
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186777/FDAA77200AD311EA9ADF772CC4F9AE02/rHE1BMtD6841eUt90irqe7WCPEk.mft
File: rHE1BMtD6841eUt90irqe7WCPEk.mft (raw, json)
Hash identifier: guOODdW0T/06ioQB46tcOyxhd85MmPrs/KNsiAtBEVM=
Subject key identifier: 50:C5:94:0B:61:F3:54:CE:61:36:B1:56:78:53:A1:54:48:29:FA:D4
Authority key identifier: AC:71:35:04:CB:43:EB:CE:35:79:4B:7D:D2:2A:EA:7B:B5:82:3C:49
Certificate issuer: /CN=A9186777/serialNumber=AC713504CB43EBCE35794B7DD22AEA7BB5823C49
Certificate serial: 0D09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHE1BMtD6841eUt90irqe7WCPEk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186777/FDAA77200AD311EA9ADF772CC4F9AE02/rHE1BMtD6841eUt90irqe7WCPEk.mft
Manifest number: 0CF9
Signing time: Mon 22 Jun 2026 18:20:22 +0000
Manifest this update: Mon 22 Jun 2026 18:20:22 +0000
Manifest next update: Mon 29 Jun 2026 18:20:22 +0000
Files and hashes: 1: rHE1BMtD6841eUt90irqe7WCPEk.crl (hash: CmE5Ew74h7MVqTJx36bH693zM2Ea655XggIlp9CKI3I=)
2: 54E193E20AD511EA8397192EC4F9AE02.roa (hash: 4IWb1AIWezAKoYALmO7zIehYCtFAdvZjNhim+DfuwqE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186777/FDAA77200AD311EA9ADF772CC4F9AE02/rHE1BMtD6841eUt90irqe7WCPEk.crl
rsync://rpki.apnic.net/member_repository/A9186777/FDAA77200AD311EA9ADF772CC4F9AE02/rHE1BMtD6841eUt90irqe7WCPEk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHE1BMtD6841eUt90irqe7WCPEk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 18:20:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3337 (0xd09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186777, serialNumber=AC713504CB43EBCE35794B7DD22AEA7BB5823C49
Validity
Not Before: Jun 22 18:20:22 2026 GMT
Not After : Jun 29 18:20:22 2026 GMT
Subject: CN=6a397ce6-ec0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e3:3c:ab:97:e9:2a:02:a7:8a:c2:e5:0c:a3:
02:65:9c:02:c0:15:a9:32:61:61:db:c6:42:5e:91:
6f:ed:c6:0a:72:0e:c8:f2:be:5d:4a:b3:68:a2:32:
f5:89:39:e8:1a:72:c5:79:b7:4f:d2:fa:4a:37:22:
c7:40:68:1d:e4:7c:52:41:db:af:54:76:a2:16:2c:
8a:88:e3:09:e6:d3:3e:4d:7d:f0:02:cb:e1:76:25:
32:41:f5:0b:bc:36:e4:0c:7a:33:7b:75:8a:13:ed:
cc:d9:97:d6:73:90:73:e7:eb:e7:d8:1f:55:9a:d8:
41:91:b1:26:00:4b:85:95:d7:75:c1:17:6d:08:13:
86:77:52:0e:4c:e3:44:8f:31:49:87:5d:c9:a1:86:
45:c7:02:09:b3:4d:d9:2f:5e:d4:bf:35:2a:6f:3d:
f8:00:40:9c:69:12:8c:c6:75:26:b8:4e:0e:ce:ea:
8e:13:34:85:ab:36:9a:c1:1b:c7:65:67:bb:6f:54:
5e:f4:84:bf:66:6b:6e:03:15:57:74:08:f1:2a:eb:
6b:55:5b:43:9d:99:97:49:3e:07:41:d1:ea:40:f7:
a2:9c:64:a5:8d:23:83:be:17:0e:97:14:8a:af:21:
ae:71:71:b0:85:c7:28:9f:3d:db:f5:d8:7d:8a:46:
c6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C5:94:0B:61:F3:54:CE:61:36:B1:56:78:53:A1:54:48:29:FA:D4
X509v3 Authority Key Identifier:
keyid:AC:71:35:04:CB:43:EB:CE:35:79:4B:7D:D2:2A:EA:7B:B5:82:3C:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186777/FDAA77200AD311EA9ADF772CC4F9AE02/rHE1BMtD6841eUt90irqe7WCPEk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHE1BMtD6841eUt90irqe7WCPEk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186777/FDAA77200AD311EA9ADF772CC4F9AE02/rHE1BMtD6841eUt90irqe7WCPEk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d2:b3:20:58:46:ab:45:ba:90:a1:e8:e4:1b:1b:c1:17:a0:3a:
55:a4:16:40:a4:3f:4a:9e:28:97:57:62:7e:ca:2a:d5:c1:31:
60:03:2a:f8:55:eb:54:9a:a7:02:70:c2:91:fa:6b:14:76:af:
de:fe:44:1b:1c:77:5d:b6:52:18:de:5c:00:79:a3:95:7a:a5:
ff:de:ee:14:0b:b6:1a:ca:83:91:87:45:68:65:24:97:c0:57:
d2:2f:a8:a3:51:48:3a:91:1c:c7:89:ac:82:b6:e0:dc:96:86:
d2:bf:81:05:84:15:3b:21:62:39:0b:2b:f9:6c:ab:73:01:51:
bd:34:05:af:26:1f:1a:02:4b:ab:fb:b5:06:d9:7f:c6:ee:3f:
a0:56:d9:4f:fa:6c:c9:5a:a4:77:1b:5a:32:75:70:fa:21:3c:
c1:67:b7:2c:2c:fb:26:6a:50:4c:7c:72:a7:6b:fa:94:5a:39:
ed:4c:e4:71:e2:72:18:2c:52:76:a9:36:c3:9a:ee:71:d6:f1:
75:88:b5:8a:f3:bd:4f:1f:0a:0d:9d:75:fb:0e:26:3b:e2:8e:
d6:58:42:12:cd:20:7d:3f:c9:b7:3b:9e:45:40:b0:f3:7a:9e:
cd:14:dc:79:e3:6e:f1:4b:47:57:45:da:23:7f:30:1a:6c:92:
d2:3e:07:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:24:39 2026 by rpki-client