
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176632/AB5A87065E0D11F094762F13C4F9AE02/hDGOgbLln2EUsQL6RQgzfekVw5M.mft
File: hDGOgbLln2EUsQL6RQgzfekVw5M.mft (raw, json)
Hash identifier: 1b5c7p+ON9d8aAwkv7zKDU9WHklfTyZV76oHi4JEFd0=
Subject key identifier: 56:47:7E:B0:E3:47:6D:BD:BD:6C:5D:87:8D:CF:C9:60:20:62:47:33
Authority key identifier: 84:31:8E:81:B2:E5:9F:61:14:B1:02:FA:45:08:33:7D:E9:15:C3:93
Certificate issuer: /CN=A9176632/serialNumber=84318E81B2E59F6114B102FA4508337DE915C393
Certificate serial: 8B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDGOgbLln2EUsQL6RQgzfekVw5M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176632/AB5A87065E0D11F094762F13C4F9AE02/hDGOgbLln2EUsQL6RQgzfekVw5M.mft
Manifest number: 8B
Signing time: Sun 05 Apr 2026 06:55:37 +0000
Manifest this update: Sun 05 Apr 2026 06:55:36 +0000
Manifest next update: Sun 12 Apr 2026 06:55:36 +0000
Files and hashes: 1: hDGOgbLln2EUsQL6RQgzfekVw5M.crl (hash: ET3uGWrPyrdBc6f2KzJn/Ajo3EuJZ8m6VLJdzciUMyk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176632/AB5A87065E0D11F094762F13C4F9AE02/hDGOgbLln2EUsQL6RQgzfekVw5M.crl
rsync://rpki.apnic.net/member_repository/A9176632/AB5A87065E0D11F094762F13C4F9AE02/hDGOgbLln2EUsQL6RQgzfekVw5M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDGOgbLln2EUsQL6RQgzfekVw5M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 06:55:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139 (0x8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176632, serialNumber=84318E81B2E59F6114B102FA4508337DE915C393
Validity
Not Before: Apr 5 06:55:36 2026 GMT
Not After : Apr 12 06:55:36 2026 GMT
Subject: CN=69d20769-8d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:29:dd:bb:13:3b:76:12:e0:33:d4:54:32:4d:
8f:dd:98:cd:40:e7:5c:f7:66:ea:6f:64:52:67:f1:
fa:b8:5b:45:9d:02:42:ed:e0:fe:d9:35:ba:b6:a0:
fa:f4:3c:5f:40:bd:65:4a:e8:ff:e4:9a:3f:6e:e1:
aa:d5:e9:32:20:d9:c0:40:a3:41:fe:11:a2:4c:1f:
eb:25:07:c2:e0:e6:cf:e6:a1:ca:dd:86:4f:85:e8:
86:c3:c4:ac:0e:72:bb:ed:aa:78:62:fe:2a:1c:11:
1c:8d:aa:9f:0f:a3:28:3c:02:02:1a:bb:d5:3f:5e:
2f:ef:d9:b8:36:ab:5d:20:25:e4:6f:66:70:c6:cc:
17:af:7d:79:06:20:00:22:6f:c3:18:60:a8:a4:a8:
2c:19:2f:47:dd:29:73:38:9f:3a:72:08:67:83:2e:
e8:3b:38:44:d8:6d:f9:77:0e:1e:0d:f3:91:b7:28:
3b:e6:18:9a:a0:c4:73:11:59:36:c2:f1:d7:66:ac:
5c:cf:b1:f1:c6:c0:5d:21:35:19:73:c5:39:a8:48:
a2:74:36:b8:8e:b1:27:b8:bd:37:40:b2:30:7b:a3:
e9:eb:cf:91:7a:6f:12:ca:7c:e7:c3:f5:b5:4d:ad:
34:1a:ef:fc:ef:71:c5:31:75:d6:83:c7:51:50:78:
09:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:47:7E:B0:E3:47:6D:BD:BD:6C:5D:87:8D:CF:C9:60:20:62:47:33
X509v3 Authority Key Identifier:
