
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft
File: h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft (raw, json)
Hash identifier: omsZAJ9RBZhm1p6rJzJFU5/uNBprG1fyUEXXpDvwdQA=
Subject key identifier: B7:93:E7:D9:92:E9:6E:E9:9D:28:E1:2A:CC:9C:86:07:B2:C1:83:56
Authority key identifier: 87:DA:44:A4:CF:83:9C:38:81:C6:BC:38:68:3C:CD:C3:08:CA:7C:E9
Certificate issuer: /CN=A919D180/serialNumber=87DA44A4CF839C3881C6BC38683CCDC308CA7CE9
Certificate serial: 013C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9pEpM-DnDiBxrw4aDzNwwjKfOk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft
Manifest number: 012A
Signing time: Sat 25 Jul 2026 07:28:10 +0000
Manifest this update: Sat 25 Jul 2026 07:28:10 +0000
Manifest next update: Sat 01 Aug 2026 07:28:10 +0000
Files and hashes: 1: h9pEpM-DnDiBxrw4aDzNwwjKfOk.crl (hash: xALK+Upse38zZDV6R8NESKe37M0GOR0hv7GXYzGnkpk=)
2: 8A991E5AD6DC11EF9E9B2B15C4F9AE02.roa (hash: XNgGFgwjyc461p4JNKdvJk4zW9gJQhSshCp4+fjMbAY=)
3: C8D5160AE75E11EF97E59E40C4F9AE02.roa (hash: P4tVkKssSKb9dDeUTAtVa6Ci3IKXk3pij9DywFDumYU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.crl
rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9pEpM-DnDiBxrw4aDzNwwjKfOk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 01 Aug 2026 07:28:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 316 (0x13c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D180, serialNumber=87DA44A4CF839C3881C6BC38683CCDC308CA7CE9
Validity
Not Before: Jul 25 07:28:10 2026 GMT
Not After : Aug 1 07:28:10 2026 GMT
Subject: CN=6a64658a-0890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:28:39:67:d2:49:50:4f:67:5e:1f:04:10:1f:
36:8b:39:eb:65:97:e5:37:bc:d5:3b:ec:98:6b:f9:
24:50:d7:6b:03:d9:70:99:2e:5e:84:c5:1e:c0:a6:
36:fa:13:25:95:f4:ec:d8:1e:14:65:35:a7:f3:e3:
19:b4:e8:94:e8:ac:59:1b:60:c7:d0:9c:aa:e2:0f:
22:91:c5:4e:b3:db:e4:7c:28:70:ed:c6:4e:55:ec:
2d:11:22:46:ea:3a:16:90:cc:a5:51:87:85:5d:e9:
b7:50:23:98:ac:86:bb:db:c6:ae:67:fb:e6:e9:7c:
13:a1:55:8a:c8:75:69:29:a5:1b:eb:c2:85:53:e2:
ce:14:10:28:77:2a:25:55:29:53:31:48:d7:69:45:
92:e5:98:fa:58:bf:a1:74:c4:db:46:fe:86:77:96:
96:59:3e:a9:57:c3:54:1a:77:90:86:6e:af:d8:01:
78:01:96:ff:aa:ec:63:e7:6f:54:49:f3:ac:90:83:
45:d8:3d:62:a2:c3:76:57:b2:2e:36:6a:a3:47:86:
37:75:bc:fc:54:4a:d8:25:3f:6d:bc:02:b8:83:0a:
44:07:6f:6c:1e:b4:4a:c3:1c:11:27:39:c6:ed:29:
36:0b:66:3c:d5:35:f9:fb:6d:f0:65:f9:70:0d:a2:
73:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:93:E7:D9:92:E9:6E:E9:9D:28:E1:2A:CC:9C:86:07:B2:C1:83:56
X509v3 Authority Key Identifier:
keyid:87:DA:44:A4:CF:83:9C:38:81:C6:BC:38:68:3C:CD:C3:08:CA:7C:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9pEpM-DnDiBxrw4aDzNwwjKfOk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:08:3c:1b:3a:e6:7f:bb:7a:c7:b4:06:4c:b0:be:2c:ba:78:
a8:5a:ca:e2:12:20:6e:b6:02:17:e5:e8:30:1d:9d:b2:ad:82:
58:78:78:6f:20:b2:3b:93:0e:2f:9d:3b:e9:97:cb:67:96:d5:
bc:f2:2a:5b:c7:b2:ee:8b:57:dc:d5:4e:a9:07:39:0b:95:45:
f1:cd:9c:69:6b:a5:21:7b:0d:4d:64:9e:1d:8c:d2:7b:f8:91:
5f:e5:4d:65:71:e5:90:82:0f:2f:96:4c:fa:c3:e8:bb:f1:5d:
eb:f5:63:8c:c3:73:c3:dd:04:e7:0e:cd:72:9d:d7:42:e5:65:
f5:5c:38:e4:94:5d:a0:fb:72:eb:de:70:21:aa:65:d8:eb:4c:
15:e7:67:0d:74:a2:3a:24:49:b2:94:34:e4:f1:00:bc:cf:7d:
fe:4b:f7:b9:d4:73:05:8e:e1:b1:37:cf:ef:cf:f1:c8:08:7c:
b9:ba:8c:da:85:71:92:f0:28:61:62:51:81:01:53:be:28:03:
25:9f:6f:28:5b:8d:f2:9b:01:8b:13:f2:39:3a:f1:e4:50:42:
07:46:ad:ff:df:35:85:0c:75:dc:1b:7e:14:8e:e6:3f:da:2e:
ca:7b:1f:84:27:05:59:41:0f:9d:ab:b3:ba:e2:9e:8b:60:bb:
c0:78:a3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:37:09 2026 by rpki-client