
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158059/BBD81DA89CC111EBBFDE6579C4F9AE02/H3amlEQsq0PX0XzW_fmpfgt_qo4.mft
File: H3amlEQsq0PX0XzW_fmpfgt_qo4.mft (raw, json)
Hash identifier: 5NbKvI4RaAnJMZ7LTAd3iuU+b6jpPaMCNgewuvlob1E=
Subject key identifier: F9:FD:D6:B1:2C:92:5B:91:A1:64:20:6A:81:CC:B1:F3:27:99:F0:67
Authority key identifier: 1F:76:A6:94:44:2C:AB:43:D7:D1:7C:D6:FD:F9:A9:7E:0B:7F:AA:8E
Certificate issuer: /CN=A9158059/serialNumber=1F76A694442CAB43D7D17CD6FDF9A97E0B7FAA8E
Certificate serial: 0725
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H3amlEQsq0PX0XzW_fmpfgt_qo4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158059/BBD81DA89CC111EBBFDE6579C4F9AE02/H3amlEQsq0PX0XzW_fmpfgt_qo4.mft
Manifest number: 071E
Signing time: Tue 06 Oct 2026 22:11:21 +0000
Manifest this update: Tue 06 Oct 2026 22:11:20 +0000
Manifest next update: Tue 13 Oct 2026 22:11:20 +0000
Files and hashes: 1: H3amlEQsq0PX0XzW_fmpfgt_qo4.crl (hash: DTXtXMhGkp9EXuIW+v75iEeJb74B4pSGybg49kh2zKw=)
2: 702A62CE9CC311EBA5A7A47BC4F9AE02.roa (hash: w6qFHPY18f2uu0A/E7Bmk+LTrJj/4AWZO+VT1lfOaAs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158059/BBD81DA89CC111EBBFDE6579C4F9AE02/H3amlEQsq0PX0XzW_fmpfgt_qo4.crl
rsync://rpki.apnic.net/member_repository/A9158059/BBD81DA89CC111EBBFDE6579C4F9AE02/H3amlEQsq0PX0XzW_fmpfgt_qo4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H3amlEQsq0PX0XzW_fmpfgt_qo4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 22:11:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1829 (0x725)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158059, serialNumber=1F76A694442CAB43D7D17CD6FDF9A97E0B7FAA8E
Validity
Not Before: Oct 6 22:11:20 2026 GMT
Not After : Oct 13 22:11:20 2026 GMT
Subject: CN=6ac57209-c32d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:22:eb:b6:66:8a:c2:67:d4:99:11:bf:a7:a6:
21:da:59:3e:07:35:e3:96:a2:62:bb:36:4b:c9:b2:
47:e0:bf:13:67:8b:f0:00:63:8d:91:88:dc:71:3a:
82:74:1a:67:32:fd:04:fd:c0:20:99:a0:25:c3:27:
31:36:e9:c0:7f:97:18:b7:db:82:aa:53:b6:cb:39:
e0:7f:da:de:45:7d:68:bd:e6:19:9a:cd:04:13:bb:
69:83:b6:03:fa:1c:21:dd:87:bb:10:d2:74:6c:21:
c6:84:03:11:87:0d:5d:46:6d:c7:93:1b:fc:d3:42:
f8:88:0a:18:29:f0:29:b4:19:c8:41:2c:4d:d9:75:
26:68:d8:6a:d4:b2:7a:9c:67:47:9c:a1:da:4b:dd:
8a:c1:4e:d6:9e:00:6d:bf:ee:28:f4:7e:f0:86:e6:
d8:29:6e:1b:d9:02:b0:0a:df:ec:22:c9:c4:ee:7d:
3f:30:ae:6e:fa:76:00:84:08:3a:99:a1:47:6e:89:
bf:91:cf:56:40:36:3a:2e:12:cf:66:34:ec:0c:a5:
01:a9:e8:16:aa:67:2a:0f:3e:a6:89:5f:09:43:c9:
af:6b:43:33:2d:d1:55:2a:8a:7e:8a:9f:80:d3:51:
ea:3d:1b:b2:15:f0:67:52:72:0a:3f:6e:35:f5:70:
d0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:FD:D6:B1:2C:92:5B:91:A1:64:20:6A:81:CC:B1:F3:27:99:F0:67
X509v3 Authority Key Identifier:
keyid:1F:76:A6:94:44:2C:AB:43:D7:D1:7C:D6:FD:F9:A9:7E:0B:7F:AA:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158059/BBD81DA89CC111EBBFDE6579C4F9AE02/H3amlEQsq0PX0XzW_fmpfgt_qo4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H3amlEQsq0PX0XzW_fmpfgt_qo4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158059/BBD81DA89CC111EBBFDE6579C4F9AE02/H3amlEQsq0PX0XzW_fmpfgt_qo4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:70:ea:ca:ad:bc:07:68:53:96:bd:ed:45:a1:08:ae:9a:8a:
1f:b6:ad:fd:8c:41:7c:80:54:f0:e6:43:d2:65:d3:f9:d4:e1:
3c:d3:3a:22:4c:75:b0:8f:99:fd:fa:e1:5e:e7:d8:82:cc:ee:
28:60:b3:b0:e1:3a:d7:9c:2c:c8:2e:d4:5c:27:68:e8:98:24:
a4:96:8a:38:cf:d5:30:b8:f6:11:7c:0c:c5:2f:67:3d:20:c8:
28:f9:39:be:f5:b6:67:88:9f:00:e5:65:5f:9a:a4:a1:8a:26:
23:fd:ae:94:70:49:2d:38:e2:a9:42:21:bb:5b:4c:b1:36:91:
b3:b1:45:be:58:44:5c:fa:00:3c:8c:c4:e6:71:ac:15:68:ad:
de:55:c6:94:d6:70:14:b2:92:96:8b:cc:db:96:c4:5a:79:82:
f7:a2:c6:b4:f7:77:a0:4e:7a:48:b4:bc:8c:ac:97:eb:4c:9a:
f1:d2:f1:dd:c1:2f:ba:71:07:b0:81:5a:d4:b0:3f:b0:31:43:
48:96:db:e0:f2:b0:a4:b5:73:e9:f3:99:12:19:57:80:af:a4:
65:fd:f0:37:b7:70:0a:7b:5e:93:7b:d9:ed:ee:5e:ff:a2:eb:
45:d9:4d:59:96:98:34:e1:94:a2:80:43:1d:bd:68:08:5c:8c:
c7:19:2b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:41:16 2026 by rpki-client