
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft
File: _hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft (raw, json)
Hash identifier: p5b1cUZVPxtzaeYvj7UHLaxomE+KS9aT1U/4YKhUq8U=
Subject key identifier: EB:FA:75:E0:61:FB:51:61:90:AB:28:65:9E:6B:A1:AD:B8:88:B4:0F
Authority key identifier: FE:19:77:8A:0D:07:BD:DB:5F:F6:B9:F0:5B:E2:D5:45:52:0E:C4:94
Certificate issuer: /CN=A9186C2F/serialNumber=FE19778A0D07BDDB5FF6B9F05BE2D545520EC494
Certificate serial: 0474
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft
Manifest number: 045F
Signing time: Mon 05 Oct 2026 00:09:32 +0000
Manifest this update: Mon 05 Oct 2026 00:09:32 +0000
Manifest next update: Mon 12 Oct 2026 00:09:32 +0000
Files and hashes: 1: _hl3ig0Hvdtf9rnwW-LVRVIOxJQ.crl (hash: 1c5NNjMoIKOzy8/g6FWVrNeepA1U3fmimOvq0SDhhrs=)
2: E0722F2EB41B11ECB8529210C4F9AE02.roa (hash: IqecsrYsQpIp/5eCM+4hpeu8TBUj8KVmWEPSTo60jis=)
3: AB3742F4B34411ECB016765EC4F9AE02.roa (hash: gYFwC5k2adNiGUC8mTnrPd2F0ktvtrVBLWYeACoVYqU=)
4: 9837349AB41E11ECAFDA1F1AC4F9AE02.roa (hash: kkADNHMGho1cJcxgujF7FqwJofNaLhAL0T7zwMKpQTE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.crl
rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 00:09:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1140 (0x474)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186C2F, serialNumber=FE19778A0D07BDDB5FF6B9F05BE2D545520EC494
Validity
Not Before: Oct 5 00:09:32 2026 GMT
Not After : Oct 12 00:09:32 2026 GMT
Subject: CN=6ac2eabc-fa47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:62:3b:41:9a:6b:06:f5:57:38:d8:4c:bd:4e:
e5:74:6a:1a:33:e3:24:5a:6e:a0:62:b7:8f:c9:88:
83:c3:a4:10:40:1d:9f:39:d6:43:9b:2e:9f:45:7d:
cb:89:ee:95:b6:65:e8:b2:bc:67:2d:ef:11:a3:81:
e5:a6:b8:5f:05:68:70:0d:bf:04:dd:b2:b5:98:47:
a6:44:99:fc:cb:a4:72:50:48:2f:e6:74:9b:4e:97:
23:8e:5f:26:7e:03:39:1b:5b:02:8d:36:2a:31:e4:
df:0e:f5:72:2b:73:f3:58:47:83:6f:34:ba:cb:e8:
0b:00:c6:dc:c1:b1:68:4a:ac:6c:75:32:30:63:56:
4a:24:4d:a9:86:1f:e2:91:35:a3:e9:f2:4e:23:31:
e4:8e:63:86:bb:0d:94:6c:3a:32:de:52:40:3c:6c:
96:a8:9a:3e:0c:f7:e1:f2:11:db:16:0f:7c:40:9c:
b3:b2:d2:8b:4a:c6:39:4a:68:98:17:0d:d2:96:d2:
ce:ca:68:21:36:9a:90:67:7d:46:ce:1d:bc:73:32:
55:2e:61:4f:11:42:4c:9e:3d:41:2d:29:aa:da:de:
db:aa:ea:ac:ed:9a:a9:12:25:9d:7a:61:fc:d7:cc:
cd:7d:e0:7b:c3:b5:2c:7e:90:54:31:d0:fa:0b:fc:
91:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:FA:75:E0:61:FB:51:61:90:AB:28:65:9E:6B:A1:AD:B8:88:B4:0F
X509v3 Authority Key Identifier:
keyid:FE:19:77:8A:0D:07:BD:DB:5F:F6:B9:F0:5B:E2:D5:45:52:0E:C4:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ee:7d:2e:24:f6:7b:a4:d2:c5:71:8e:4d:8e:d5:a8:f0:fa:
5a:f3:6a:be:17:29:c9:f8:77:92:5c:04:7e:2c:27:c5:2f:15:
76:8b:2b:db:95:c5:38:8b:ed:c8:2a:7d:dd:5a:41:53:6c:8e:
be:3b:23:56:55:f4:ae:10:11:75:01:7b:28:60:ac:23:28:e5:
18:60:76:62:5b:d4:0b:4a:22:01:93:92:a2:0c:6c:70:ee:0b:
fb:c3:e0:95:8c:2e:f5:ae:79:ce:c7:06:2c:34:6b:56:3a:54:
3b:79:d4:36:68:60:26:7d:a3:6f:6a:a3:b4:28:04:83:3c:8c:
1c:9e:fa:89:93:b3:05:18:55:88:17:a0:51:a4:bd:cf:44:d0:
1f:ca:57:67:95:8b:03:bb:ce:b6:7e:9a:48:4d:fd:d5:37:d8:
ef:a7:b6:da:26:35:71:0b:d8:80:de:69:be:90:9b:d0:db:58:
bd:0f:92:9a:0c:24:be:03:8c:af:d8:98:79:38:6e:92:c1:97:
d6:37:39:bf:3f:9e:50:11:6a:6c:51:4f:05:5d:ba:0d:46:a8:
d9:77:b5:bf:1e:81:37:ef:72:2c:1e:7f:76:20:68:9b:a5:61:
99:00:9f:7f:0b:a7:53:2b:3d:fd:a1:9b:85:3f:1c:74:fe:5b:
af:19:cf:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 09:47:14 2026 by rpki-client