keyid:84:31:8E:81:B2:E5:9F:61:14:B1:02:FA:45:08:33:7D:E9:15:C3:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176632/AB5A87065E0D11F094762F13C4F9AE02/hDGOgbLln2EUsQL6RQgzfekVw5M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDGOgbLln2EUsQL6RQgzfekVw5M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176632/AB5A87065E0D11F094762F13C4F9AE02/hDGOgbLln2EUsQL6RQgzfekVw5M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:e5:d6:ea:b3:8c:0b:bd:de:ca:1b:42:60:0e:6d:42:be:94:
40:c8:49:e5:f4:bf:f5:72:ff:9a:3d:40:47:c9:a2:29:e7:1c:
6c:00:94:81:66:ab:e6:72:2b:02:d8:a3:47:6b:db:40:dd:b4:
2c:33:69:be:3c:ee:e5:40:fa:5a:2d:be:4d:4e:a3:6c:56:6a:
e7:cf:a3:d5:0d:66:d5:bc:46:04:a4:0f:06:b3:85:df:c2:89:
8b:0e:88:3f:a5:15:40:66:6a:b6:1e:61:a5:39:d2:e7:cf:13:
29:8d:b6:69:a3:a6:2b:9a:69:51:fe:4a:f7:82:ef:6a:0f:06:
ff:e0:ae:b7:6e:83:10:2e:fc:2e:70:3e:1c:95:54:bb:25:c0:
dd:02:95:a5:22:b0:8d:d3:d6:54:1b:28:d1:0e:2a:9a:5a:e4:
43:05:05:6c:ef:d6:40:59:7b:c7:f6:14:82:8e:c7:fa:0f:fd:
9a:25:95:5d:c6:b1:76:95:17:b2:c3:2f:d4:88:61:39:53:5f:
ba:f2:5f:83:67:f6:7c:ef:bd:9c:82:f4:5b:26:cd:3c:38:9e:
75:c1:f0:9f:8f:a4:89:e5:c1:28:17:f3:a9:d9:05:28:e4:37:
2a:7f:b7:fd:11:db:0c:38:02:6f:8f:44:75:0d:17:35:46:46:
4d:71:3f:d1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzY2MzIxMTAvBgNVBAUTKDg0MzE4RTgxQjJFNTlGNjExNEIxMDJGQTQ1MDgzMzdE
RTkxNUMzOTMwHhcNMjYwNDA1MDY1NTM2WhcNMjYwNDEyMDY1NTM2WjAYMRYwFAYD
VQQDEw02OWQyMDc2OS04ZDM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArinduxM7dhLgM9RUMk2P3ZjNQOdc92bqb2RSZ/H6uFtFnQJC7eD+2TW6tqD6
9DxfQL1lSuj/5Jo/buGq1ekyINnAQKNB/hGiTB/rJQfC4ObP5qHK3YZPheiGw8Ss
DnK77ap4Yv4qHBEcjaqfD6MoPAICGrvVP14v79m4NqtdICXkb2ZwxswXr315BiAA
Im/DGGCopKgsGS9H3SlzOJ86cghngy7oOzhE2G35dw4eDfORtyg75hiaoMRzEVk2
wvHXZqxcz7HxxsBdITUZc8U5qEiidDa4jrEnuL03QLIwe6Pp68+Rem8Synznw/W1
Ta00Gu/873HFMXXWg8dRUHgJbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFZHfrDj
R229vWxdh43PyWAgYkczMB8GA1UdIwQYMBaAFIQxjoGy5Z9hFLEC+kUIM33pFcOT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjYzMi9BQjVBODcwNjVF
MEQxMUYwOTQ3NjJGMTNDNEY5QUUwMi9oREdPZ2JMbG4yRVVzUUw2UlFnemZla1Z3
NU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hER09nYkxsbjJFVXNRTDZSUWd6ZmVrVnc1TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NjYzMi9BQjVBODcwNjVFMEQxMUYwOTQ3NjJGMTNDNEY5QUUwMi9oREdPZ2JMbG4y
RVVzUUw2UlFnemZla1Z3NU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAF+XW6rOMC73eyhtCYA5tQr6UQMhJ5fS/9XL/mj1AR8miKeccbACUgWar5nIr
AtijR2vbQN20LDNpvjzu5UD6Wi2+TU6jbFZq58+j1Q1m1bxGBKQPBrOF38KJiw6I
P6UVQGZqth5hpTnS588TKY22aaOmK5ppUf5K94Lvag8G/+Cut26DEC78LnA+HJVU
uyXA3QKVpSKwjdPWVBso0Q4qmlrkQwUFbO/WQFl7x/YUgo7H+g/9miWVXcaxdpUX
ssMv1IhhOVNfuvJfg2f2fO+9nIL0WybNPDiedcHwn4+kieXBKBfzqdkFKOQ3Kn+3
/RHbDDgCb49EdQ0XNUZGTXE/0Q==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:32:18 2026 by rpki-client