
$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.mft
File: h9O9fQreBlCeuFrGullInZVAH38.mft (raw, json)
Hash identifier: ESXKKSEBZxsEp5oOyTpYavS41aRGkVOM7rZzpRkJ86M=
Subject key identifier: E7:4F:C6:9C:08:D4:F7:55:30:79:24:89:41:D5:97:70:2A:12:8B:10
Authority key identifier: 87:D3:BD:7D:0A:DE:06:50:9E:B8:5A:C6:BA:59:48:9D:95:40:1F:7F
Certificate issuer: /CN=A913AE13/serialNumber=87D3BD7D0ADE06509EB85AC6BA59489D95401F7F
Certificate serial: 05D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.mft
Manifest number: 05B0
Signing time: Fri 12 Jun 2026 23:17:01 +0000
Manifest this update: Fri 12 Jun 2026 23:17:01 +0000
Manifest next update: Fri 19 Jun 2026 23:17:01 +0000
Files and hashes: 1: h9O9fQreBlCeuFrGullInZVAH38.crl (hash: 7LbGb7hH5IsOI85IauGij8uYJT2M4agCipMqu+H+bAE=)
2: FAD3BBFCDA3311F08928C2DC8AD3641D.roa (hash: aSuiDoqVGUo9FqPyHFG/YLpJ9f8pam3kOcqDIBOTLpk=)
3: D758E96CF8FF11ED98C6D45FC4F9AE02.roa (hash: mUW7mZkRK0183V8DRL68AAx4KDMDpyr2zgUqvRvduaY=)
4: DFC29B9EDA3311F0AF85FF988AD3641D.roa (hash: APVAdn0V+JjNqtnYFJXrw3vnTk5N1Az4I90CmHo6gTE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.crl
rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 23:17:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1492 (0x5d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913AE13, serialNumber=87D3BD7D0ADE06509EB85AC6BA59489D95401F7F
Validity
Not Before: Jun 12 23:17:01 2026 GMT
Not After : Jun 19 23:17:01 2026 GMT
Subject: CN=6a2c936d-26d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:69:ef:a4:e9:60:68:89:68:42:52:18:c7:a3:
fb:0d:9f:8f:44:27:2e:00:b6:76:bb:8e:0b:be:3f:
ee:a5:fb:44:2f:d3:4f:6d:25:5c:8f:fc:1e:f1:0e:
61:2b:7b:51:fc:dd:f3:cc:50:a4:ea:f2:af:be:13:
11:e2:cd:aa:7b:06:88:5e:6f:55:b2:97:f0:76:17:
0e:ec:fc:89:c9:73:21:ae:fd:f4:56:21:c1:84:39:
65:c9:60:71:e4:d4:a2:0f:84:cc:7d:bb:6c:45:57:
3b:39:83:e3:58:1f:80:a9:7c:a6:fc:bc:33:22:ca:
ea:3e:9b:8f:92:fd:28:c7:3a:35:2e:db:9f:7d:30:
66:dd:63:1d:2d:cd:3b:de:da:e0:42:92:05:a7:1e:
98:b8:6f:01:7a:7e:57:17:45:ba:8f:dc:32:e3:7a:
ad:06:74:0a:06:1f:c3:45:99:7b:23:eb:71:9b:16:
92:0e:ed:98:28:c1:ff:2c:02:8b:b8:e0:d8:5e:a2:
17:56:a6:c4:05:f5:af:a8:9d:3a:7a:15:ac:31:1f:
6a:03:16:f6:92:f3:35:77:3d:d1:bc:12:9b:ce:2d:
70:76:9d:49:c5:bf:a4:97:39:88:4d:9a:6c:f9:44:
d3:7d:7c:46:a9:55:0d:8f:a0:f6:d3:c2:34:53:ff:
f9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:4F:C6:9C:08:D4:F7:55:30:79:24:89:41:D5:97:70:2A:12:8B:10
X509v3 Authority Key Identifier:
keyid:87:D3:BD:7D:0A:DE:06:50:9E:B8:5A:C6:BA:59:48:9D:95:40:1F:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:88:c2:87:17:98:4e:ed:32:b3:47:2e:98:1a:9c:ac:84:ff:
2a:84:c1:3e:82:72:90:ab:f1:6a:b6:ff:0b:48:dc:1d:ab:9b:
6c:cc:e2:74:54:32:95:d7:bb:55:81:b7:a9:76:72:96:43:ee:
2f:2c:9e:47:24:34:6b:ec:65:2d:2c:15:93:a5:c6:24:bf:7a:
d3:f2:38:a5:d7:36:66:2b:b4:3e:c8:6d:26:b9:7a:b5:6e:44:
21:01:ee:1c:27:a0:00:8e:17:c9:f1:89:99:00:4e:78:7d:49:
54:4d:5b:48:f7:2a:7b:1b:50:f7:2d:f9:10:02:76:c8:fe:46:
3a:7d:e6:e0:aa:82:d1:f0:1e:15:4a:20:82:e6:96:a9:13:b1:
ce:c1:f0:1a:34:92:a6:88:8d:2c:39:96:92:8b:68:f4:4e:ce:
f4:05:af:ce:72:7b:85:68:5f:35:b4:da:a1:ea:73:d9:dd:1a:
53:aa:cd:17:62:9e:9d:16:48:2a:79:31:aa:a9:5e:a7:d6:1a:
42:d7:f3:5c:db:be:b1:e6:80:71:8c:51:c3:7e:32:1b:48:40:
c0:ce:20:96:bc:85:83:26:bd:b1:5f:c7:6d:26:41:ae:31:ba:
16:9d:b9:e4:97:5e:a2:97:32:bf:27:f0:08:e7:28:1e:05:0c:
bc:c3:24:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:07:52 2026 by rpki-client