
$ rpki-client -vvf rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft
File: H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft (raw, json)
Hash identifier: xC514sLULnu3UwnNoiFUXpA390uA/PbJ7MPcxOBvrMs=
Subject key identifier: 28:BD:D4:50:5D:2B:1C:4B:3E:38:01:13:7C:7E:AE:AB:50:58:DD:C3
Authority key identifier: 1F:D5:A1:82:D5:93:34:75:70:F2:D9:18:6D:24:84:C9:09:5C:5F:FB
Certificate issuer: /CN=A912708C/serialNumber=1FD5A182D593347570F2D9186D2484C9095C5FFB
Certificate serial: 064D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9WhgtWTNHVw8tkYbSSEyQlcX_s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft
Manifest number: 0647
Signing time: Sat 28 Feb 2026 23:13:50 +0000
Manifest this update: Sat 28 Feb 2026 23:13:49 +0000
Manifest next update: Sat 07 Mar 2026 23:13:49 +0000
Files and hashes: 1: H9WhgtWTNHVw8tkYbSSEyQlcX_s.crl (hash: CcbpnsiXeKjB3qn/hZLm32XEsHFS6vIKIfI3xQIMd60=)
2: 8AA59866C55511EBA7DB557EC4F9AE02.roa (hash: Vhi1JgNRZObirmNIX1fnf2q21PbGnP/JOntHIC3xnJI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.crl
rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9WhgtWTNHVw8tkYbSSEyQlcX_s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 23:13:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1613 (0x64d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912708C, serialNumber=1FD5A182D593347570F2D9186D2484C9095C5FFB
Validity
Not Before: Feb 28 23:13:49 2026 GMT
Not After : Mar 7 23:13:49 2026 GMT
Subject: CN=69a376ae-962e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e3:c7:5d:27:26:f7:bd:02:3b:b3:56:71:7b:
64:80:b2:8b:3e:8c:9c:c8:f6:b8:98:d5:41:35:94:
cc:f6:99:13:be:ea:16:07:38:d7:df:67:6f:e7:ca:
b7:c8:6a:db:f6:8f:88:51:6c:08:72:69:bf:49:99:
5a:2f:47:fb:8f:a4:27:0e:bf:58:1a:04:11:98:14:
41:62:c3:2c:f2:d1:ae:c9:73:1d:5c:71:97:93:78:
35:6f:4b:61:6f:4d:f4:b1:bc:75:b3:e2:47:1d:87:
78:b2:b1:73:c2:bf:fa:aa:90:c2:d3:ba:19:2d:77:
57:47:40:0e:1e:8e:ae:47:7f:82:c6:a4:b5:5d:0a:
7d:b3:ef:73:c1:c8:f3:7a:25:53:f8:b3:b8:bb:f8:
36:d6:2a:0e:16:37:f1:78:a3:e6:7a:49:b8:71:74:
bb:d8:7e:4f:e9:94:cb:e2:21:6f:0f:ed:da:f9:96:
5a:bd:6b:fd:eb:cb:17:cc:b8:03:80:aa:b0:44:e0:
91:26:ac:3b:f0:cf:33:ab:33:60:21:97:d1:a2:03:
cf:25:dd:f7:23:57:b1:80:8a:f5:78:52:05:9f:58:
d5:51:ba:0b:3a:a6:89:15:05:28:6e:02:ff:0c:23:
49:77:11:87:b1:78:79:67:b2:9b:3d:03:d8:4d:b7:
18:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:BD:D4:50:5D:2B:1C:4B:3E:38:01:13:7C:7E:AE:AB:50:58:DD:C3
X509v3 Authority Key Identifier:
keyid:1F:D5:A1:82:D5:93:34:75:70:F2:D9:18:6D:24:84:C9:09:5C:5F:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9WhgtWTNHVw8tkYbSSEyQlcX_s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:58:77:7f:45:8e:64:b6:32:ca:c4:63:3a:75:55:0e:85:bc:
a3:d2:4c:d1:0f:71:80:1a:71:57:9f:2e:e5:35:21:22:74:87:
3d:b7:ec:3f:b8:a9:f7:46:0d:09:be:43:82:a0:58:49:2f:77:
45:f7:59:2d:cf:c2:8e:33:de:96:56:0e:ca:71:df:93:8b:a4:
3c:14:55:30:20:b8:aa:bf:e5:6a:78:bc:47:dd:d2:4c:f8:1c:
32:a2:01:d3:35:f8:05:1d:ac:4e:ca:1c:ad:0e:a0:8e:0d:bc:
b7:8f:10:e0:65:4b:1e:f2:d6:f4:53:1f:87:8d:ef:b9:6f:c7:
5d:02:fb:65:32:f0:a7:f5:12:e9:c0:5f:8e:2a:54:e5:fd:7b:
53:9c:c6:e0:b9:60:17:a9:19:68:98:6e:2c:ac:aa:c7:57:0c:
5c:73:47:cc:75:b6:c6:1a:31:20:19:3a:2a:84:06:9c:a5:04:
a3:07:da:7e:c2:5e:ab:49:53:04:66:4a:63:41:e2:03:34:93:
c3:2e:cb:f0:63:d4:c4:bc:18:a5:a3:c9:ef:64:99:fc:41:c6:
46:3f:03:be:92:ad:ee:e5:68:64:8e:65:86:c6:b2:55:bf:9d:
5d:db:88:a3:c2:5c:e2:07:26:7c:c4:0c:05:79:b6:b3:9a:e3:
10:2d:ec:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:34:53 2026 by rpki-client