
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft
File: fHyggZUNrvx8VLjERpi0jo18abg.mft (raw, json)
Hash identifier: kGtorglm8ltoZ3ZH4G+QYusmvLDbGiMVDjPhY3UtehA=
Subject key identifier: 53:68:E6:59:D2:E1:A8:96:FC:8A:64:58:17:D1:59:00:C2:73:AC:E9
Authority key identifier: 7C:7C:A0:81:95:0D:AE:FC:7C:54:B8:C4:46:98:B4:8E:8D:7C:69:B8
Certificate issuer: /CN=A9136DD6/serialNumber=7C7CA081950DAEFC7C54B8C44698B48E8D7C69B8
Certificate serial: 1164
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft
Manifest number: 1136
Signing time: Fri 12 Jun 2026 17:15:13 +0000
Manifest this update: Fri 12 Jun 2026 17:15:12 +0000
Manifest next update: Fri 19 Jun 2026 17:15:12 +0000
Files and hashes: 1: fHyggZUNrvx8VLjERpi0jo18abg.crl (hash: +UScaogO3IIPZTymP8NRlcAgHU6lNwmCW+VBwF4RuSg=)
2: 5FADE68E288811EE97A1EC5CC4F9AE02.roa (hash: WQc9hbcV/9/ZJvWP0KRffXJvpdZU9wVHnwh3amFuHz0=)
3: 658A332E5C0311E999AF9478C4F9AE02.roa (hash: BZB39lC5xOkcP/b7gbdWDXa93HHDVKpHwXaLJhvFunQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.crl
rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:15:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4452 (0x1164)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136DD6, serialNumber=7C7CA081950DAEFC7C54B8C44698B48E8D7C69B8
Validity
Not Before: Jun 12 17:15:12 2026 GMT
Not After : Jun 19 17:15:12 2026 GMT
Subject: CN=6a2c3ea1-fabe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9f:49:ca:f9:31:d8:2e:76:5a:fb:af:05:5b:
10:b8:2f:59:88:54:dc:97:c9:a8:c9:e4:c8:bb:98:
0d:4d:a0:3b:62:bd:b2:02:88:25:94:57:ad:33:64:
71:4d:4c:2a:ff:29:a1:78:3b:11:f5:cb:38:1c:21:
4d:1c:aa:d5:0e:9f:70:de:86:e7:8a:8c:86:77:02:
08:53:4c:41:48:8d:c1:41:b7:b2:22:8e:c7:57:d0:
b7:db:5d:cf:40:31:aa:3f:a9:9d:c1:9b:79:f3:16:
26:05:06:8b:b3:22:58:57:6e:dc:7e:6b:05:86:48:
7c:06:9e:07:97:0f:5f:b3:cd:2a:e8:9b:04:e2:42:
e0:d2:a9:12:bd:c4:80:a1:76:40:7f:42:d6:9e:5b:
4f:d1:ad:ca:19:55:34:32:5c:d5:10:e0:c1:44:9c:
9c:e4:f7:7a:5c:be:82:31:fc:14:d7:40:05:f6:e1:
dc:6c:9b:83:b9:92:0c:f3:b4:fd:61:34:d8:3d:10:
ce:4d:0d:15:b0:4d:02:e6:a0:6e:4b:50:c6:6f:3d:
a6:6e:ad:02:ea:67:af:b5:41:33:01:e4:7f:9f:17:
b1:5c:b6:16:6c:d7:8f:76:1f:f9:53:46:ba:ac:cd:
d3:6c:4e:d8:0e:98:47:04:be:47:da:25:42:32:02:
e7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:68:E6:59:D2:E1:A8:96:FC:8A:64:58:17:D1:59:00:C2:73:AC:E9
X509v3 Authority Key Identifier:
