
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft
File: hF2I4KIVFF82fZMEvz9xrujrTC0.mft (raw, json)
Hash identifier: wD0PxBXAFIlD1qRM36NWwmyeqdZYpDNuNVHTO/5MAKE=
Subject key identifier: BD:0C:4C:3B:5F:9F:54:35:4C:E8:2A:8C:FE:F0:DD:33:AC:C1:5D:4C
Authority key identifier: 84:5D:88:E0:A2:15:14:5F:36:7D:93:04:BF:3F:71:AE:E8:EB:4C:2D
Certificate issuer: /CN=A9194AE2/serialNumber=845D88E0A215145F367D9304BF3F71AEE8EB4C2D
Certificate serial: 0184
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hF2I4KIVFF82fZMEvz9xrujrTC0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft
Manifest number: 016D
Signing time: Mon 01 Jun 2026 05:36:50 +0000
Manifest this update: Mon 01 Jun 2026 05:36:49 +0000
Manifest next update: Mon 08 Jun 2026 05:36:49 +0000
Files and hashes: 1: hF2I4KIVFF82fZMEvz9xrujrTC0.crl (hash: MwenH+iz5zFoGomdC/6eMjKJPBcvCdUegF7trxDbsFQ=)
2: 2042987C6C4411EF9B263275C4F9AE02.roa (hash: 9GZpU2PHliAK9NY+OWOq5Tt+JHpwX/IWIj0455bKALU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.crl
rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hF2I4KIVFF82fZMEvz9xrujrTC0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 05:36:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 388 (0x184)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194AE2, serialNumber=845D88E0A215145F367D9304BF3F71AEE8EB4C2D
Validity
Not Before: Jun 1 05:36:49 2026 GMT
Not After : Jun 8 05:36:49 2026 GMT
Subject: CN=6a1d1a72-b1b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3c:e3:c6:99:7f:88:b8:7a:91:16:8f:1f:8e:
b3:63:9c:0a:44:39:54:83:68:87:84:dc:42:11:d6:
c2:e5:44:84:54:b3:5b:7f:d4:58:c3:d2:86:22:9a:
5f:26:5a:1b:2c:c0:a4:95:12:7a:b8:1e:e6:0b:4a:
44:d0:90:4c:54:44:47:93:7e:4c:bf:4c:f8:ae:7b:
7a:d1:a1:db:da:1a:9b:f6:2b:85:cf:f8:87:e1:6e:
ce:de:53:d3:71:ba:78:4c:e5:eb:55:a4:53:d7:61:
e2:73:2a:34:8c:62:ab:fc:db:2b:6d:23:cb:61:92:
40:42:0c:34:21:94:83:66:76:e7:e4:84:58:ed:15:
f5:0a:2c:bd:45:6f:1e:25:01:29:ce:96:85:2a:80:
93:55:a6:52:e6:46:ed:56:68:b0:c1:84:7c:f0:46:
29:42:90:be:69:e8:7e:f0:69:6b:35:c6:2d:2b:0f:
d9:68:3f:63:f0:65:ad:dc:ca:a3:d9:31:3f:65:71:
fc:0f:bf:a5:5c:f3:e6:18:ad:d3:10:65:49:a3:31:
42:54:71:89:fe:d7:8c:10:bc:ba:6e:3a:27:8b:c2:
99:27:c8:26:b3:57:50:75:e0:43:33:9d:d4:15:88:
05:46:e6:26:35:5f:82:ff:cd:c5:7c:08:cc:57:bc:
7d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0C:4C:3B:5F:9F:54:35:4C:E8:2A:8C:FE:F0:DD:33:AC:C1:5D:4C
X509v3 Authority Key Identifier:
keyid:84:5D:88:E0:A2:15:14:5F:36:7D:93:04:BF:3F:71:AE:E8:EB:4C:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hF2I4KIVFF82fZMEvz9xrujrTC0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:3f:ef:20:5f:1f:61:ff:7f:65:fb:48:ce:7d:2a:3e:1e:97:
e6:c0:52:b4:29:47:29:1b:92:81:f2:e5:0a:73:8d:fb:e9:05:
be:64:08:5a:e3:ad:41:84:d0:91:41:ef:b1:31:8b:2c:b7:c5:
ae:aa:de:b4:19:44:2b:2f:03:83:0c:80:c8:f4:62:47:4a:da:
29:4c:e1:2d:73:6b:d9:d7:60:b9:cb:e8:1d:7a:df:80:1f:a2:
8e:fd:c3:fa:14:3d:3d:d6:3b:48:be:36:23:9d:b1:eb:69:7f:
cb:e1:40:c1:b2:f1:4a:fc:cf:31:43:85:00:d5:cb:6b:4b:b2:
f3:cb:c9:9d:37:31:f7:73:85:e6:30:4d:69:a2:ea:aa:e3:0d:
64:b1:b9:ad:24:ab:80:f1:20:7d:5c:20:4a:65:07:f8:e5:73:
b4:f2:95:f0:8c:a1:71:db:97:bc:36:37:00:81:9d:10:5a:cc:
3c:33:c9:af:0c:f8:10:93:26:52:6f:87:b9:5d:13:08:6d:d9:
52:2a:22:33:96:d4:d3:ab:f3:4b:75:32:ca:0e:36:fb:87:e7:
6d:cd:a9:04:df:34:3f:72:f9:9e:44:8e:d8:d7:48:79:ef:8d:
8c:50:91:60:24:fb:24:d4:6b:a5:5b:5b:ef:76:1f:af:90:99:
a6:80:e8:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:23:29 2026 by rpki-client