
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft
File: fHyggZUNrvx8VLjERpi0jo18abg.mft (raw, json)
Hash identifier: vF9MkhBSVJsdvbGETgqbi81fRMUqsk/80YXbohvUVME=
Subject key identifier: A5:65:16:C8:4D:D7:A4:03:88:95:DF:C7:4F:12:1B:BC:A9:B4:1A:6A
Authority key identifier: 7C:7C:A0:81:95:0D:AE:FC:7C:54:B8:C4:46:98:B4:8E:8D:7C:69:B8
Certificate issuer: /CN=A9136DD6/serialNumber=7C7CA081950DAEFC7C54B8C44698B48E8D7C69B8
Certificate serial: 1147
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft
Manifest number: 1119
Signing time: Thu 16 Apr 2026 17:14:08 +0000
Manifest this update: Thu 16 Apr 2026 17:14:07 +0000
Manifest next update: Thu 23 Apr 2026 17:14:07 +0000
Files and hashes: 1: fHyggZUNrvx8VLjERpi0jo18abg.crl (hash: h2GI/nsT0VU5j+L2qC0OG7EnSdCtgu78+0JKxV87KF4=)
2: 658A332E5C0311E999AF9478C4F9AE02.roa (hash: BZB39lC5xOkcP/b7gbdWDXa93HHDVKpHwXaLJhvFunQ=)
3: 5FADE68E288811EE97A1EC5CC4F9AE02.roa (hash: WQc9hbcV/9/ZJvWP0KRffXJvpdZU9wVHnwh3amFuHz0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.crl
rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 17:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4423 (0x1147)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136DD6, serialNumber=7C7CA081950DAEFC7C54B8C44698B48E8D7C69B8
Validity
Not Before: Apr 16 17:14:07 2026 GMT
Not After : Apr 23 17:14:07 2026 GMT
Subject: CN=69e118df-0039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:eb:c1:64:5b:9b:3d:05:aa:21:42:6e:35:a1:
86:a4:26:3b:ec:bd:8f:e9:ce:7d:b3:0a:bc:e2:9f:
4f:18:e3:d7:f0:ec:5c:55:52:27:9d:94:6e:b3:fd:
32:73:e9:f1:cd:53:3e:58:a1:bb:3e:60:1a:ae:32:
95:ea:40:62:f9:3f:73:80:6d:6a:4c:4f:5d:ae:3f:
67:cd:a4:67:48:ec:c6:10:74:50:7c:a2:10:4d:22:
53:0b:a7:97:99:a1:74:9e:15:05:ea:53:7b:15:e0:
43:a2:66:e3:d6:f4:e9:c7:d8:92:88:29:c7:94:6e:
09:9d:90:e3:9e:70:3d:95:7f:e9:9f:79:0a:04:43:
c9:17:76:80:78:aa:5b:36:91:e8:b8:22:49:d9:e0:
af:05:17:f4:54:a4:9b:48:03:d3:8b:5f:1a:01:a1:
c2:3d:64:1c:0a:5e:f3:ab:f7:2f:1b:e6:82:3c:b9:
55:6f:62:45:fd:a1:f1:07:57:7f:d0:61:80:a0:34:
73:76:1a:d8:47:f8:dc:e4:0a:f9:9f:25:f0:6b:18:
ab:e5:4e:d8:21:2c:de:ad:51:62:2d:21:2a:d0:57:
66:49:62:23:b0:93:b8:cb:d9:42:ed:70:40:d7:3a:
9c:3b:5d:b7:43:92:75:c0:3a:5c:8e:c5:d9:8f:31:
67:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:65:16:C8:4D:D7:A4:03:88:95:DF:C7:4F:12:1B:BC:A9:B4:1A:6A
X509v3 Authority Key Identifier:
keyid:7C:7C:A0:81:95:0D:AE:FC:7C:54:B8:C4:46:98:B4:8E:8D:7C:69:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:f7:96:67:66:02:f3:92:54:5e:9d:c8:3f:07:2c:26:0b:7a:
98:9b:0f:34:18:54:9e:06:4c:5d:55:81:78:75:08:1b:b8:51:
26:c9:f4:92:66:72:fe:fe:7f:93:13:1b:05:9a:5f:c8:b6:e3:
75:0e:5d:e7:ba:29:ac:df:3c:de:0c:18:a5:4f:10:f4:8b:f5:
db:b7:7c:a4:fe:79:b9:1b:1e:15:9c:a0:23:e1:7e:53:9c:e9:
5c:84:96:2b:e5:15:a5:89:d6:f9:e1:7a:a1:90:6e:bd:25:65:
d2:ed:b0:2e:be:10:ec:5d:bc:41:84:e6:88:b2:a9:dd:c2:c3:
f8:ee:5c:6a:cb:c9:6e:98:c1:33:e0:45:1e:33:21:e0:08:cb:
09:35:53:3d:11:01:ad:f5:3d:61:c1:25:15:75:8d:20:73:2f:
aa:58:69:2d:3f:fa:87:4d:d4:8e:6d:55:8a:85:34:88:c2:8a:
60:49:d6:94:73:9c:f4:70:f5:43:82:b1:7c:74:b4:b4:e0:46:
8e:39:0a:39:53:1a:14:dc:dc:eb:e4:c3:cb:e4:c0:09:db:4a:
8b:6a:f0:44:19:0c:59:d7:fd:dc:58:2b:63:66:d1:14:15:ed:
72:0c:42:35:93:70:17:b4:6e:3a:8a:c1:67:3c:6a:cb:23:2d:
67:0e:63:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:19:42 2026 by rpki-client