
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157705/33FAE6F440CE11EABECD676AC4F9AE02/1hg6YWfsLkpyRwcPHws5trnJU-E.mft
File: 1hg6YWfsLkpyRwcPHws5trnJU-E.mft (raw, json)
Hash identifier: sTozhaL2EaIgDb/RpIq+lTY6U1AOaxSTywMyqTHltk0=
Subject key identifier: 00:8B:59:78:4C:B6:B0:97:DF:D6:D2:73:24:74:CA:3C:80:1F:95:6F
Authority key identifier: D6:18:3A:61:67:EC:2E:4A:72:47:07:0F:1F:0B:39:B6:B9:C9:53:E1
Certificate issuer: /CN=A9157705/serialNumber=D6183A6167EC2E4A7247070F1F0B39B6B9C953E1
Certificate serial: 0BF5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1hg6YWfsLkpyRwcPHws5trnJU-E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157705/33FAE6F440CE11EABECD676AC4F9AE02/1hg6YWfsLkpyRwcPHws5trnJU-E.mft
Manifest number: 0BEC
Signing time: Tue 28 Jul 2026 19:07:29 +0000
Manifest this update: Tue 28 Jul 2026 19:07:29 +0000
Manifest next update: Tue 04 Aug 2026 19:07:29 +0000
Files and hashes: 1: 1hg6YWfsLkpyRwcPHws5trnJU-E.crl (hash: LtuWe+nJruADmrnhl7BTQT8I+siP8M8pcqWINSiDIJE=)
2: E82A7D8840CE11EABBE63B6BC4F9AE02.roa (hash: 8MXVztiKKbK6wjRU2YtWDioVy4EZAGZC4gBbMApdP3U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157705/33FAE6F440CE11EABECD676AC4F9AE02/1hg6YWfsLkpyRwcPHws5trnJU-E.crl
rsync://rpki.apnic.net/member_repository/A9157705/33FAE6F440CE11EABECD676AC4F9AE02/1hg6YWfsLkpyRwcPHws5trnJU-E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1hg6YWfsLkpyRwcPHws5trnJU-E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3061 (0xbf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157705, serialNumber=D6183A6167EC2E4A7247070F1F0B39B6B9C953E1
Validity
Not Before: Jul 28 19:07:29 2026 GMT
Not After : Aug 4 19:07:29 2026 GMT
Subject: CN=6a68fdf1-907a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:db:2e:ce:46:a8:9c:db:7d:3b:0b:ed:a8:10:
b0:3c:c5:36:bf:a1:3a:b6:64:84:d0:86:fe:cb:79:
b3:1f:f5:10:69:5b:85:6d:4c:09:04:33:c7:de:7e:
d0:24:48:f8:42:7b:42:1f:59:29:11:9d:25:30:d1:
fd:b5:88:a7:89:ef:30:5f:0b:df:44:c0:09:e2:7f:
04:f4:56:f9:c1:ef:d4:46:20:b3:c4:cf:c5:62:bd:
4d:ba:36:4c:87:34:af:94:01:58:7f:83:d0:e0:68:
23:34:d6:19:b8:1e:fb:cc:0a:ee:e5:22:10:9f:1c:
20:55:1a:20:2b:f1:cf:31:03:c6:17:85:f3:9e:f1:
24:68:95:3a:c2:bc:9f:7d:25:cc:2b:eb:47:d6:40:
5a:0e:4b:3e:39:99:cd:cb:bc:3e:3e:98:13:fe:1e:
92:d1:18:bb:cc:a6:f1:29:a1:bb:8f:8d:ff:e1:f5:
12:fc:a6:3e:6c:c9:c6:50:f6:14:ba:ab:04:57:57:
ac:4f:95:7b:b6:82:71:11:3a:4d:26:13:e8:0c:ff:
fc:7e:84:d4:53:89:80:5f:ff:02:cb:0d:09:3b:de:
ed:1b:07:76:0b:8c:e9:ed:2b:e2:e4:89:2d:81:88:
c3:86:41:e0:c0:f1:de:3c:a1:ce:aa:b0:d9:f4:ee:
a1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:8B:59:78:4C:B6:B0:97:DF:D6:D2:73:24:74:CA:3C:80:1F:95:6F
X509v3 Authority Key Identifier:
keyid:D6:18:3A:61:67:EC:2E:4A:72:47:07:0F:1F:0B:39:B6:B9:C9:53:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157705/33FAE6F440CE11EABECD676AC4F9AE02/1hg6YWfsLkpyRwcPHws5trnJU-E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1hg6YWfsLkpyRwcPHws5trnJU-E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157705/33FAE6F440CE11EABECD676AC4F9AE02/1hg6YWfsLkpyRwcPHws5trnJU-E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ff:70:af:38:b1:cd:7d:6e:5e:d3:8b:df:bf:42:d6:8d:ee:
43:97:66:e2:ee:4b:af:58:a2:90:08:05:de:cd:7e:45:0e:ce:
f7:78:57:52:bb:ee:7a:03:1b:c9:f2:4b:58:36:47:ac:5f:3f:
05:93:14:9c:a7:08:74:59:00:fb:f2:9c:dc:c8:26:eb:6b:98:
4b:a8:f1:7b:44:c9:ac:50:cc:35:63:b4:4f:78:93:ff:6d:cc:
53:11:f9:4f:63:4c:ed:de:d6:c3:bc:2b:20:ef:6b:6c:bd:88:
d1:3f:a0:49:92:d7:ed:89:f5:e7:c2:3a:98:8e:22:d7:5d:ff:
48:4f:49:b5:ef:26:35:a4:ba:d0:99:a0:4f:d0:f9:dd:a6:d8:
9a:52:0a:89:6c:11:7a:a5:9f:a6:26:c0:38:7b:55:07:dd:79:
7c:66:16:47:f7:7a:69:a8:1e:3b:89:a5:ad:fb:99:22:83:e1:
ea:05:b8:cd:73:9f:96:65:cb:e9:1b:b0:eb:e9:f7:37:6d:33:
d6:da:27:a5:c0:f7:14:4f:f9:57:d8:9a:43:28:54:a0:60:20:
b6:d2:f3:73:97:70:b6:52:62:89:a1:96:06:05:e7:c0:53:17:
f5:7a:c1:41:20:31:01:bc:dc:2b:4b:e4:43:7a:db:02:a1:a4:
a3:29:ab:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:41:48 2026 by rpki-client