
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft
File: HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft (raw, json)
Hash identifier: UIx9q2W1j7X3yoMD9RKEN4gMuQcofTeyn1DayH+ZFOM=
Subject key identifier: B2:E0:E0:74:EB:3E:B5:1A:1F:3C:8C:17:E1:8E:0B:6E:BC:A1:2F:A5
Authority key identifier: 1D:F9:C0:CE:F9:A7:7D:CD:15:BB:51:F9:3F:D3:42:99:9B:E1:16:58
Certificate issuer: /CN=A9178C1E/serialNumber=1DF9C0CEF9A77DCD15BB51F93FD342999BE11658
Certificate serial: 01C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft
Manifest number: 01BF
Signing time: Wed 17 Jun 2026 04:03:27 +0000
Manifest this update: Wed 17 Jun 2026 04:03:26 +0000
Manifest next update: Wed 24 Jun 2026 04:03:26 +0000
Files and hashes: 1: HfnAzvmnfc0Vu1H5P9NCmZvhFlg.crl (hash: u1w5buxLaA33ERH0trqfTa4ydgjAtSy/xkSgXue6LjI=)
2: 4AFD4994CDD011EEA5534481C4F9AE02.roa (hash: LectFDdTSMn7loXlQ2Wf7gPQucdUaSBxJzRdeIEEXm4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.crl
rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Jun 2026 01:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 454 (0x1c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178C1E, serialNumber=1DF9C0CEF9A77DCD15BB51F93FD342999BE11658
Validity
Not Before: Jun 17 04:03:26 2026 GMT
Not After : Jun 24 04:03:26 2026 GMT
Subject: CN=6a321c8e-ded2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1b:b3:6b:9c:ff:67:6f:ce:8c:fc:94:5f:51:
ea:f1:83:c6:1d:48:93:60:8c:fd:b6:2f:b7:68:40:
c9:61:af:06:0c:ec:91:92:0d:3f:99:01:0b:89:61:
6a:b0:f1:d6:dd:09:a9:84:20:77:eb:78:17:4c:4b:
33:5b:11:a7:f3:7d:63:a0:9b:b6:64:5c:3f:c0:c7:
ac:0c:6a:10:cf:d4:cd:36:f9:74:aa:7c:60:25:e8:
6c:35:5f:c9:7e:11:d3:3e:78:31:c2:b9:b9:ec:6f:
01:f9:f2:c5:e7:e3:d3:f8:8d:f7:70:26:b5:8c:09:
8a:03:16:34:74:0c:74:e8:46:76:b2:3f:49:6c:0d:
15:3a:bc:cb:80:cf:ad:fd:95:70:5d:a4:5a:4f:00:
eb:fa:d2:01:ba:92:57:d4:09:a0:9f:d3:17:8f:14:
04:7a:22:e2:f0:80:bb:6f:47:0b:a8:de:24:ed:07:
c5:5b:de:9d:55:e0:7d:52:1a:e0:00:e5:ab:62:b1:
93:64:a1:85:56:f1:32:d1:91:44:86:2a:aa:66:21:
69:f1:1b:2a:db:a4:45:df:b0:8c:ea:2d:eb:a0:26:
cb:ce:62:01:8f:d4:ab:5c:19:15:9c:09:5e:db:33:
45:fa:9e:1a:68:6f:df:d1:8f:62:84:f4:48:a4:af:
eb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E0:E0:74:EB:3E:B5:1A:1F:3C:8C:17:E1:8E:0B:6E:BC:A1:2F:A5
X509v3 Authority Key Identifier:
keyid:1D:F9:C0:CE:F9:A7:7D:CD:15:BB:51:F9:3F:D3:42:99:9B:E1:16:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:30:40:04:fa:85:c4:d0:6f:6a:ca:c6:c6:b4:68:ab:ac:7f:
6c:89:6f:a4:e5:da:b5:30:d0:98:e6:8d:ca:7c:1c:de:db:e7:
4c:54:ea:b7:39:9c:8a:5d:9b:6d:e5:38:48:34:d4:7a:e8:4d:
bc:08:9d:e9:93:4d:bc:1f:d5:29:47:8a:ea:bd:f9:7f:8e:25:
c6:b1:18:e9:dc:0d:4a:0b:1d:fa:da:26:a3:b6:5d:f8:d0:51:
33:52:9e:8e:0e:9d:7e:16:8b:41:18:68:77:78:48:2b:05:a2:
08:5f:33:8d:f7:20:f6:c6:89:e9:d2:5b:39:e3:0c:31:86:cc:
c2:30:04:80:29:91:4b:2e:04:3d:80:2c:f7:ba:1c:c2:ae:79:
f8:e1:0b:5e:56:0d:0f:06:24:cb:41:bb:1d:6e:0d:d6:be:b2:
12:a2:78:82:c6:de:09:db:a4:50:d7:bd:04:ef:ed:06:51:d9:
cc:04:af:a8:30:4d:9a:eb:cf:ad:0c:f4:45:15:4c:7e:af:03:
f8:cc:d6:61:8a:4d:5f:ff:7e:ee:86:5f:a0:34:af:ec:3c:67:
77:9c:f9:7e:44:a0:07:73:0e:25:1f:92:75:de:24:cb:d3:59:
8d:4e:e2:49:3d:ac:2b:a5:1e:55:69:e4:38:84:27:38:c0:32:
86:cb:2e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 23:07:20 2026 by rpki-client