
$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.mft
File: h9O9fQreBlCeuFrGullInZVAH38.mft (raw, json)
Hash identifier: 8TV2LdKDPr4GHOi1j2rsyd1ACrnMtqRsloEVAmuMwd0=
Subject key identifier: 44:9F:A5:85:70:80:9B:FE:90:86:0B:89:95:AB:6F:51:AD:95:36:F2
Authority key identifier: 87:D3:BD:7D:0A:DE:06:50:9E:B8:5A:C6:BA:59:48:9D:95:40:1F:7F
Certificate issuer: /CN=A913AE13/serialNumber=87D3BD7D0ADE06509EB85AC6BA59489D95401F7F
Certificate serial: 05EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.mft
Manifest number: 05C6
Signing time: Mon 27 Jul 2026 00:04:54 +0000
Manifest this update: Mon 27 Jul 2026 00:04:54 +0000
Manifest next update: Mon 03 Aug 2026 00:04:54 +0000
Files and hashes: 1: h9O9fQreBlCeuFrGullInZVAH38.crl (hash: SO8RKKHnv44lKstr2RMhNpAU8Rxawo7++VLZwKb18tM=)
2: DFC29B9EDA3311F0AF85FF988AD3641D.roa (hash: APVAdn0V+JjNqtnYFJXrw3vnTk5N1Az4I90CmHo6gTE=)
3: FAD3BBFCDA3311F08928C2DC8AD3641D.roa (hash: aSuiDoqVGUo9FqPyHFG/YLpJ9f8pam3kOcqDIBOTLpk=)
4: D758E96CF8FF11ED98C6D45FC4F9AE02.roa (hash: mUW7mZkRK0183V8DRL68AAx4KDMDpyr2zgUqvRvduaY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.crl
rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 00:04:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1514 (0x5ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913AE13, serialNumber=87D3BD7D0ADE06509EB85AC6BA59489D95401F7F
Validity
Not Before: Jul 27 00:04:54 2026 GMT
Not After : Aug 3 00:04:54 2026 GMT
Subject: CN=6a66a0a6-4f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:45:10:57:f7:0b:cf:a6:0f:93:a2:bb:2e:e5:
55:49:c5:be:1b:5d:24:4d:71:d7:ee:46:24:97:13:
da:05:89:ef:9e:b4:41:0a:0c:95:11:5c:a8:1b:60:
1c:42:6c:fb:11:00:e3:fc:96:a9:c3:80:d5:14:ae:
a3:c4:27:51:ff:eb:cf:90:57:e1:bd:1b:06:58:e2:
f7:6f:e8:dc:10:b9:f5:e1:bc:87:5f:f7:09:8d:d3:
aa:70:b2:18:c9:09:4d:d5:ec:78:16:72:74:65:3e:
5f:82:21:a4:ea:a3:ea:5c:86:ea:60:37:ec:f6:c7:
93:cf:f1:56:81:2f:98:7c:2c:09:3c:d3:ff:8d:95:
3f:48:6f:d5:4f:1c:61:df:d2:88:2b:dd:43:d5:1e:
f2:85:b5:a8:7d:a6:f6:93:77:e2:de:ab:d3:2a:9d:
a6:7b:ed:fd:83:bd:ea:f9:cf:92:86:aa:a7:d2:92:
c4:06:66:56:e0:28:45:bf:5c:09:26:1c:28:cb:c7:
d4:02:d8:b8:51:50:eb:55:20:d0:da:14:38:89:eb:
91:47:8e:cb:78:98:94:aa:bb:a8:a8:8d:89:fd:83:
0d:8e:22:68:e8:bd:df:47:e9:8d:4c:64:3b:60:78:
33:df:e6:5d:57:87:af:db:d1:01:41:5a:d1:02:eb:
1d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:9F:A5:85:70:80:9B:FE:90:86:0B:89:95:AB:6F:51:AD:95:36:F2
X509v3 Authority Key Identifier:
keyid:87:D3:BD:7D:0A:DE:06:50:9E:B8:5A:C6:BA:59:48:9D:95:40:1F:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:f8:d2:f2:c5:a2:81:81:ff:d7:2f:29:51:3e:09:51:0a:af:
04:71:c7:55:6c:5e:b6:c1:9d:0d:25:d7:a4:0b:ab:d5:68:21:
e4:11:7f:2f:b3:e6:dc:d9:a4:8a:91:e8:84:d4:0d:7d:5d:77:
0b:81:f4:c9:6e:62:6a:82:f7:c4:6c:b4:ef:6b:b0:49:ef:b2:
49:24:77:48:05:88:3a:31:7c:b9:c8:c6:79:2e:b0:54:70:b2:
68:f7:69:3c:88:b3:7b:4a:c2:04:83:77:08:60:9b:1f:0b:6a:
67:d4:d9:af:e9:5c:9d:80:96:b2:52:ec:14:7c:a4:f3:18:e0:
6d:19:18:74:dd:b9:e1:d4:8d:8a:7c:7c:df:e1:40:f7:4b:af:
f6:71:e3:31:24:76:c5:db:30:ad:f5:f2:bc:d5:b2:d8:e7:7e:
73:bc:9f:01:26:d4:b6:9c:aa:cf:b1:ff:0d:50:b2:2e:f4:8e:
ba:23:5b:53:2c:dc:c4:1e:f8:24:b3:94:6c:01:10:d9:b7:dd:
76:f1:86:03:f3:9f:a0:2f:db:97:8e:83:8f:1c:a5:64:a4:38:
ff:fa:5d:9b:d9:94:94:1f:af:a7:53:cc:65:9d:ff:e9:c4:2f:
12:59:43:97:96:f8:0f:24:11:ad:ea:3f:37:73:cc:f1:35:37:
1a:97:7e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:58:14 2026 by rpki-client