
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft
File: HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft (raw, json)
Hash identifier: i04MhN90pJiYKtdu6v4eOTRN+nc8GRmFVgTFsNywJM0=
Subject key identifier: 3C:72:72:B1:24:4C:80:BD:54:5E:15:B3:D2:D5:73:85:12:36:F3:2F
Authority key identifier: 1D:F9:C0:CE:F9:A7:7D:CD:15:BB:51:F9:3F:D3:42:99:9B:E1:16:58
Certificate issuer: /CN=A9178C1E/serialNumber=1DF9C0CEF9A77DCD15BB51F93FD342999BE11658
Certificate serial: 020E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft
Manifest number: 0207
Signing time: Thu 05 Nov 2026 03:57:14 +0000
Manifest this update: Thu 05 Nov 2026 03:57:13 +0000
Manifest next update: Thu 12 Nov 2026 03:57:13 +0000
Files and hashes: 1: HfnAzvmnfc0Vu1H5P9NCmZvhFlg.crl (hash: qyCMfVySlW5vWKTZHyvq4E9UXrzjuNfGMA/PDOJKrsc=)
2: 4AFD4994CDD011EEA5534481C4F9AE02.roa (hash: LectFDdTSMn7loXlQ2Wf7gPQucdUaSBxJzRdeIEEXm4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.crl
rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 03:57:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 526 (0x20e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178C1E, serialNumber=1DF9C0CEF9A77DCD15BB51F93FD342999BE11658
Validity
Not Before: Nov 5 03:57:13 2026 GMT
Not After : Nov 12 03:57:13 2026 GMT
Subject: CN=6aebfe99-e17d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b5:eb:15:62:f1:ef:6d:64:8d:ab:6d:12:b8:
e3:6e:aa:e0:e8:2b:aa:2e:00:f6:c1:ec:de:8f:7c:
51:af:10:a3:fe:c7:1c:21:b9:8d:a4:93:e4:57:e6:
af:ce:13:8d:48:7f:a3:2b:66:7f:01:ac:a9:5b:f0:
e6:1e:bf:96:0a:38:55:29:f1:9f:20:bd:27:02:89:
f7:88:5b:b6:94:e2:a2:db:30:da:18:bf:9e:24:aa:
e2:b9:52:f7:28:2e:64:5c:ed:c4:91:a5:bf:c9:2a:
e2:0f:43:12:b4:a2:65:13:14:ec:b4:d2:91:30:30:
72:4e:27:5d:b2:b1:33:ed:dd:26:f2:f3:b5:61:65:
55:89:5c:9c:60:8d:f9:a8:7d:27:16:9e:5f:23:7c:
4b:3d:9b:40:75:08:9c:05:68:51:0c:7e:9c:04:51:
db:1c:92:0c:72:92:0f:69:13:41:23:1a:c8:ad:ef:
34:cc:8a:27:2b:a6:97:c0:3a:2a:7f:67:04:cf:fa:
e3:2c:41:34:9f:7f:d1:76:98:f0:e4:73:d9:13:4a:
54:8f:57:ec:1a:0a:f0:db:6b:e0:d0:98:d3:8a:30:
72:5a:08:ee:e6:62:0e:34:e6:49:32:b8:2f:28:32:
df:b5:ad:fc:1f:12:f5:60:db:87:ff:b5:6b:4d:cf:
ab:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:72:72:B1:24:4C:80:BD:54:5E:15:B3:D2:D5:73:85:12:36:F3:2F
X509v3 Authority Key Identifier:
keyid:1D:F9:C0:CE:F9:A7:7D:CD:15:BB:51:F9:3F:D3:42:99:9B:E1:16:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:9b:19:d0:a7:7e:66:e5:20:eb:e8:d1:fe:a9:fe:0d:ab:76:
