
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft
File: HJuixf6owDTaVR_a3GKlOnoC5ds.mft (raw, json)
Hash identifier: pIzsRGIDoQc5qaNqmhXtcjT4MZFhBUI8TzLOEvpwExk=
Subject key identifier: 23:FD:F2:6F:82:76:67:19:7C:2B:04:88:D5:32:7B:AC:11:EB:DE:36
Authority key identifier: 1C:9B:A2:C5:FE:A8:C0:34:DA:55:1F:DA:DC:62:A5:3A:7A:02:E5:DB
Certificate issuer: /CN=A9193D86/serialNumber=1C9BA2C5FEA8C034DA551FDADC62A53A7A02E5DB
Certificate serial: 0A71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft
Manifest number: 0A4F
Signing time: Tue 06 Oct 2026 19:48:08 +0000
Manifest this update: Tue 06 Oct 2026 19:48:07 +0000
Manifest next update: Tue 13 Oct 2026 19:48:07 +0000
Files and hashes: 1: HJuixf6owDTaVR_a3GKlOnoC5ds.crl (hash: tAhd8d3MmWuC/wG1CPvRhUXya58tFevHR8jh5oGT8fY=)
2: 7B136C42CC8511EC8D238672C4F9AE02.roa (hash: f4XaB+bRmsoNFuDMRRMiph6D0qfKs6SQvSg9M2XJC3I=)
3: 79C02FB0CC8511EC8D238672C4F9AE02.roa (hash: PEyE0w8+UrcKJlHY3jaK16cYhVK4lg74ijcsWV2DoxU=)
4: 52FC6006A19911EA96035C38C4F9AE02.roa (hash: WcxNaiIGqzItQBb7CYbwvBMMYMGcLD8tEl0Q7aIbezo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.crl
rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 19:48:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2673 (0xa71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193D86, serialNumber=1C9BA2C5FEA8C034DA551FDADC62A53A7A02E5DB
Validity
Not Before: Oct 6 19:48:07 2026 GMT
Not After : Oct 13 19:48:07 2026 GMT
Subject: CN=6ac55078-ec4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a6:09:ec:41:65:25:8a:c1:49:6f:ec:41:e4:
bc:ce:18:bd:6d:2c:c4:2e:c1:1c:75:e6:6a:1d:e4:
0c:26:50:88:9c:73:af:71:a3:bc:a0:b8:69:03:12:
f2:31:d0:7e:46:31:7e:ea:1e:7e:6e:e3:83:b8:34:
c1:05:fa:c7:22:62:7e:15:c5:5f:90:9f:f0:62:5f:
1a:d2:4b:f2:16:cd:7d:46:ff:78:41:30:16:69:8b:
8c:bf:d4:72:e4:e2:81:68:82:1f:ae:d0:00:7a:6d:
87:56:5b:e1:09:04:1a:92:70:8e:41:f6:b4:a4:5d:
d5:bb:e4:22:e6:36:fb:90:5f:8a:7a:51:33:02:7c:
5f:84:c5:3a:74:ab:ab:a7:a1:22:77:b4:b6:ae:9f:
21:c7:6e:87:98:61:e8:1a:d1:e8:0c:54:d9:ce:7a:
ee:da:3e:d8:97:62:83:ee:f7:26:d6:1b:d1:9e:56:
cc:de:95:fa:ab:85:e2:28:e4:7b:8d:62:23:53:03:
d8:24:85:3e:10:bb:35:3f:86:80:df:e1:ce:9b:12:
2c:b4:ac:7d:04:6c:b6:e4:94:36:4c:22:4a:84:94:
82:1c:68:a1:71:ea:ae:eb:c4:04:56:ee:fb:f6:98:
ad:8b:89:dc:2d:13:b5:9d:f3:c5:32:1b:e1:b4:c2:
0a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:FD:F2:6F:82:76:67:19:7C:2B:04:88:D5:32:7B:AC:11:EB:DE:36
X509v3 Authority Key Identifier:
keyid:1C:9B:A2:C5:FE:A8:C0:34:DA:55:1F:DA:DC:62:A5:3A:7A:02:E5:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:b9:fa:fd:ef:31:e5:70:10:93:3d:6b:c1:06:c2:8b:19:87:
6d:17:6b:69:c2:22:3e:97:1b:d9:8e:60:a0:c3:c2:81:ec:3a:
29:d1:75:88:76:24:f7:9d:a5:25:c4:55:74:ce:40:ab:79:a5:
ef:88:0b:62:eb:53:89:58:ad:7c:1f:ef:c5:d1:45:74:60:56:
6a:b5:82:93:6f:39:1b:1d:ed:dd:de:5d:70:3b:06:e8:b6:47:
49:04:a8:99:f6:08:6f:c9:6d:82:ea:16:73:20:7a:d7:c9:ae:
57:7d:d1:f9:a9:f5:ac:a9:0e:a3:d9:f5:3e:ca:21:df:86:58:
f5:e8:ea:6b:2e:3c:b7:64:7d:fe:38:bf:7d:c5:61:fd:3b:a3:
0e:b5:b5:65:d0:9a:d1:2b:f7:86:c8:f2:bb:2f:33:07:1b:2b:
71:1f:27:3b:0f:af:51:a6:bc:33:5e:ba:e3:42:e9:39:fb:f5:
d7:3c:35:e4:d0:c4:11:57:df:f6:de:d4:44:59:ec:85:1b:b5:
d8:18:79:31:a8:27:61:7a:ce:ab:7b:df:e3:7e:85:e7:ab:0c:
8c:58:71:4d:5f:49:e7:be:2a:8a:ff:c7:22:d6:73:6e:0e:b0:
0f:69:51:23:d4:9e:de:ae:eb:2c:7b:98:fd:f2:7a:8f:32:0a:
ff:80:8c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 06:02:41 2026 by rpki-client