s7tc.crl (hash: zu52xC66pobzm2H4R0HeUhc8+ML6nD6U7Sqh/Uny/nw=)
2: 8B8DEE220F0911E9A8CC815EC4F9AE02.roa (hash: RlrWnPy3I+hL88VTB83v1hpmck9uNtm5upq6PTxUzuo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.crl
rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6Mb5WNbzwfFdLBq8T-m75s7tc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 17:19:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4631 (0x1217)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175165, serialNumber=85EE8C6F958D6F3C1F15D2C1ABC4FE9BBE6CEED7
Validity
Not Before: Aug 18 17:19:48 2026 GMT
Not After : Aug 25 17:19:48 2026 GMT
Subject: CN=6a849435-0826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:00:01:96:3a:f6:72:36:48:37:65:36:15:da:
d3:f4:fb:54:bb:0e:cf:d7:61:5d:31:95:eb:4e:7d:
b0:1a:e2:e7:17:f5:a6:d7:52:24:4d:2f:ec:37:af:
3d:87:2d:ce:fb:9d:ea:ce:81:9a:dd:cd:54:42:7f:
fc:1f:3c:2e:66:1e:c0:bb:62:d5:0a:b2:74:c2:bd:
c8:0a:45:0a:f8:1f:d8:4f:45:a4:41:e2:09:d2:2f:
b8:f6:eb:0a:2a:5c:1d:41:93:29:8b:2a:2d:ad:38:
ab:e0:50:38:31:13:3d:f5:af:c8:68:f4:5f:c1:2e:
cb:16:d5:12:85:09:c4:6e:3a:42:d7:df:f9:bb:47:
5a:4e:9a:dd:79:e6:a7:8b:38:3c:dc:7f:86:2b:eb:
8d:cf:a3:17:96:d4:2f:cb:ff:c0:0d:32:13:02:7e:
e2:47:3f:fd:2f:10:a2:79:da:88:90:10:ac:54:12:
f3:19:0a:cb:8b:9b:a4:cd:64:c8:6a:9b:4e:78:33:
7d:7f:9f:80:b4:f4:5d:f3:63:e9:27:3f:02:b0:4e:
f2:4f:66:eb:9c:dd:f6:e8:80:d7:11:eb:1d:1a:91:
06:19:ce:42:f1:96:8c:79:4f:36:59:a0:db:eb:e1:
e0:11:61:c0:fa:e4:45:05:d5:f2:34:7e:7a:d7:de:
60:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:7B:EB:A3:CC:01:CD:C5:5C:48:AE:E9:EC:40:69:8D:0E:6E:B2:78
X509v3 Authority Key Identifier:
keyid:85:EE:8C:6F:95:8D:6F:3C:1F:15:D2:C1:AB:C4:FE:9B:BE:6C:EE:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6Mb5WNbzwfFdLBq8T-m75s7tc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:7c:54:43:5e:9e:28:e9:78:3a:9e:0d:18:c8:8e:32:f4:cd:
da:83:65:22:c3:cb:98:72:93:4c:3e:15:53:c0:03:b6:84:a1:
80:0c:05:79:f0:69:d5:87:27:31:e5:f9:a3:1c:77:e9:5e:91:
fa:d5:49:8a:9d:2d:38:5e:91:8f:3f:35:ce:a3:ab:21:8d:68:
06:dc:24:8c:9a:22:8f:27:44:2f:a0:54:59:b4:71:60:f9:b4:
2c:aa:30:c1:e4:25:9b:e4:78:7a:57:fb:30:87:7e:2a:e6:7f:
ae:f7:92:3a:d0:23:b7:48:d4:e6:30:51:28:b0:fc:8b:ef:a7:
b4:ca:29:05:87:20:61:85:e4:72:e4:e6:50:b1:a5:8c:ee:23:
15:e9:f0:00:5d:58:9f:f8:5a:bd:cd:e9:ff:05:89:b5:8c:0d:
1d:55:fd:08:61:cd:80:c1:47:8c:0c:33:0d:91:6c:a3:9b:bc:
3c:1e:00:8f:ed:46:db:4a:b3:c3:3e:3f:f3:c6:a1:68:b8:33:
b9:29:d0:04:b4:11:50:b4:b9:d9:f7:8c:94:c2:33:99:b9:30:
c7:b0:66:b1:19:fa:77:91:47:c0:5f:f9:84:72:81:2c:d8:4e:
ba:09:42:aa:b5:ad:5d:70:bd:98:4a:da:ce:6f:00:40:2e:0f:
b1:7d:87:ad
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzUxNjUxMTAvBgNVBAUTKDg1RUU4QzZGOTU4RDZGM0MxRjE1RDJDMUFCQzRGRTlC
QkU2Q0VFRDcwHhcNMjYwODE4MTcxOTQ4WhcNMjYwODI1MTcxOTQ4WjAYMRYwFAYD
VQQDEw02YTg0OTQzNS0wODI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzQABljr2cjZIN2U2FdrT9PtUuw7P12FdMZXrTn2wGuLnF/Wm11IkTS/sN689
hy3O+53qzoGa3c1UQn/8HzwuZh7Au2LVCrJ0wr3ICkUK+B/YT0WkQeIJ0i+49usK
KlwdQZMpiyotrTir4FA4MRM99a/IaPRfwS7LFtUShQnEbjpC19/5u0daTprdeean
izg83H+GK+uNz6MXltQvy//ADTITAn7iRz/9LxCiedqIkBCsVBLzGQrLi5ukzWTI
aptOeDN9f5+AtPRd82PpJz8CsE7yT2brnN326IDXEesdGpEGGc5C8ZaMeU82WaDb
6+HgEWHA+uRFBdXyNH56195gXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCB766PM
Ac3FXEiu6exAaY0ObrJ4MB8GA1UdIwQYMBaAFIXujG+VjW88HxXSwavE/pu+bO7X
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTE2NS85MEYwRkZBRTBG
MDgxMUU5ODY4MEU4NUNDNEY5QUUwMi9oZTZNYjVXTmJ6d2ZGZExCcThULW03NXM3
dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hlNk1iNVdOYnp3ZkZkTEJxOFQtbTc1czd0Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NTE2NS85MEYwRkZBRTBGMDgxMUU5ODY4MEU4NUNDNEY5QUUwMi9oZTZNYjVXTmJ6
d2ZGZExCcThULW03NXM3dGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANnxUQ16eKOl4Op4NGMiOMvTN2oNlIsPLmHKTTD4VU8ADtoShgAwFefBp1Ycn
MeX5oxx36V6R+tVJip0tOF6Rjz81zqOrIY1oBtwkjJoijydEL6BUWbRxYPm0LKow
weQlm+R4elf7MId+KuZ/rveSOtAjt0jU5jBRKLD8i++ntMopBYcgYYXkcuTmULGl
jO4jFenwAF1Yn/havc3p/wWJtYwNHVX9CGHNgMFHjAwzDZFso5u8PB4Aj+1G20qz
wz4/88ahaLgzuSnQBLQRULS52feMlMIzmbkwx7BmsRn6d5FHwF/5hHKBLNhOuglC
qrWtXXC9mErazm8AQC4PsX2HrQ==
-----END CERTIFICATE-----
Generated at Wed Aug 19 13:39:22 2026 by rpki-client