
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft
File: Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft (raw, json)
Hash identifier: J3HPkiQ4LqxRSjJKvUy4UKGmK2XpITChQ7tvX2WI53I=
Subject key identifier: 63:75:51:86:C3:D8:89:68:77:04:93:2D:D3:89:62:FD:94:C7:C3:DC
Authority key identifier: 1D:EB:B7:37:1A:B9:7B:B9:F3:A9:06:EB:07:D5:91:C9:CF:38:8D:5D
Certificate issuer: /CN=A91CFA8D/serialNumber=1DEBB7371AB97BB9F3A906EB07D591C9CF388D5D
Certificate serial: 07D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Heu3Nxq5e7nzqQbrB9WRyc84jV0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft
Manifest number: 07D0
Signing time: Tue 06 Oct 2026 21:30:18 +0000
Manifest this update: Tue 06 Oct 2026 21:30:17 +0000
Manifest next update: Tue 13 Oct 2026 21:30:17 +0000
Files and hashes: 1: Heu3Nxq5e7nzqQbrB9WRyc84jV0.crl (hash: IQlILMhkf+D8wNMXZCdPZY2EJ1V8UdEXY/H3YKh43KE=)
2: 6AA36A7E564D11EB8B387024C4F9AE02.roa (hash: EjQAXg2usCcTUh9gyvVBrkzQeLYgfkd976KZ0ehXsBM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.crl
rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Heu3Nxq5e7nzqQbrB9WRyc84jV0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 21:30:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2007 (0x7d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFA8D, serialNumber=1DEBB7371AB97BB9F3A906EB07D591C9CF388D5D
Validity
Not Before: Oct 6 21:30:17 2026 GMT
Not After : Oct 13 21:30:17 2026 GMT
Subject: CN=6ac5686a-4af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c1:8d:ee:45:a7:f9:96:bb:fd:4b:bc:3b:cc:
ce:e0:13:da:7f:b4:54:7f:e4:c6:72:40:c3:f4:77:
1a:60:f2:cf:38:75:b8:a1:51:05:6a:5f:7c:2b:77:
c8:5d:94:d1:57:2b:e7:fe:eb:a7:7d:19:6c:20:9c:
c2:0f:82:a7:93:95:67:b8:bf:42:e1:73:7f:b8:ad:
e2:04:12:3f:82:49:9a:5d:24:62:b4:55:70:2d:f3:
f4:42:7e:ba:47:ae:16:51:a8:43:d9:6f:ba:a6:85:
25:7f:a2:55:83:e4:c3:eb:12:73:b7:5a:9f:cf:b6:
e7:04:5a:ab:42:0b:5b:00:3c:d6:04:71:d3:a4:15:
98:c4:2e:44:a2:ff:90:65:36:32:36:b7:83:ab:6d:
cf:bb:07:1f:08:9c:50:a1:57:5e:45:2a:9c:fe:dc:
d3:e6:e1:1c:e9:06:1d:6c:04:88:7d:92:55:bd:2e:
a7:ab:b0:b0:b9:00:ea:c7:c7:f7:48:94:28:7f:6b:
fb:e6:9c:cb:35:76:a6:c0:70:df:1e:94:5a:56:43:
41:c2:d3:48:d7:35:94:00:32:94:43:e8:ac:1a:6d:
51:34:de:57:7e:3b:7d:1a:f9:ac:c5:23:ff:b5:bd:
7a:0b:71:e1:23:7c:48:98:d5:5c:1d:ba:af:11:73:
0d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:75:51:86:C3:D8:89:68:77:04:93:2D:D3:89:62:FD:94:C7:C3:DC
X509v3 Authority Key Identifier:
keyid:1D:EB:B7:37:1A:B9:7B:B9:F3:A9:06:EB:07:D5:91:C9:CF:38:8D:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Heu3Nxq5e7nzqQbrB9WRyc84jV0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:3b:e7:30:ea:47:75:97:92:e0:f8:0e:2b:ea:d1:ff:8b:b8:
1d:59:09:0e:63:32:cf:63:90:fe:92:18:de:f7:73:27:7d:30:
5c:ed:5f:9a:48:c8:43:90:91:ac:5f:8a:ea:e3:47:58:6e:d0:
9d:45:df:a2:d0:87:d0:1a:50:7c:4b:e4:3a:77:02:42:e1:5d:
62:61:07:02:35:5a:f4:dd:55:b4:55:bd:3d:12:a0:b4:c5:cc:
96:6b:14:36:fb:8f:c9:52:78:83:06:73:c9:91:d6:50:4a:d0:
cf:d9:8e:ee:45:a3:92:f8:43:bd:6f:3e:e0:6c:ae:56:89:b4:
2e:e5:19:11:18:bc:b6:85:4f:5f:1a:d1:c3:e2:7b:1c:68:ae:
63:8b:e5:71:f9:df:0a:4f:33:b4:63:c7:e7:da:15:2b:07:18:
52:01:0b:a2:04:5b:a8:38:f1:ee:c9:45:8f:ce:9a:46:57:ba:
1e:5f:9f:ec:3e:49:26:33:a9:bc:32:51:b8:71:6f:b0:50:3a:
d9:b2:69:a8:da:f3:48:37:c3:c0:5f:c4:3d:3b:1e:57:5d:ff:
e2:73:91:4f:02:eb:45:e1:57:66:75:d1:9c:ce:62:10:1e:3e:
14:b4:ad:96:a6:62:c8:4d:b8:ae:ca:80:89:f6:07:f7:0f:f4:
7a:a8:8e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 08:49:33 2026 by rpki-client