
$ rpki-client -vvf rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft
File: HmeMaiF9cVsw2csi1fiE0XxWmbY.mft (raw, json)
Hash identifier: dkndUWHr6dj1xW7ub9fZlyoxVcVRwnzg/g5RMSqB9zE=
Subject key identifier: 10:6A:95:1B:96:3A:7F:DC:9C:38:97:EB:94:CD:94:F4:82:F3:EE:7D
Authority key identifier: 1E:67:8C:6A:21:7D:71:5B:30:D9:CB:22:D5:F8:84:D1:7C:56:99:B6
Certificate issuer: /CN=A9133953/serialNumber=1E678C6A217D715B30D9CB22D5F884D17C5699B6
Certificate serial: 195A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft
Manifest number: 192E
Signing time: Fri 12 Jun 2026 16:24:02 +0000
Manifest this update: Fri 12 Jun 2026 16:24:01 +0000
Manifest next update: Fri 19 Jun 2026 16:24:01 +0000
Files and hashes: 1: HmeMaiF9cVsw2csi1fiE0XxWmbY.crl (hash: YVV42h+h6XTnufskWZbbkD3O2UQbnHBcBjCpUT1BT7w=)
2: 3DC507001C8F11E9990F665CC4F9AE02.roa (hash: KNHL/L5tyBmlAfdw55D3rrTekY6agqcXrKB3/U0Q+x8=)
3: A55682E0821A11EE9104BB68C4F9AE02.roa (hash: uds8VZP/Cnzq4ik9TsZtEgZFHT8utwL0NugztHyo5wA=)
4: A2BE54D2228B11F09A2FAA12C4F9AE02.roa (hash: 3eZlHcsbneHOE1MVSFtkIXyL5kgfcrV5bb38+q+WXH4=)
5: D34372461C8D11E9B21BD858C4F9AE02.roa (hash: 0aZHDcufdZQ7dDzrjinBuGWb3k3ed9FsQLE77AphBaA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.crl
rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 16:24:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6490 (0x195a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133953, serialNumber=1E678C6A217D715B30D9CB22D5F884D17C5699B6
Validity
Not Before: Jun 12 16:24:01 2026 GMT
Not After : Jun 19 16:24:01 2026 GMT
Subject: CN=6a2c32a2-d1b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e5:bf:ca:64:ef:77:4c:5a:4c:e7:a1:54:a5:
c9:34:03:3f:9d:b6:63:8c:39:74:49:56:f8:9b:88:
ad:01:7e:7d:32:1d:ad:b3:c6:cb:75:56:b0:84:27:
92:fb:53:4c:c7:4a:94:39:b1:2b:05:d8:b3:fc:40:
c7:00:04:66:6d:00:54:53:92:0b:27:a5:d6:26:a6:
6b:8a:70:70:e8:b7:79:ea:71:f1:34:de:93:45:41:
33:90:8f:65:23:f4:10:be:cb:79:24:c0:ca:73:a8:
9e:f5:b0:4f:df:df:14:ac:2e:ee:b2:4f:22:4d:9c:
c6:77:eb:04:97:f0:b1:45:24:a0:a1:8d:0c:c9:c6:
93:f9:1e:fd:41:b0:c9:25:61:04:b2:4a:56:d7:be:
67:74:fe:35:5c:2d:65:8d:f8:a9:28:f1:59:c3:67:
64:2e:bb:fd:5d:fa:34:7a:b4:e4:95:c3:4b:6a:e2:
c3:79:5f:78:3a:9d:14:85:76:1d:49:bf:c3:0f:00:
ec:3b:18:bc:8c:a3:0f:45:a0:76:79:04:71:ea:ae:
b1:49:82:0f:c6:a3:ee:6f:12:c2:a2:e4:8b:11:50:
cd:ad:93:98:c7:f1:c3:89:9c:77:6e:92:2b:1a:69:
53:f3:8d:3f:b4:09:6a:8a:44:1c:aa:de:4e:81:73:
79:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:6A:95:1B:96:3A:7F:DC:9C:38:97:EB:94:CD:94:F4:82:F3:EE:7D
X509v3 Authority Key Identifier:
keyid:1E:67:8C:6A:21:7D:71:5B:30:D9:CB:22:D5:F8:84:D1:7C:56:99:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:79:98:cb:06:42:ac:5f:ee:64:f8:35:0e:a5:16:3b:41:93:
de:a1:ca:fc:3b:a0:14:7f:63:82:e4:bb:05:3c:74:8b:87:b2:
e8:75:ea:db:39:c8:02:dd:1c:8c:db:8d:c4:4c:e9:e8:ec:0b:
19:f6:bf:8b:6e:38:e8:80:2c:b1:cd:c4:f0:91:a0:af:ba:18:
6a:63:2e:ec:cb:5a:6c:a9:79:c0:e7:aa:01:5e:84:fd:d3:6e:
87:a6:c0:60:2f:71:e9:99:e0:d4:27:70:54:6b:ac:dc:0a:e7:
26:57:86:49:aa:30:dc:a1:ae:4e:47:05:af:05:2a:8d:59:08:
25:04:18:88:06:8b:c2:d3:99:29:f2:53:c1:da:d8:86:ba:9e:
90:61:57:60:55:ec:b8:d8:c3:0f:16:a7:5d:b9:e6:cd:01:e5:
4b:67:3f:72:03:9b:6d:29:e5:52:10:61:7e:c0:64:d4:cf:a8:
47:78:aa:50:45:b4:5d:c6:ac:28:45:5c:66:86:36:c3:35:64:
9b:95:f9:27:2a:c8:78:66:06:53:a7:ed:c7:60:08:c2:08:be:
6d:8f:a5:ab:5f:a3:9f:61:0b:4d:ba:7f:04:37:46:15:72:fc:
18:cc:16:d0:06:a9:64:37:03:34:31:4c:96:1f:d0:f8:2b:3d:
13:bc:91:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:47:32 2026 by rpki-client