
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft
File: h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft (raw, json)
Hash identifier: yj9m9g4+fD6BKLEZMns0Y3vfo96P2WK793MBDcwRVx0=
Subject key identifier: CD:B9:70:FD:6C:24:68:6D:3A:98:D1:41:9D:26:1D:22:26:22:E7:B1
Authority key identifier: 87:DA:44:A4:CF:83:9C:38:81:C6:BC:38:68:3C:CD:C3:08:CA:7C:E9
Certificate issuer: /CN=A919D180/serialNumber=87DA44A4CF839C3881C6BC38683CCDC308CA7CE9
Certificate serial: 0154
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9pEpM-DnDiBxrw4aDzNwwjKfOk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft
Manifest number: 0142
Signing time: Wed 09 Sep 2026 05:58:20 +0000
Manifest this update: Wed 09 Sep 2026 05:58:20 +0000
Manifest next update: Wed 16 Sep 2026 05:58:20 +0000
Files and hashes: 1: h9pEpM-DnDiBxrw4aDzNwwjKfOk.crl (hash: Rc96G5l8T0g2xwQ3Tamksgp4CkkE+i4ICmjpz4UyPXY=)
2: C8D5160AE75E11EF97E59E40C4F9AE02.roa (hash: P4tVkKssSKb9dDeUTAtVa6Ci3IKXk3pij9DywFDumYU=)
3: 8A991E5AD6DC11EF9E9B2B15C4F9AE02.roa (hash: XNgGFgwjyc461p4JNKdvJk4zW9gJQhSshCp4+fjMbAY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.crl
rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9pEpM-DnDiBxrw4aDzNwwjKfOk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Sep 2026 05:58:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 340 (0x154)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D180, serialNumber=87DA44A4CF839C3881C6BC38683CCDC308CA7CE9
Validity
Not Before: Sep 9 05:58:20 2026 GMT
Not After : Sep 16 05:58:20 2026 GMT
Subject: CN=6aa0f57c-d779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f0:2a:3d:87:38:38:7b:34:a7:57:12:9b:8f:
a3:ed:0b:c3:2c:77:d1:ce:aa:8f:f3:af:d2:21:fb:
de:99:8e:b6:02:18:ee:e2:33:bf:97:c0:7f:cb:32:
46:1e:86:5f:eb:4e:0a:52:df:c7:49:73:9b:71:b3:
56:89:40:e6:f3:a8:f2:3b:dc:ed:c9:d1:48:8f:18:
02:b2:07:d6:4a:83:a8:3b:e4:ff:4a:aa:00:3c:45:
72:95:12:c0:2a:30:b1:e7:2d:0e:cf:30:e6:68:aa:
1b:15:f2:78:d7:9a:d7:d1:cb:6d:fb:a4:41:bc:68:
8c:37:9c:14:fb:6a:bb:79:97:61:fd:0a:47:e2:41:
44:92:32:4d:ad:76:a4:63:b0:b3:a4:e1:00:b4:8e:
62:86:14:3a:cd:f3:d4:dc:21:97:33:e4:ce:12:20:
07:f4:30:86:4d:6b:b2:91:bf:87:d8:11:6c:e2:8d:
ad:f2:90:b5:d8:e9:fd:c5:ae:6c:83:86:1d:fb:83:
1c:cf:5f:bf:13:a4:19:bc:bf:7f:41:58:cf:90:ca:
18:9c:f9:d0:92:81:a8:76:a4:86:06:75:b9:30:50:
9d:54:27:cb:53:7c:b2:44:9d:37:e4:69:c0:37:d7:
42:c0:d3:41:50:e2:f8:3c:37:da:8b:53:f2:79:8c:
d6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B9:70:FD:6C:24:68:6D:3A:98:D1:41:9D:26:1D:22:26:22:E7:B1
X509v3 Authority Key Identifier:
keyid:87:DA:44:A4:CF:83:9C:38:81:C6:BC:38:68:3C:CD:C3:08:CA:7C:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9pEpM-DnDiBxrw4aDzNwwjKfOk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:25:4b:ab:10:80:ba:4d:2f:6d:fc:05:19:0c:8c:95:18:38:
00:de:8d:c4:43:1b:a6:48:54:9d:62:06:c3:79:89:88:61:3d:
cd:14:c5:70:8d:15:71:d2:cf:40:67:05:0d:5a:99:0c:36:8e:
7c:fe:ad:b1:73:a3:1e:b3:d0:4c:36:5e:a2:6e:60:8b:4f:c1:
8d:38:0c:dc:7d:29:8b:00:8c:53:2f:92:b2:04:66:0c:a4:7b:
3e:4a:e3:56:e7:2d:6c:4d:0b:d5:92:7a:4e:e0:4e:6b:2b:d2:
90:c3:1f:52:f6:32:42:1e:4b:95:c0:02:a4:0f:5c:04:10:67:
66:c8:a4:98:76:3b:50:64:46:75:55:d1:e5:4c:1c:06:d8:a4:
4e:c9:1e:33:c8:10:32:22:9a:2c:90:25:3f:d7:c9:3e:de:de:
8d:1c:23:f5:70:70:fe:e7:ff:1f:f5:85:90:03:3e:fd:ee:ad:
d9:32:51:fa:02:a5:29:41:d6:05:29:92:bf:22:e8:8f:bc:84:
56:af:99:16:76:55:d8:56:c4:60:8d:c3:2d:dc:91:01:ff:31:
4b:00:6e:70:3c:f4:8b:e4:9a:15:b7:00:34:03:1b:47:ae:4b:
7a:40:0d:a0:e9:ca:a6:36:69:b4:6b:f6:47:12:6e:e1:34:50:
8c:8d:3a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:57:22 2026 by rpki-client