
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft
File: HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft (raw, json)
Hash identifier: 7I9fHIaYzYfbzqWgVVLfo6AW9e1zhUd4Oabj74CdUOU=
Subject key identifier: 26:79:C7:F3:E0:37:1A:85:2B:F3:BF:47:99:17:9D:F6:74:CD:FB:0D
Authority key identifier: 1D:F9:C0:CE:F9:A7:7D:CD:15:BB:51:F9:3F:D3:42:99:9B:E1:16:58
Certificate issuer: /CN=A9178C1E/serialNumber=1DF9C0CEF9A77DCD15BB51F93FD342999BE11658
Certificate serial: 0196
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft
Manifest number: 0190
Signing time: Thu 19 Mar 2026 03:33:13 +0000
Manifest this update: Thu 19 Mar 2026 03:33:12 +0000
Manifest next update: Thu 26 Mar 2026 03:33:12 +0000
Files and hashes: 1: HfnAzvmnfc0Vu1H5P9NCmZvhFlg.crl (hash: Wf9xclY/9nMp0e9USfssSy2vLoVbKm4d1WEafYq8HO0=)
2: 4AFD4994CDD011EEA5534481C4F9AE02.roa (hash: CD36n9NIjiOL16LSi0AkJMYg3c1Bb/ojpstDyOiqn2g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.crl
rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Mar 2026 03:33:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 406 (0x196)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178C1E, serialNumber=1DF9C0CEF9A77DCD15BB51F93FD342999BE11658
Validity
Not Before: Mar 19 03:33:12 2026 GMT
Not After : Mar 26 03:33:12 2026 GMT
Subject: CN=69bb6e78-6b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:25:20:a7:f7:6a:bd:ce:33:ac:38:84:6e:89:
1b:a2:b2:2f:0f:d2:08:73:bd:2b:5a:c0:c7:12:49:
48:9d:34:01:9c:c3:79:85:e0:1c:bb:b3:97:88:40:
21:b2:92:94:c8:e5:44:1b:01:92:9a:70:e9:49:fa:
1d:8e:89:41:12:0e:5f:8c:77:af:d3:f6:25:df:f3:
a5:95:3a:b1:f5:fb:83:9d:60:01:80:2f:5e:45:33:
11:f9:db:23:38:52:64:b9:e4:47:f1:e5:88:bb:ba:
9f:0a:d5:b6:cc:71:ec:9e:16:60:ae:b5:fc:b4:ab:
5b:ee:34:d5:73:5f:36:50:b9:88:21:72:7c:5b:52:
4f:f2:52:a2:90:68:c1:ca:fc:37:ff:80:c2:9e:cf:
a5:1a:7c:3b:eb:04:cb:5f:0a:72:80:e5:96:9e:64:
72:24:48:98:55:07:f8:c8:fa:61:99:27:2c:ae:7a:
a1:c7:f1:b1:47:50:e2:ab:37:b4:b8:fc:cf:87:10:
cf:9b:31:45:17:e1:3e:af:5c:87:dd:9c:00:46:af:
0a:b1:db:97:7b:96:d2:a0:1e:c2:a1:2c:f2:ec:60:
16:eb:30:9c:b2:a3:1d:9c:fe:34:7b:65:e5:48:c6:
2b:43:e8:41:d4:3a:11:48:c9:16:bd:65:23:03:c0:
d5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:79:C7:F3:E0:37:1A:85:2B:F3:BF:47:99:17:9D:F6:74:CD:FB:0D
X509v3 Authority Key Identifier:
keyid:1D:F9:C0:CE:F9:A7:7D:CD:15:BB:51:F9:3F:D3:42:99:9B:E1:16:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:ae:13:54:ca:96:cd:5e:f8:55:d8:71:44:1b:94:f2:78:ae:
18:7f:d2:62:40:8e:ff:34:8b:7e:99:16:7f:ea:a9:f4:df:db:
84:af:d2:3f:dc:17:70:2b:79:df:27:d5:54:ce:0b:b3:fb:ac:
15:f6:34:81:2e:48:2e:29:73:d1:e2:4d:0b:fb:8f:85:f6:98:
d3:b0:1d:b2:5b:f0:cf:a4:a1:56:40:aa:93:73:20:4f:40:eb:
34:c4:d8:13:48:33:b8:77:14:e1:a6:3e:b3:f8:41:db:12:6a:
d5:64:7d:8a:c3:cc:54:72:02:f3:f8:b8:57:0d:23:7c:a2:af:
2e:8a:61:49:c8:2f:1a:cc:63:29:1e:8a:2b:22:e8:71:f3:dc:
68:b2:2f:16:d1:88:e0:0b:39:c3:d7:e9:07:4b:be:8b:9e:45:
ea:bb:22:03:ca:10:08:e8:61:a1:b8:f0:74:02:9f:8f:71:27:
ff:ea:7f:7c:75:ae:e4:83:91:1e:3a:7d:54:bd:d5:b1:2a:60:
fa:07:e3:fc:16:04:b3:61:0a:5b:d4:3e:87:ee:22:ae:3f:99:
63:c0:18:3c:b2:72:6c:d0:5c:fa:62:24:29:40:0e:0c:9c:63:
77:51:4a:53:47:98:02:9f:5b:de:93:d8:c2:54:1a:1e:89:8c:
18:12:15:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 17:21:30 2026 by rpki-client