
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.mft
File: H9jsfGVHrsUq1-DgvDLPfKoiHjc.mft (raw, json)
Hash identifier: rP2QXjK8+EC101BbzCJjMkwwiat2xF2V/Jn1bPprhn8=
Subject key identifier: 79:17:6B:FE:19:34:6D:0B:FE:36:E9:80:9B:7C:66:78:97:71:90:48
Authority key identifier: 1F:D8:EC:7C:65:47:AE:C5:2A:D7:E0:E0:BC:32:CF:7C:AA:22:1E:37
Certificate issuer: /CN=A917B4DF/serialNumber=1FD8EC7C6547AEC52AD7E0E0BC32CF7CAA221E37
Certificate serial: 06E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9jsfGVHrsUq1-DgvDLPfKoiHjc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.mft
Manifest number: 06DE
Signing time: Tue 18 Aug 2026 22:35:31 +0000
Manifest this update: Tue 18 Aug 2026 22:35:30 +0000
Manifest next update: Tue 25 Aug 2026 22:35:30 +0000
Files and hashes: 1: H9jsfGVHrsUq1-DgvDLPfKoiHjc.crl (hash: C1W5Hr5af7GEc+jiB9HD7bhz1ST8SICzzovqnyW5NMo=)
2: F8CE85E2B30211EBA63AE482C4F9AE02.roa (hash: Oq+DZRLUONdiWQsPcpVZZkOJsIqLLjEOw+XElhBj3Kw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.crl
rsync://rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9jsfGVHrsUq1-DgvDLPfKoiHjc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 22:35:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1767 (0x6e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B4DF, serialNumber=1FD8EC7C6547AEC52AD7E0E0BC32CF7CAA221E37
Validity
Not Before: Aug 18 22:35:30 2026 GMT
Not After : Aug 25 22:35:30 2026 GMT
Subject: CN=6a84de33-1495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:83:0b:ae:bf:3a:d2:30:6d:cb:69:f6:d2:5e:
0f:b4:3b:1d:f1:a7:bc:f0:ba:84:9e:90:d4:09:b0:
b9:c8:7d:b4:84:e2:87:7a:e4:3c:07:b5:a9:ed:8f:
e1:ca:27:71:47:ef:8f:27:6c:41:9e:18:a2:d6:35:
af:dd:d9:db:c9:43:7d:e4:4c:d7:0f:91:93:ae:8b:
8d:cc:fc:2e:5e:ef:ce:55:12:00:2f:26:b9:b7:95:
1e:da:ac:9e:7a:04:80:3d:78:06:34:a6:eb:97:d9:
a3:87:69:5b:56:54:ea:57:e6:a4:3d:85:07:98:e8:
2f:9c:99:d4:9d:f2:49:c8:cf:13:0a:6b:8e:5b:7b:
3a:c1:7b:97:4f:e0:82:bb:9a:40:f3:75:12:cd:f2:
4a:54:13:56:64:bc:d5:9a:d0:8b:a7:4a:c5:60:15:
db:02:2e:92:bb:29:40:f9:c0:5d:9d:6d:06:8b:66:
01:50:fd:bd:77:17:97:84:19:4b:fa:6b:dc:89:71:
66:fe:4c:ef:69:d8:5d:7e:f4:a5:c9:ce:26:42:cd:
a6:85:d4:89:8a:7a:45:ed:2d:2a:80:21:ed:18:07:
b7:87:77:bd:30:a8:97:91:6a:2e:90:a2:69:77:03:
40:78:cc:39:38:50:c3:a6:3b:e5:52:7f:c4:97:74:
33:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:17:6B:FE:19:34:6D:0B:FE:36:E9:80:9B:7C:66:78:97:71:90:48
X509v3 Authority Key Identifier:
keyid:1F:D8:EC:7C:65:47:AE:C5:2A:D7:E0:E0:BC:32:CF:7C:AA:22:1E:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9jsfGVHrsUq1-DgvDLPfKoiHjc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:82:25:75:be:d8:d8:0d:74:f7:a3:68:e4:7d:4d:cc:e9:11:
52:fd:30:01:74:ca:35:6e:fb:4a:53:91:13:fd:74:5a:fa:7d:
b9:d0:50:af:81:71:1d:f2:1a:b4:02:82:82:7f:85:0c:74:2a:
64:79:0f:18:8e:fd:62:33:dc:62:3a:60:a3:9e:e7:93:42:b6:
f5:53:71:8a:06:60:0a:77:5f:ac:ce:86:43:8b:a9:e3:9e:f0:
81:71:66:f0:ff:89:bc:e9:ed:66:2f:1e:71:e3:9f:e6:f9:2e:
e6:f9:9e:09:2d:de:6a:f0:3d:41:0c:11:4c:d3:1c:90:1e:13:
25:8e:fd:4a:a1:8e:f4:8f:d2:1a:92:b7:35:02:cd:b7:ed:84:
76:ff:ab:cf:9e:db:37:43:92:f7:3e:a2:f0:16:9a:90:98:8e:
81:4a:01:92:f3:cf:92:d7:a3:13:c2:85:be:9c:77:0b:c4:87:
70:16:73:6a:ac:48:de:df:3b:2f:d7:ff:7e:48:9c:69:22:32:
09:2d:f0:cf:4e:1e:f4:a4:e9:97:6c:f0:8f:85:b4:7d:c8:77:
80:ce:c5:d4:a0:b5:2b:d7:f5:cd:73:87:0d:6b:b8:86:f3:21:
3c:8f:ae:ab:ff:2b:50:d4:00:e8:04:81:6f:83:d3:23:83:9a:
53:3b:81:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:43:47 2026 by rpki-client