
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft
File: hELcRgJABgEa1c9IzX5MSLuXoR4.mft (raw, json)
Hash identifier: O9iblvVeqQX5Zi/tiClIb1/Qxxwkm0v4VhzuJgi7CSY=
Subject key identifier: 04:95:2D:C5:C4:E4:51:41:F2:26:1F:43:FD:00:36:BC:59:FA:96:4E
Authority key identifier: 84:42:DC:46:02:40:06:01:1A:D5:CF:48:CD:7E:4C:48:BB:97:A1:1E
Certificate issuer: /CN=A9153134/serialNumber=8442DC46024006011AD5CF48CD7E4C48BB97A11E
Certificate serial: 01D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft
Manifest number: 01AE
Signing time: Sat 19 Sep 2026 04:29:05 +0000
Manifest this update: Sat 19 Sep 2026 04:29:05 +0000
Manifest next update: Sat 26 Sep 2026 04:29:05 +0000
Files and hashes: 1: hELcRgJABgEa1c9IzX5MSLuXoR4.crl (hash: np9iszJIH7s2AfCi2/uoDdjRI5SHGWVRtHeW1fnz3GI=)
2: F3B36C48545411EFA3BC6B2BC4F9AE02.roa (hash: 1Yn/q//XKIoyU7nYOwYtLT8tKiEy2Qn2d2N7RVj95ek=)
3: voqlZ0tCIdMJjYS75BQF9f7yz5A.asa (hash: 8ZdqhgKkHUtits1R9vUwqzwv/XCWGUyAuC/vBQkTotg=)
4: F32DDE98545411EFA3BC6B2BC4F9AE02.roa (hash: SAEXcobn5WfR++eemr4q7u6jryaGVSo+R/HbEDcAQGY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.crl
rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 473 (0x1d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153134, serialNumber=8442DC46024006011AD5CF48CD7E4C48BB97A11E
Validity
Not Before: Sep 19 04:29:05 2026 GMT
Not After : Sep 26 04:29:05 2026 GMT
Subject: CN=6aae0f91-2f04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9a:55:b4:dd:3a:1b:61:f0:4c:ec:07:b2:8e:
41:9f:5f:19:b7:e4:21:5f:5f:36:12:fa:c2:8c:69:
ab:b7:e4:9a:87:73:b2:ec:e3:6f:0d:a2:36:10:3d:
9c:d1:16:e5:6a:29:ac:8b:6b:be:ec:d6:80:c3:0a:
f7:64:00:99:d4:5a:88:1c:23:3d:2d:36:b0:e5:41:
eb:2a:9e:6a:a5:5a:19:e9:c0:29:b7:b2:01:9e:10:
2e:a2:81:87:0b:6c:01:ca:e5:f3:36:93:39:f7:4f:
6d:a8:f1:42:fb:2c:de:10:b0:bd:0b:9e:b5:17:10:
1e:9b:a5:64:44:28:37:a3:ac:e7:c0:a0:35:5e:56:
40:b8:51:9b:7a:cf:e5:80:0e:38:31:c4:bc:80:8c:
98:a1:f8:c4:1f:60:23:af:8d:2e:24:15:48:a9:96:
18:6f:a4:c2:eb:78:ad:4c:50:f6:95:36:a1:ad:8e:
65:8d:d1:ba:98:5c:53:32:35:cd:fa:7b:a3:92:be:
59:bb:44:e6:5a:be:83:0f:71:86:4b:a4:d8:3d:0e:
98:fd:4c:ba:45:f4:7b:8f:17:9b:9b:de:07:68:e5:
40:c7:62:3b:da:51:2a:7e:ea:b3:42:78:a6:a4:01:
c6:a6:6c:94:ba:eb:83:8e:ef:26:94:88:97:b5:35:
b8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:95:2D:C5:C4:E4:51:41:F2:26:1F:43:FD:00:36:BC:59:FA:96:4E
X509v3 Authority Key Identifier:
keyid:84:42:DC:46:02:40:06:01:1A:D5:CF:48:CD:7E:4C:48:BB:97:A1:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:ea:73:12:20:80:ff:44:23:c8:e4:82:e7:52:b5:ba:55:85:
1e:e7:d7:65:a4:c6:2c:84:4d:a0:20:6f:76:4e:58:74:31:98:
bf:01:d1:5f:ae:e1:08:50:e9:b5:b3:d2:c3:1c:8b:e3:57:8f:
76:85:08:aa:9f:d8:9f:8f:62:78:ca:6e:5f:2d:f9:a8:e3:ea:
0e:aa:ff:d9:a4:69:27:ef:49:ad:d4:1f:d9:d4:3e:78:f8:6d:
73:c8:31:b2:61:21:cf:9f:61:e9:6e:01:ae:47:de:50:65:de:
ee:79:fd:b0:f2:7a:34:22:0c:1f:57:6d:62:97:1c:84:8f:1c:
a2:c8:7f:4b:d0:79:07:72:6f:c8:af:77:ca:99:c2:06:9f:69:
9f:96:fc:5b:78:0e:ea:56:70:62:e3:6e:4d:29:95:e3:fe:c9:
0b:02:be:48:64:64:fa:3f:10:0e:c3:2a:f2:bf:d0:9f:6e:de:
99:b8:bd:43:73:da:16:ee:f8:84:ec:b2:63:12:89:07:05:b0:
9f:47:32:31:1b:22:27:1c:ff:16:88:f3:87:21:8c:0b:57:4b:
75:94:59:72:8b:36:ac:3c:27:dc:4c:0f:c8:b2:d4:0a:40:94:
43:f0:3c:0b:96:d9:39:22:91:3d:b2:c9:13:13:25:0e:bc:29:
df:c5:e0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 15:58:21 2026 by rpki-client