fe:48:db:63:9d:16:dd:3a:a0:e2:90:96:1a:2b:6b:a8:24:ec:
8f:32:d3:75:cb:84:c8:61:82:f7:77:07:e2:83:0a:4b:71:3c:
65:5a:28:dc:97:c7:5c:e4:e6:9c:c6:36:c0:09:c7:10:6d:b0:
6a:15:d6:3c:79:8c:a7:79:80:11:c9:f7:04:f3:d7:05:1a:86:
58:9f:3c:d4:a6:6c:9b:49:34:af:4a:cd:a1:f2:91:40:81:44:
78:4d:ac:50:52:d3:7d:84:4d:05:8f:8a:6a:11:0b:41:1f:8c:
29:5a:c2:0e:36:45:5a:27:c6:f8:12:8f:a3:23:5c:dc:5b:19:
12:9f:df:51:18:1f:91:e4:4c:54:62:fa:6f:41:a1:a5:4c:98:
ef:9b:66:af:e8:0e:ab:1f:b9:1d:4a:2b:18:49:f9:33:55:56:
87:24:c5:6f:30:92:03:7a:57:64:f3:10:08:2f:33:d4:1b:ae:
96:28:eb:a9:3f:d0:bb:2c:74:19:67:20:8b:29:2f:f9:4d:a5:
ec:9c:37:ce:83:90:1f:96:e7:00:95:4d:06:3c:bd:13:56:e3:
63:b1:32:96:8b:d4:a6:1b:85:2e:7d:4d:3f:e5:bb:2c:a6:69:
ed:3e:7e:27
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzhDMUUxMTAvBgNVBAUTKDFERjlDMENFRjlBNzdEQ0QxNUJCNTFGOTNGRDM0Mjk5
OUJFMTE2NTgwHhcNMjYxMTA1MDM1NzEzWhcNMjYxMTEyMDM1NzEzWjAYMRYwFAYD
VQQDEw02YWViZmU5OS1lMTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwrXrFWLx721kjattErjjbqrg6CuqLgD2wezej3xRrxCj/sccIbmNpJPkV+av
zhONSH+jK2Z/AaypW/DmHr+WCjhVKfGfIL0nAon3iFu2lOKi2zDaGL+eJKriuVL3
KC5kXO3EkaW/ySriD0MStKJlExTstNKRMDByTiddsrEz7d0m8vO1YWVViVycYI35
qH0nFp5fI3xLPZtAdQicBWhRDH6cBFHbHJIMcpIPaRNBIxrIre80zIonK6aXwDoq
f2cEz/rjLEE0n3/Rdpjw5HPZE0pUj1fsGgrw22vg0JjTijByWgju5mIONOZJMrgv
KDLfta38HxL1YNuH/7VrTc+rbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDxycrEk
TIC9VF4Vs9LVc4USNvMvMB8GA1UdIwQYMBaAFB35wM75p33NFbtR+T/TQpmb4RZY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEMxRS9DMjg2MDMyRUM2
NDcxMUVFOUQ2OEVCN0ZDNEY5QUUwMi9IZm5BenZtbmZjMFZ1MUg1UDlOQ21admhG
bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hmbkF6dm1uZmMwVnUxSDVQOU5DbVp2aEZsZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
OEMxRS9DMjg2MDMyRUM2NDcxMUVFOUQ2OEVCN0ZDNEY5QUUwMi9IZm5BenZtbmZj
MFZ1MUg1UDlOQ21admhGbGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdJsZ0Kd+ZuUg6+jR/qn+Dat2/kjbY50W3Tqg4pCWGitrqCTsjzLTdcuEyGGC
93cH4oMKS3E8ZVoo3JfHXOTmnMY2wAnHEG2wahXWPHmMp3mAEcn3BPPXBRqGWJ88
1KZsm0k0r0rNofKRQIFEeE2sUFLTfYRNBY+KahELQR+MKVrCDjZFWifG+BKPoyNc
3FsZEp/fURgfkeRMVGL6b0GhpUyY75tmr+gOqx+5HUorGEn5M1VWhyTFbzCSA3pX
ZPMQCC8z1BuulijrqT/Quyx0GWcgiykv+U2l7Jw3zoOQH5bnAJVNBjy9E1bjY7Ey
lovUphuFLn1NP+W7LKZp7T5+Jw==
-----END CERTIFICATE-----
Generated at Thu Nov 5 09:52:26 2026 by rpki-client