keyid:7C:7C:A0:81:95:0D:AE:FC:7C:54:B8:C4:46:98:B4:8E:8D:7C:69:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:e9:09:cd:da:b4:9c:17:dd:a4:19:b6:36:ea:bb:e9:3d:6b:
23:be:cf:4a:2d:f4:e2:43:dc:9e:d8:b5:ed:4f:3a:52:b6:f1:
0c:63:03:8b:ab:4a:98:6e:d2:30:03:5f:74:6b:1d:75:35:79:
e4:ec:01:79:07:b9:f1:6a:d9:d5:be:54:60:e9:27:22:dc:71:
d5:e0:09:92:88:0a:8d:79:7a:a2:71:0b:9c:e7:f6:10:ee:0e:
53:ff:34:d0:11:5b:52:55:7f:a1:33:58:3a:8b:67:23:37:f4:
c8:7a:4d:c0:a5:9a:92:25:a9:83:bb:33:9a:a4:8c:aa:69:5b:
3a:a1:1b:41:86:a3:0e:4f:f6:c3:1f:18:54:60:af:e0:44:e6:
7f:d2:60:31:98:cf:da:4e:62:39:1b:d7:35:96:56:92:e9:20:
28:8e:73:ba:a6:1a:b5:af:2a:f5:40:46:eb:c4:89:07:f2:7a:
25:d1:64:cc:7c:f3:1c:e4:b0:99:45:25:cc:92:d7:04:53:85:
9e:f6:8d:32:c6:7b:01:a7:39:86:5c:4a:4a:0f:f5:e3:57:bd:
d5:98:e3:51:4e:8f:12:d6:d3:0a:6b:d1:7c:78:38:28:71:ec:
d6:d1:12:87:4c:2d:de:19:24:96:3c:fd:ae:ae:cd:25:74:b9:
8c:c5:41:7f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzZERDYxMTAvBgNVBAUTKDdDN0NBMDgxOTUwREFFRkM3QzU0QjhDNDQ2OThCNDhF
OEQ3QzY5QjgwHhcNMjYwNjEyMTcxNTEyWhcNMjYwNjE5MTcxNTEyWjAYMRYwFAYD
VQQDEw02YTJjM2VhMS1mYWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA059Jyvkx2C52WvuvBVsQuC9ZiFTcl8moyeTIu5gNTaA7Yr2yAogllFetM2Rx
TUwq/ymheDsR9cs4HCFNHKrVDp9w3obnioyGdwIIU0xBSI3BQbeyIo7HV9C3213P
QDGqP6mdwZt58xYmBQaLsyJYV27cfmsFhkh8Bp4Hlw9fs80q6JsE4kLg0qkSvcSA
oXZAf0LWnltP0a3KGVU0MlzVEODBRJyc5Pd6XL6CMfwU10AF9uHcbJuDuZIM87T9
YTTYPRDOTQ0VsE0C5qBuS1DGbz2mbq0C6mevtUEzAeR/nxexXLYWbNePdh/5U0a6
rM3TbE7YDphHBL5H2iVCMgLncQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFNo5lnS
4aiW/IpkWBfRWQDCc6zpMB8GA1UdIwQYMBaAFHx8oIGVDa78fFS4xEaYtI6NfGm4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkRENi9EMzYyQTFDQTNC
MzcxMUU5QTAzOEFCMkFDNEY5QUUwMi9mSHlnZ1pVTnJ2eDhWTGpFUnBpMGpvMThh
YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2ZIeWdnWlVOcnZ4OFZMakVScGkwam8xOGFiZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NkRENi9EMzYyQTFDQTNCMzcxMUU5QTAzOEFCMkFDNEY5QUUwMi9mSHlnZ1pVTnJ2
eDhWTGpFUnBpMGpvMThhYmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJ+kJzdq0nBfdpBm2Nuq76T1rI77PSi304kPcnti17U86UrbxDGMDi6tKmG7S
MANfdGsddTV55OwBeQe58WrZ1b5UYOknItxx1eAJkogKjXl6onELnOf2EO4OU/80
0BFbUlV/oTNYOotnIzf0yHpNwKWakiWpg7szmqSMqmlbOqEbQYajDk/2wx8YVGCv
4ETmf9JgMZjP2k5iORvXNZZWkukgKI5zuqYata8q9UBG68SJB/J6JdFkzHzzHOSw
mUUlzJLXBFOFnvaNMsZ7Aac5hlxKSg/141e91ZjjUU6PEtbTCmvRfHg4KHHs1tES
h0wt3hkkljz9rq7NJXS5jMVBfw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:01:06 2026 by rpki-client