
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.mft
File: hA_W9-iR44BKfbMJ0EzoXBr3htE.mft (raw, json)
Hash identifier: HCizHqtcSdubJFGvZ0we3v7aRWz27nDTBcnLGeVE3RQ=
Subject key identifier: 43:62:EF:0D:83:87:AD:65:AE:11:D1:DD:DA:22:5D:55:12:4A:02:30
Authority key identifier: 84:0F:D6:F7:E8:91:E3:80:4A:7D:B3:09:D0:4C:E8:5C:1A:F7:86:D1
Certificate issuer: /CN=A912C8AF/serialNumber=840FD6F7E891E3804A7DB309D04CE85C1AF786D1
Certificate serial: 0137
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hA_W9-iR44BKfbMJ0EzoXBr3htE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.mft
Manifest number: 012D
Signing time: Fri 12 Jun 2026 19:16:36 +0000
Manifest this update: Fri 12 Jun 2026 19:16:35 +0000
Manifest next update: Fri 19 Jun 2026 19:16:35 +0000
Files and hashes: 1: hA_W9-iR44BKfbMJ0EzoXBr3htE.crl (hash: BaqtT1AlMot923W621iNh2TLW06UkujKRb9BeLhZfdQ=)
2: 7B73A414A81311F0A69E5E49C4F9AE02.roa (hash: CmfJtzvbUDIWlxCuJc7fM+dnWaJ+FXCzjzg3v0W8Rc4=)
3: FD4056EC7CC411F0BAFA214CC4F9AE02.roa (hash: dPEhTQP3qeAR4yGjatb5GQPGEIi2y0rBsSN9VqRiVX4=)
4: 245F176CA81311F0A8A82B85C4F9AE02.roa (hash: eX1W6sEO6qSGiwMhq2AqfocdX9JRjmM9eN6Q3NFHq5U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.crl
rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hA_W9-iR44BKfbMJ0EzoXBr3htE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 19:16:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 311 (0x137)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C8AF, serialNumber=840FD6F7E891E3804A7DB309D04CE85C1AF786D1
Validity
Not Before: Jun 12 19:16:35 2026 GMT
Not After : Jun 19 19:16:35 2026 GMT
Subject: CN=6a2c5b14-3607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:79:6f:3e:fc:9a:8e:d1:b9:e1:09:2d:63:30:
81:bc:5e:56:e1:09:08:a6:a3:a7:c2:0c:d6:dc:bf:
6a:ac:3d:5d:52:c1:e0:e5:97:de:57:6b:91:a8:42:
7f:56:d6:53:3c:a2:80:25:d7:ae:f2:af:12:91:09:
45:a0:bb:cf:8b:82:a1:9f:69:d0:17:a7:74:46:e2:
35:dd:4b:31:5c:b5:2b:d6:04:24:46:59:1b:aa:0c:
f1:ad:63:d7:ea:eb:b7:cf:cc:8a:e4:cd:84:c0:06:
5e:46:7a:bb:fb:a8:db:69:8b:14:3e:f4:13:11:aa:
49:a7:0b:84:56:4e:51:ac:57:fc:43:47:03:9c:58:
5e:c8:28:57:46:d4:8a:d8:aa:a8:bc:25:3f:05:34:
4b:6d:ac:eb:56:11:15:2a:27:13:0a:53:64:4e:9b:
e9:84:8a:d5:4d:68:18:d7:b1:20:4c:7b:c3:c9:7b:
b5:3a:a1:a8:bb:bd:ef:ae:c7:85:bc:ba:6d:54:77:
8a:95:12:db:1e:88:a4:15:28:da:fd:1f:02:d2:d6:
a9:1c:97:18:1f:95:da:b0:2f:7d:b8:81:f9:05:7a:
ec:93:8f:d7:c6:33:7f:46:8c:11:e8:97:75:c5:88:
6b:eb:37:89:e5:70:46:97:bd:25:29:56:f7:91:40:
3d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:62:EF:0D:83:87:AD:65:AE:11:D1:DD:DA:22:5D:55:12:4A:02:30
X509v3 Authority Key Identifier:
keyid:84:0F:D6:F7:E8:91:E3:80:4A:7D:B3:09:D0:4C:E8:5C:1A:F7:86:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hA_W9-iR44BKfbMJ0EzoXBr3htE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:e9:42:87:e7:63:dc:3c:32:8f:85:32:11:f8:fd:82:17:b4:
72:59:01:c4:5b:69:f3:33:5d:b3:93:e7:91:f1:ba:9e:76:69:
51:07:00:26:b3:29:55:34:2b:42:f1:d4:98:dc:73:20:7a:91:
71:6c:e8:94:63:73:f2:e4:a1:a8:93:c2:90:0a:a4:92:c1:35:
ee:09:cf:b0:04:f7:a2:56:f2:7d:30:ed:79:d0:67:77:e0:64:
69:ba:ae:14:f9:60:47:ad:ce:6f:b0:06:b2:54:e1:a0:25:94:
e3:09:3e:e8:18:6e:91:b2:ee:e5:d6:da:bc:5d:57:62:61:b4:
0d:4f:c7:c8:42:58:ee:7b:a7:7b:2b:09:ef:6a:c5:ec:4d:99:
6d:52:32:0d:82:ff:cf:54:a5:ee:12:93:e3:20:53:76:54:67:
90:13:e4:23:74:69:c6:b8:20:3b:e6:2a:f3:63:99:a8:d4:0b:
b9:37:b6:05:f3:45:9a:65:b5:fc:ed:67:8b:34:a0:bd:6e:d7:
64:c5:49:f1:3c:3b:4c:64:34:77:2f:d9:ae:f0:3e:5f:2c:1a:
d5:23:38:1d:1a:76:53:4d:2f:94:4e:f4:3e:74:95:30:31:3d:
7a:a2:ef:ab:b1:37:5d:57:4a:80:7a:ea:52:0d:ae:63:fe:a1:
b4:9f:c4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:36:06 2026 by rpki-client