
$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.mft
File: h9O9fQreBlCeuFrGullInZVAH38.mft (raw, json)
Hash identifier: ucgT5KpoKvEEL+e4OwFbEVOgBGsrQQH6HJhm3DyYOgs=
Subject key identifier: 3F:1A:FB:C9:15:D5:30:6D:C1:23:80:85:9D:24:87:49:27:B0:2F:78
Authority key identifier: 87:D3:BD:7D:0A:DE:06:50:9E:B8:5A:C6:BA:59:48:9D:95:40:1F:7F
Certificate issuer: /CN=A913AE13/serialNumber=87D3BD7D0ADE06509EB85AC6BA59489D95401F7F
Certificate serial: 0599
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.mft
Manifest number: 0579
Signing time: Sat 28 Feb 2026 23:59:28 +0000
Manifest this update: Sat 28 Feb 2026 23:59:27 +0000
Manifest next update: Sat 07 Mar 2026 23:59:27 +0000
Files and hashes: 1: h9O9fQreBlCeuFrGullInZVAH38.crl (hash: RdE2N0/4g0GQ+J8yDePXWj24xvMqd4/xmJJSkl9ZbMU=)
2: DFC29B9EDA3311F0AF85FF988AD3641D.roa (hash: 6vV7bJ8KSGDEu0d7kmde9BadNfuzL/4Q+LSuLPLVsKY=)
3: FAD3BBFCDA3311F08928C2DC8AD3641D.roa (hash: LSwcydcz/VwSaqcJ957C8hegY3YYcQrjojQszQrjFEA=)
4: D758E96CF8FF11ED98C6D45FC4F9AE02.roa (hash: OEbvp/lXJIFZKwJ6RYCbMpkBZdrcvrzjMgZm0D+27AQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.crl
rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 23:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1433 (0x599)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913AE13, serialNumber=87D3BD7D0ADE06509EB85AC6BA59489D95401F7F
Validity
Not Before: Feb 28 23:59:27 2026 GMT
Not After : Mar 7 23:59:27 2026 GMT
Subject: CN=69a38160-812b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:88:b3:32:2d:10:5b:4a:4f:44:26:88:f5:2f:
12:3d:c5:b8:9f:e7:59:3e:9e:c5:4e:02:23:9d:87:
fa:96:a5:34:46:6c:56:16:6b:62:b6:03:dc:62:54:
c7:b1:f6:2d:ed:73:80:f0:01:56:ae:5c:5c:a7:5f:
86:a2:8a:f6:0b:49:e4:2e:7b:47:fb:51:d2:a0:95:
6c:31:1a:9e:0e:6e:d6:7b:bc:09:e3:22:7f:3b:91:
e2:ef:1e:84:91:96:85:96:8c:16:d6:ae:5c:6a:47:
59:ec:f3:95:28:89:33:eb:13:7a:7a:df:68:cc:78:
99:48:a7:cd:58:72:f9:6e:a7:3e:3f:5d:85:22:19:
59:d9:65:34:80:0c:50:8f:8e:d9:82:3e:77:7a:00:
20:9a:ee:26:fd:62:ba:bd:4c:b1:9e:3d:0e:33:42:
c8:e2:ca:a7:dc:77:14:d2:54:54:32:74:eb:30:a8:
a8:d5:8e:d9:49:b9:9d:eb:41:54:53:7f:11:b2:7e:
a4:38:a6:c6:0d:62:25:8e:63:9e:c8:37:a4:26:1b:
95:f2:cb:d8:75:56:85:b9:fd:e8:b0:14:90:61:47:
2a:76:0b:5e:e6:c8:48:c5:2c:02:78:d9:a4:1a:81:
7e:6f:30:e0:7f:5c:78:c1:b8:93:58:2c:67:f5:bd:
13:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:1A:FB:C9:15:D5:30:6D:C1:23:80:85:9D:24:87:49:27:B0:2F:78
X509v3 Authority Key Identifier:
keyid:87:D3:BD:7D:0A:DE:06:50:9E:B8:5A:C6:BA:59:48:9D:95:40:1F:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:90:8e:e4:b4:5b:7d:2d:1c:17:f0:59:06:f7:b5:89:bc:fb:
e2:93:1c:1d:62:8d:25:06:31:57:d8:cc:4b:20:9a:01:e6:a6:
6e:0c:2b:e5:45:22:17:6b:70:0f:37:d1:f2:81:68:a3:6f:56:
9c:7d:bb:4c:5b:5d:c3:f6:e3:a6:5b:ed:0c:2c:11:95:8a:e4:
27:38:03:ea:d3:5b:22:bc:f8:32:a3:26:49:00:9e:f6:1e:90:
a8:2e:12:16:dc:5f:5a:f9:49:80:1d:86:ba:d7:d7:2b:a7:5b:
8a:18:c7:c7:60:f7:ec:e5:91:04:82:ca:8e:9b:bc:28:37:d2:
46:00:a2:3d:f8:5d:a3:93:48:7a:cd:4d:9f:2e:8a:ad:d4:43:
cf:2b:56:ea:e9:75:fe:0f:c8:a0:b5:b2:89:27:c7:c9:c5:c2:
f9:23:30:5b:cf:80:7d:89:5d:55:54:a8:41:4e:f1:d1:67:9e:
42:12:81:92:e6:15:52:a0:7c:7e:bc:eb:94:cf:80:26:b1:16:
eb:ec:22:c6:dd:10:69:83:a3:86:90:49:53:30:7e:0a:26:c3:
da:27:e0:54:0d:9e:57:8e:1b:70:98:a0:bf:53:99:83:19:24:
b4:ac:d6:72:88:fc:fc:1d:02:60:c5:0b:ff:f8:db:06:8e:a7:
6a:58:1e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:30:52 2026 by rpki-client