
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.mft
File: hgOgrKcgSw7-1k23DeUcdboDk1U.mft (raw, json)
Hash identifier: sz3Tjbp5ur1HsgrnwkKjiXNn7C//jAVPGEFMLHus1yg=
Subject key identifier: 19:CF:E4:E5:E0:C7:63:C3:EC:81:F2:B1:6C:01:3B:22:D7:A4:04:8C
Authority key identifier: 86:03:A0:AC:A7:20:4B:0E:FE:D6:4D:B7:0D:E5:1C:75:BA:03:93:55
Certificate issuer: /CN=A9118EB2/serialNumber=8603A0ACA7204B0EFED64DB70DE51C75BA039355
Certificate serial: 0388
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgOgrKcgSw7-1k23DeUcdboDk1U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.mft
Manifest number: 036F
Signing time: Sat 13 Jun 2026 00:58:38 +0000
Manifest this update: Sat 13 Jun 2026 00:58:37 +0000
Manifest next update: Sat 20 Jun 2026 00:58:37 +0000
Files and hashes: 1: hgOgrKcgSw7-1k23DeUcdboDk1U.crl (hash: PHwtf9WW9FLtqc3eD+rbxPgAAEKF6qIIv1opZXZCH7w=)
2: 673C2B68A8BA11F096079D46C4F9AE02.roa (hash: iAesf40760Ge7OkqHg9mpMk5sp26zXObALVRo0oegXY=)
3: 208C7D2E066C11EDB31C2239C4F9AE02.roa (hash: 384lM558CG+awOCq+Jp4xJkMm0eBCvPqegdL9GG+nvU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.crl
rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgOgrKcgSw7-1k23DeUcdboDk1U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 00:58:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 904 (0x388)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118EB2, serialNumber=8603A0ACA7204B0EFED64DB70DE51C75BA039355
Validity
Not Before: Jun 13 00:58:37 2026 GMT
Not After : Jun 20 00:58:37 2026 GMT
Subject: CN=6a2cab3e-729d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:11:9c:68:90:67:42:9f:15:ee:bb:ab:46:ce:
bc:49:94:c9:29:86:4c:cf:55:e9:be:fa:a2:2b:11:
ac:75:d9:b1:56:cc:23:d2:3b:2f:98:68:ef:07:81:
ff:fa:c4:2b:e7:59:a3:c8:fc:33:83:8c:5b:34:99:
fc:a8:9a:f9:f2:7f:4f:60:33:cc:56:93:3a:c8:e9:
e2:8d:e6:49:36:ca:56:78:69:cc:61:6e:6c:3b:df:
7c:59:af:f6:fc:25:71:82:e6:9d:d0:2d:db:90:43:
58:54:9e:56:3b:ad:dd:14:61:b0:bd:35:5f:61:e9:
6f:54:1c:a6:f0:d8:2e:79:da:d5:04:5d:e3:f6:fb:
a5:81:dd:64:56:84:17:f5:c4:a3:54:ca:78:a9:aa:
d2:43:e4:6b:38:d7:79:4a:f6:44:2d:f5:a6:3c:63:
bb:c3:f9:29:e9:df:25:c8:d4:9b:e9:b0:27:17:42:
ed:83:4c:37:8c:9e:18:8e:b4:65:37:5b:11:17:b2:
82:c4:fb:8b:af:0c:cd:d6:e0:a2:21:cc:9e:85:3c:
49:79:9a:87:4d:35:cf:7c:d1:e6:8c:8f:19:2c:1b:
67:3a:5d:c5:a0:a6:f4:64:f3:8c:e5:a9:0e:c7:f8:
f0:87:70:47:40:1a:2a:a8:31:4a:8f:ec:b0:23:df:
74:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:CF:E4:E5:E0:C7:63:C3:EC:81:F2:B1:6C:01:3B:22:D7:A4:04:8C
X509v3 Authority Key Identifier:
keyid:86:03:A0:AC:A7:20:4B:0E:FE:D6:4D:B7:0D:E5:1C:75:BA:03:93:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgOgrKcgSw7-1k23DeUcdboDk1U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:c2:d1:be:7a:42:de:a4:27:ce:22:e0:d9:7f:10:14:a1:a8:
41:8f:15:8c:7a:75:a6:d2:ab:2f:3c:89:bf:4f:8b:d1:31:41:
e4:21:df:c2:31:22:f7:01:6f:5c:98:f4:8e:6a:be:a0:b9:b8:
6d:75:40:f8:49:00:40:b0:d0:16:27:ca:1f:ad:a0:c0:69:1c:
e8:ba:37:4f:50:a6:ac:c7:fc:25:db:f6:21:c7:1c:ae:06:20:
2b:cf:4e:4d:2a:db:cd:24:91:6e:db:8e:73:7b:ad:a1:37:75:
5b:fe:fa:e5:04:0e:0f:de:c9:de:b7:0a:c9:27:79:a9:3f:0b:
64:c2:51:a8:3e:ee:6c:92:05:51:db:f7:a0:e5:35:bd:12:f5:
e6:51:c4:92:9e:ea:ad:74:3d:64:6f:84:a7:da:ad:8a:20:3b:
44:d0:2e:ad:b1:d1:98:89:a6:8d:e0:8f:0f:5e:da:2d:9c:fc:
cf:57:52:5e:75:c7:4c:62:bb:ec:a9:d4:cf:14:e3:bc:ce:ad:
60:66:29:67:65:df:e0:e4:dd:60:be:7d:44:6f:d0:d1:46:32:
b8:3c:1f:ea:a9:2b:ca:fa:6c:cb:e3:67:10:5b:f2:af:55:1c:
1d:68:88:5c:07:28:a4:c3:2d:fd:5c:b2:ab:0b:88:1a:5d:a4:
64:8d:da:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:02:04 2026 by rpki-client