
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft
File: F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft (raw, json)
Hash identifier: HshzRA25X6IDH0mZ2Dgpk7EElSrIbF2/Jj1+UhMB+YY=
Subject key identifier: 41:D2:4D:76:EF:CA:45:ED:97:7E:3F:C5:E4:65:3B:E2:D8:FC:A2:54
Authority key identifier: 17:57:7F:1E:92:EB:33:B2:CD:E6:E4:89:C0:B9:A9:9A:2E:02:FD:A3
Certificate issuer: /CN=A9148C7B/serialNumber=17577F1E92EB33B2CDE6E489C0B9A99A2E02FDA3
Certificate serial: 35E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft
Manifest number: 3598
Signing time: Fri 12 Jun 2026 14:45:30 +0000
Manifest this update: Fri 12 Jun 2026 14:45:30 +0000
Manifest next update: Fri 19 Jun 2026 14:45:30 +0000
Files and hashes: 1: F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl (hash: 9FL/o3CFx37jRb+mOrK/owA3p8lh7nClzkUyEu3xk8M=)
2: 7165DB28E2C911EF8A1C1514C4F9AE02.roa (hash: pcuAAC+IUpsYuzJSHTVcRBBHLD10GWUF30W0iZ2kHRM=)
3: 8F40C09ACCDB11EE9490B979C4F9AE02.roa (hash: reaXyWDA2ljuxsntm0i6DnDHoaBzJzPoCC4N+GYDna4=)
4: 0AD382BA3AC211F08E4A722CC4F9AE02.roa (hash: 4UkZmGMtMgidHUh2uNVdZrHG6v8E7JRiip06TQCEA/o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl
rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 14:45:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13797 (0x35e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148C7B, serialNumber=17577F1E92EB33B2CDE6E489C0B9A99A2E02FDA3
Validity
Not Before: Jun 12 14:45:30 2026 GMT
Not After : Jun 19 14:45:30 2026 GMT
Subject: CN=6a2c1b8a-d010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1b:c1:4a:4c:e8:f1:d8:c0:e9:98:92:d3:ea:
3e:d5:2f:b9:c1:ec:e2:95:91:96:ad:ae:78:b8:b5:
4a:f5:45:63:46:45:19:78:39:7c:72:7a:25:14:e9:
74:dc:c0:e4:2a:b9:66:03:c5:6d:5b:89:65:63:b4:
e3:59:46:a6:4f:6a:78:d3:f6:70:16:b6:fe:68:74:
65:42:6e:1d:42:15:cf:b1:21:c4:26:8c:04:b1:a3:
52:4d:70:df:fd:53:42:12:c2:21:f5:02:7e:73:7f:
0a:21:33:8b:08:77:27:30:39:c6:83:0e:c5:f9:74:
50:5d:24:f2:67:db:c6:86:03:f6:3c:3b:3a:ae:e1:
52:56:62:8a:28:2d:a5:cc:b9:37:8d:be:3e:f3:08:
93:a8:c0:36:ab:54:0b:80:17:8d:f4:d2:66:c5:17:
e0:c4:22:69:d1:4f:76:61:99:3d:a9:4b:ba:3c:9f:
ae:6e:d7:ab:3b:f7:8b:be:f4:8b:7a:a7:9b:29:27:
c1:03:c9:cd:f0:81:3f:53:ef:4f:df:31:da:2d:61:
97:31:d6:66:1b:5c:16:5a:68:c2:71:1c:47:f6:b3:
6c:32:77:3f:03:d9:4c:85:9e:b2:83:96:7f:83:ae:
ba:12:3f:ed:a3:a0:11:0b:a0:64:1d:20:46:0b:0d:
2d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D2:4D:76:EF:CA:45:ED:97:7E:3F:C5:E4:65:3B:E2:D8:FC:A2:54
X509v3 Authority Key Identifier:
keyid:17:57:7F:1E:92:EB:33:B2:CD:E6:E4:89:C0:B9:A9:9A:2E:02:FD:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:f0:e8:5a:25:f3:fd:b0:90:6b:6a:92:30:0a:93:9b:04:f6:
91:9a:34:a2:45:33:73:97:0d:8e:77:49:f3:73:be:99:99:a6:
07:ba:9a:38:33:09:9c:81:0c:d5:ac:7a:de:7d:1b:22:c2:4e:
f0:f2:40:93:86:5c:36:a7:c6:96:08:0d:c7:95:7e:38:f7:51:
3e:17:aa:96:e4:85:0a:75:6e:a2:2b:ce:16:ff:c0:9b:01:3f:
45:13:6f:4c:88:ca:dd:2e:8e:99:0a:9a:c5:a2:4a:6b:5d:06:
66:d4:f4:c7:bd:22:60:95:f8:ae:cb:8c:ef:a2:1b:6f:ea:53:
05:57:dc:2b:2b:80:f7:b9:e4:28:93:6e:2c:9b:20:25:5d:b6:
06:ed:6c:87:e0:d8:5c:b8:ec:a4:1c:43:bb:7f:1f:fc:33:fc:
5c:d2:d0:26:94:45:23:57:a6:a5:03:f9:a0:74:53:60:32:59:
3a:7b:69:11:5d:b5:25:f2:8b:b9:5e:1d:e2:c3:ca:e2:04:e2:
18:02:c0:6a:52:ef:69:cf:a8:56:5f:ac:de:ea:e1:2b:8d:dd:
c6:8b:af:79:74:bd:a9:1c:cc:bc:de:a8:52:25:7a:27:87:7f:
4d:c7:db:cc:ac:83:c4:40:16:06:bf:d3:3e:7c:0a:3b:2e:35:
38:54:05:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:27:16 2026 by rpki-client