
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186777/FDAA77200AD311EA9ADF772CC4F9AE02/rHE1BMtD6841eUt90irqe7WCPEk.mft
File: rHE1BMtD6841eUt90irqe7WCPEk.mft (raw, json)
Hash identifier: Ta8pCyhhYbh4t/aTq2ekB854UlUzjaP2HTQLmioWsLY=
Subject key identifier: E1:07:82:F2:9E:98:78:FF:15:D6:56:9D:A0:76:AC:94:28:1F:60:1A
Authority key identifier: AC:71:35:04:CB:43:EB:CE:35:79:4B:7D:D2:2A:EA:7B:B5:82:3C:49
Certificate issuer: /CN=A9186777/serialNumber=AC713504CB43EBCE35794B7DD22AEA7BB5823C49
Certificate serial: 0D26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHE1BMtD6841eUt90irqe7WCPEk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186777/FDAA77200AD311EA9ADF772CC4F9AE02/rHE1BMtD6841eUt90irqe7WCPEk.mft
Manifest number: 0D16
Signing time: Tue 18 Aug 2026 18:33:44 +0000
Manifest this update: Tue 18 Aug 2026 18:33:44 +0000
Manifest next update: Tue 25 Aug 2026 18:33:44 +0000
Files and hashes: 1: rHE1BMtD6841eUt90irqe7WCPEk.crl (hash: 8gN3t76TxLR315JH8RXX1STgg9RP9l7gh3oF1dsLTEw=)
2: 54E193E20AD511EA8397192EC4F9AE02.roa (hash: 4IWb1AIWezAKoYALmO7zIehYCtFAdvZjNhim+DfuwqE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186777/FDAA77200AD311EA9ADF772CC4F9AE02/rHE1BMtD6841eUt90irqe7WCPEk.crl
rsync://rpki.apnic.net/member_repository/A9186777/FDAA77200AD311EA9ADF772CC4F9AE02/rHE1BMtD6841eUt90irqe7WCPEk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHE1BMtD6841eUt90irqe7WCPEk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 18:33:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3366 (0xd26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186777, serialNumber=AC713504CB43EBCE35794B7DD22AEA7BB5823C49
Validity
Not Before: Aug 18 18:33:44 2026 GMT
Not After : Aug 25 18:33:44 2026 GMT
Subject: CN=6a84a588-dc60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8f:0b:9f:92:42:7c:b6:12:5d:70:86:a5:0c:
38:95:62:fa:d9:a1:df:57:f2:66:7a:0f:d0:fb:de:
bf:50:27:03:00:28:d6:a5:a9:4b:69:7f:dc:18:e5:
39:29:35:ca:8b:f5:76:dc:62:52:ef:be:40:ed:32:
68:4e:89:03:0e:d6:d3:c9:6c:f2:83:22:7b:9c:29:
14:1e:ee:23:8d:ba:bd:e8:83:b4:51:a8:51:04:64:
e9:a3:22:8a:17:ea:17:6a:d2:b2:cf:66:80:2f:29:
76:35:06:a5:9f:a7:7b:68:e4:d2:52:52:f8:92:e8:
22:04:3d:76:c0:57:63:99:3f:e2:04:e5:56:89:71:
05:16:a8:63:c0:81:11:0c:5c:47:5f:29:6a:3a:54:
6b:42:3d:fd:68:41:be:53:c7:d6:7b:d3:92:c1:6d:
b7:f3:a8:7a:37:b1:bf:bf:49:fc:b6:ea:63:ae:3d:
fc:d8:5a:89:b3:bd:12:94:21:1f:00:80:7b:23:bf:
c6:1b:c4:45:a8:4a:f9:cd:60:e2:3d:1d:93:34:98:
b4:ea:bb:63:27:88:56:31:6c:c6:23:76:15:ac:b0:
e7:88:ef:9d:39:8a:e8:23:9e:84:91:f7:75:fb:86:
fc:32:97:89:c5:8d:c1:62:cc:64:d4:8d:e7:3d:21:
ee:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:07:82:F2:9E:98:78:FF:15:D6:56:9D:A0:76:AC:94:28:1F:60:1A
X509v3 Authority Key Identifier:
keyid:AC:71:35:04:CB:43:EB:CE:35:79:4B:7D:D2:2A:EA:7B:B5:82:3C:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186777/FDAA77200AD311EA9ADF772CC4F9AE02/rHE1BMtD6841eUt90irqe7WCPEk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHE1BMtD6841eUt90irqe7WCPEk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186777/FDAA77200AD311EA9ADF772CC4F9AE02/rHE1BMtD6841eUt90irqe7WCPEk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:53:15:a4:aa:55:dc:e4:8e:9a:a7:50:cc:c2:f5:38:7f:5b:
27:45:6f:e8:13:e1:e7:00:e3:67:02:d9:33:19:ab:2a:d2:12:
1a:36:78:aa:06:3e:b0:7c:c4:1f:b0:a7:b5:ec:ae:89:ee:cb:
cb:6c:34:67:07:2f:66:6c:d4:6b:21:f7:9d:23:29:ba:79:e7:
77:6e:02:7d:a3:b2:b0:f9:46:d7:2c:a5:26:67:41:02:31:c8:
bc:3a:7a:dc:c3:a1:f7:c4:1d:b9:ca:f7:b7:69:9d:f2:57:33:
da:ed:48:53:3c:6f:72:f9:7a:32:fb:fe:03:d9:d1:84:fc:a3:
c3:f3:a3:45:66:93:93:cd:89:9a:6a:ce:9a:ef:a9:e6:70:e7:
e1:7f:d4:fd:9c:e5:5f:78:41:31:2f:ca:e2:4b:50:81:bc:2e:
0f:37:a5:5f:ef:e9:81:ba:68:7f:94:da:ff:74:d3:34:b7:2d:
eb:52:10:12:c8:7b:18:8c:90:c0:6a:97:27:3c:00:99:7b:98:
c8:0c:e5:75:b5:9c:0d:16:c5:78:9b:fd:26:62:7d:b2:8f:ad:
85:eb:22:73:14:96:d5:6e:70:8f:91:70:0d:ba:63:74:e9:47:
7c:72:6d:22:04:e4:ed:3b:1d:75:df:d8:13:be:4c:50:2e:32:
82:49:b3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:01 2026 by rpki-client