
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.mft
File: HSpVFaipmzCyHRhxvPr9J-saEyo.mft (raw, json)
Hash identifier: 4iBRdfnZWyPQRfha/cGkbaoRuMepaQqR0v14jR7TKlo=
Subject key identifier: 9A:A0:24:46:DD:E4:92:98:29:53:03:E4:62:3E:C6:E8:36:E3:0D:D6
Authority key identifier: 1D:2A:55:15:A8:A9:9B:30:B2:1D:18:71:BC:FA:FD:27:EB:1A:13:2A
Certificate issuer: /CN=A9185B30/serialNumber=1D2A5515A8A99B30B21D1871BCFAFD27EB1A132A
Certificate serial: 0328
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSpVFaipmzCyHRhxvPr9J-saEyo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.mft
Manifest number: 0322
Signing time: Tue 23 Jun 2026 01:13:36 +0000
Manifest this update: Tue 23 Jun 2026 01:13:35 +0000
Manifest next update: Tue 30 Jun 2026 01:13:35 +0000
Files and hashes: 1: HSpVFaipmzCyHRhxvPr9J-saEyo.crl (hash: FuMDxVaHGoLTcpcQGlXEAGSCrTZTSAi3aExP+WsVsx4=)
2: D6E7D65C192E11ED927BF512C4F9AE02.roa (hash: DVr0amxAWZgoxiAH+g9huvxmF7FumJsE61KGOjDJl5E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.crl
rsync://rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSpVFaipmzCyHRhxvPr9J-saEyo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 01:13:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 808 (0x328)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185B30, serialNumber=1D2A5515A8A99B30B21D1871BCFAFD27EB1A132A
Validity
Not Before: Jun 23 01:13:35 2026 GMT
Not After : Jun 30 01:13:35 2026 GMT
Subject: CN=6a39ddc0-8596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:99:2f:8c:cc:08:07:0b:0a:13:79:45:f6:ee:
7f:70:66:8b:73:08:b0:08:62:ad:35:19:be:16:3b:
4c:4e:da:31:09:d7:70:58:ff:4e:cc:a0:5b:70:be:
7b:8b:c1:82:e9:11:a3:b6:2a:e7:9e:75:3d:b3:52:
f3:3c:34:1f:34:c9:c0:45:45:7e:81:0f:42:07:e6:
4c:ab:5a:39:74:3e:36:99:b9:8c:d3:53:90:4d:af:
3d:c6:38:a4:05:f6:19:2d:5f:c3:7f:37:f4:ec:61:
4d:02:97:96:bb:bd:25:76:7d:6d:70:4c:f7:e9:38:
8c:4e:fa:2d:ad:d9:a4:d0:be:1d:ac:4f:7a:d3:25:
f4:ed:93:d5:a3:81:8f:44:9c:8e:b7:0f:96:b7:40:
21:00:1d:3e:00:b2:c9:3c:57:54:2e:48:eb:22:6a:
54:c4:64:3c:43:07:b3:dd:14:56:29:79:05:5a:bf:
aa:16:6a:5b:1a:b1:c3:d4:a1:c8:c7:bd:29:2f:b7:
dd:16:19:60:d9:44:59:66:0d:8f:f8:f2:68:14:f1:
10:08:94:af:aa:94:fd:9f:30:7e:ab:49:08:10:46:
63:e9:50:d1:c6:25:16:e6:fd:ea:35:d5:8f:b0:c9:
6d:28:4a:7b:31:cd:79:df:34:b9:71:df:aa:93:2d:
a6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A0:24:46:DD:E4:92:98:29:53:03:E4:62:3E:C6:E8:36:E3:0D:D6
X509v3 Authority Key Identifier:
keyid:1D:2A:55:15:A8:A9:9B:30:B2:1D:18:71:BC:FA:FD:27:EB:1A:13:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSpVFaipmzCyHRhxvPr9J-saEyo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:53:c2:be:d8:0a:b6:4c:04:60:16:32:ee:49:c2:82:6a:11:
b4:0a:f0:6b:4c:e6:73:83:0b:94:83:57:3a:1c:b9:31:23:dc:
72:e6:92:27:29:33:20:ad:c6:57:8d:62:64:5f:ec:08:91:62:
17:9f:ac:a7:b5:95:56:a7:05:34:57:69:31:d2:8f:f9:09:64:
20:32:bd:c1:09:51:68:14:37:e2:c8:6e:eb:89:b2:c1:78:79:
9d:ce:28:72:16:54:73:cc:db:a3:4b:18:e8:f2:d5:9d:6e:68:
dc:f5:ed:12:fe:ba:4b:62:83:78:88:60:0b:0a:34:9a:b9:b5:
88:a3:3e:1d:64:cc:94:85:50:12:d2:79:62:13:4c:d6:8f:42:
56:50:22:c2:21:b8:7d:54:d0:a7:56:e3:3d:9b:e8:77:5e:cc:
92:f6:cb:78:7e:1f:42:99:e6:bf:89:9a:a7:81:43:ea:d8:23:
2e:8e:9c:e2:6d:74:b8:31:52:21:da:f8:0d:71:8b:a1:45:85:
b5:d2:d0:7f:33:a7:f3:ea:70:8b:c2:b7:1b:b2:62:f8:3d:ad:
e5:e2:fc:de:80:c9:46:90:fe:44:39:ad:e9:89:6b:68:77:52:
7c:11:d3:56:63:63:67:34:27:8f:07:68:6d:fd:bf:7b:6d:34:
9a:28:5d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:24:57 2026 by rpki-client