
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft
File: fHyggZUNrvx8VLjERpi0jo18abg.mft (raw, json)
Hash identifier: RgqmBLypg7dPg/w/AgUovn4nuO0tbqqfUb0QDNJIrtA=
Subject key identifier: 66:D1:70:53:B1:B2:74:90:C6:9D:DC:DD:42:55:66:69:61:73:78:4C
Authority key identifier: 7C:7C:A0:81:95:0D:AE:FC:7C:54:B8:C4:46:98:B4:8E:8D:7C:69:B8
Certificate issuer: /CN=A9136DD6/serialNumber=7C7CA081950DAEFC7C54B8C44698B48E8D7C69B8
Certificate serial: 1129
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft
Manifest number: 10FF
Signing time: Sat 28 Feb 2026 17:25:19 +0000
Manifest this update: Sat 28 Feb 2026 17:25:18 +0000
Manifest next update: Sat 07 Mar 2026 17:25:18 +0000
Files and hashes: 1: fHyggZUNrvx8VLjERpi0jo18abg.crl (hash: sn5lo79YlYUPkISGW7QaUzBDcVQkxRiK0l/NKohSDEs=)
2: 658A332E5C0311E999AF9478C4F9AE02.roa (hash: spf63m8gNRJTwv/m/x8ucVicuse/s8q/g6w05x87Vv0=)
3: 5FADE68E288811EE97A1EC5CC4F9AE02.roa (hash: VPFgi7xq83Y2zvMgy3bHxVN+PqEvQlUQRC0gSB0nAwc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.crl
rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 17:25:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4393 (0x1129)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136DD6, serialNumber=7C7CA081950DAEFC7C54B8C44698B48E8D7C69B8
Validity
Not Before: Feb 28 17:25:18 2026 GMT
Not After : Mar 7 17:25:18 2026 GMT
Subject: CN=69a324ff-33d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4d:c1:0a:db:ba:41:03:c4:13:74:e1:33:a2:
51:8b:77:fe:68:82:56:5b:b1:06:68:83:e9:f9:db:
cf:7e:58:dd:02:a2:0d:b6:f1:80:38:a6:b7:d9:1a:
77:90:25:19:00:6e:5c:ac:07:95:5c:15:87:91:a1:
4a:40:02:4b:32:9d:37:79:8f:31:6b:bc:4a:d1:77:
94:6c:5b:36:ae:3e:f4:5b:e3:b4:b5:f2:2b:c5:13:
74:ba:28:0a:9b:18:51:65:00:45:b7:e2:33:5f:81:
de:d3:ee:7d:2f:56:51:f6:ee:26:16:00:37:f5:d6:
43:f5:d8:fc:e8:f1:4d:57:85:78:5c:92:4e:3a:21:
a8:b3:d6:6b:1f:43:1f:48:15:50:ec:ae:65:57:4f:
fd:ab:50:92:ab:67:76:db:92:bf:34:8a:1d:50:dc:
04:f9:a2:9e:00:f2:61:7a:c5:56:33:1f:a0:ed:4b:
91:89:dd:e9:e4:aa:6b:ce:f6:9e:e8:29:93:96:0a:
5b:24:5f:a5:11:bd:44:55:06:28:01:4d:0c:88:18:
95:48:b6:ba:44:67:c7:c8:36:b0:80:c4:e1:e7:f5:
f3:a7:f2:8f:fb:6f:13:42:a9:24:d3:d1:e9:d9:25:
22:6c:30:f2:43:d7:d7:89:42:f3:6c:eb:46:e1:4d:
9b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D1:70:53:B1:B2:74:90:C6:9D:DC:DD:42:55:66:69:61:73:78:4C
X509v3 Authority Key Identifier:
keyid:7C:7C:A0:81:95:0D:AE:FC:7C:54:B8:C4:46:98:B4:8E:8D:7C:69:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:53:ea:86:81:0b:92:11:2c:93:87:9e:df:8c:27:90:1d:40:
7d:ad:a9:19:b8:28:7d:94:2e:63:5a:08:5f:c2:a6:fa:d3:08:
cc:fc:28:f6:17:4c:41:bd:92:b4:81:c4:3e:22:7b:40:f3:80:
ab:94:2b:a7:74:43:c3:98:ae:24:cc:1c:f5:c2:74:c9:0b:7a:
93:ab:15:0c:92:27:92:a1:37:10:e2:ed:90:ab:9f:40:c0:ba:
e4:1a:de:c4:c0:a8:27:8a:85:9d:25:47:14:35:ca:7d:17:d0:
ba:a0:fd:98:e3:6b:90:40:ad:a5:0c:a3:05:81:61:51:0d:b0:
3c:4c:77:a7:f6:8b:b6:60:67:1b:aa:17:67:19:f4:15:16:62:
c9:0f:c7:9b:0d:0c:b1:a1:0d:e0:5a:26:59:95:30:08:d0:37:
0b:02:31:1b:7c:cf:43:9d:aa:15:2d:7a:74:d0:bd:00:7b:0c:
11:04:b8:18:db:7a:1e:9f:5e:58:55:74:be:cf:73:ac:42:dd:
35:72:0e:ae:83:e6:35:07:03:23:df:60:4f:6e:39:34:9a:1c:
49:94:9f:61:52:06:32:93:2a:e3:f0:f7:8b:8c:fd:4b:34:c4:
7e:3b:1f:39:3a:d5:fc:03:e6:72:2b:50:02:4a:1b:50:e7:c9:
5b:de:2c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:28:54 2026 by rpki-client