
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft
File: h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft (raw, json)
Hash identifier: e1iSqVpSvkOFl5J0O/FrLguyrUdUBJxouf8t8TJ6ycQ=
Subject key identifier: D4:03:2F:FC:67:C7:AB:07:40:6E:01:B4:E3:C5:31:BA:5B:1E:C5:EB
Authority key identifier: 87:DA:44:A4:CF:83:9C:38:81:C6:BC:38:68:3C:CD:C3:08:CA:7C:E9
Certificate issuer: /CN=A919D180/serialNumber=87DA44A4CF839C3881C6BC38683CCDC308CA7CE9
Certificate serial: 0126
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9pEpM-DnDiBxrw4aDzNwwjKfOk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft
Manifest number: 0114
Signing time: Thu 11 Jun 2026 08:24:56 +0000
Manifest this update: Thu 11 Jun 2026 08:24:56 +0000
Manifest next update: Thu 18 Jun 2026 08:24:56 +0000
Files and hashes: 1: h9pEpM-DnDiBxrw4aDzNwwjKfOk.crl (hash: IGrwCzmfRjv09Q3kLd/1D73Vr4nQFziH/gS9R4robtM=)
2: C8D5160AE75E11EF97E59E40C4F9AE02.roa (hash: P4tVkKssSKb9dDeUTAtVa6Ci3IKXk3pij9DywFDumYU=)
3: 8A991E5AD6DC11EF9E9B2B15C4F9AE02.roa (hash: XNgGFgwjyc461p4JNKdvJk4zW9gJQhSshCp4+fjMbAY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.crl
rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9pEpM-DnDiBxrw4aDzNwwjKfOk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 08:24:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 294 (0x126)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D180, serialNumber=87DA44A4CF839C3881C6BC38683CCDC308CA7CE9
Validity
Not Before: Jun 11 08:24:56 2026 GMT
Not After : Jun 18 08:24:56 2026 GMT
Subject: CN=6a2a70d8-1ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:18:f3:ce:d5:bf:d0:7b:4b:bf:38:8a:ea:53:
fc:85:23:8b:01:54:8b:8b:d3:34:d6:41:35:c9:97:
19:c3:4d:88:d3:d0:19:7b:e2:d6:d6:0c:b4:eb:e0:
95:94:9b:41:81:d2:0a:39:c5:c7:55:9f:36:25:60:
21:14:11:46:dd:23:42:55:f2:aa:73:68:74:0d:4d:
44:23:44:fd:5c:b3:06:2a:94:7c:b5:4a:05:22:f3:
c0:fd:c8:7a:b9:ce:d1:7c:b8:69:aa:13:49:8a:4c:
d7:68:37:99:69:cb:b2:a1:87:0d:4b:a7:79:08:3a:
03:2e:09:04:a2:a0:c1:29:47:06:f1:d8:b3:35:7c:
dd:12:e0:f4:4a:00:60:32:26:7a:b3:a7:aa:f6:16:
06:43:00:ef:cb:ab:68:ed:a7:d6:f9:09:39:39:81:
37:7d:a9:9f:51:f8:82:e7:c0:81:48:0b:ac:11:bb:
05:30:47:ed:91:57:03:0f:4d:e8:b0:0e:0f:5a:9a:
73:f2:47:98:91:dd:80:2e:8f:8c:95:92:f4:53:42:
20:5c:6a:00:29:7e:f1:dd:79:97:4c:dc:fd:d7:13:
df:e5:48:a6:99:24:05:1f:6b:1f:f1:e9:78:24:1e:
49:a9:f1:3d:47:69:bf:90:5a:ef:5a:a1:5f:df:42:
f6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:03:2F:FC:67:C7:AB:07:40:6E:01:B4:E3:C5:31:BA:5B:1E:C5:EB
X509v3 Authority Key Identifier:
keyid:87:DA:44:A4:CF:83:9C:38:81:C6:BC:38:68:3C:CD:C3:08:CA:7C:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9pEpM-DnDiBxrw4aDzNwwjKfOk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:ea:70:5b:51:22:ce:52:58:59:29:71:e6:43:d9:5e:66:0f:
71:f9:69:0b:92:e0:33:be:e3:4d:35:91:3a:f3:25:1e:5a:58:
1a:4c:4f:1a:8a:79:6d:e0:a4:b2:e1:81:d2:af:66:c3:62:dc:
37:57:5b:f4:bf:8e:e3:24:f1:ff:12:7e:fe:30:06:83:c8:fa:
f4:0a:57:de:3c:4b:a2:c3:d5:b2:66:16:92:90:6f:5a:15:44:
4e:74:35:44:2b:b1:19:8a:1e:12:78:ef:48:b8:12:11:f8:d5:
54:d3:c7:cb:56:35:3d:94:89:80:7c:09:71:a9:0f:a1:d6:c4:
bf:eb:b2:4d:4c:5a:f6:b6:46:bb:75:1f:8c:15:f1:8f:25:08:
e7:e0:3e:a0:85:a4:65:7c:26:26:e3:2d:de:83:e8:6b:f3:25:
91:51:f7:b4:39:10:96:ad:c0:a7:0b:09:e6:95:54:6e:8d:c0:
c0:ad:cd:f6:a3:27:6e:32:1d:52:61:4f:aa:cd:01:3b:cd:28:
4e:31:63:a3:d0:9a:d1:84:8a:4d:e0:22:9c:d7:00:32:0c:64:
69:51:ce:48:3b:cd:00:57:70:ae:59:d4:09:9e:5b:57:63:07:
2f:fc:d6:b0:2b:4c:40:8f:41:1f:cf:2d:14:7f:28:4e:17:ea:
a5:5f:93:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:17:37 2026 by rpki-client