
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.mft
File: I-HkJZ-rzUn9WMzUbPIAzRIeLqw.mft (raw, json)
Hash identifier: +rEAN34wwjPpF5/cgGQg85xtKWX8S3uOQ+49EauTrkM=
Subject key identifier: 92:D1:AC:4E:73:81:16:06:82:E2:65:02:BD:B6:14:67:1C:92:EB:0B
Authority key identifier: 23:E1:E4:25:9F:AB:CD:49:FD:58:CC:D4:6C:F2:00:CD:12:1E:2E:AC
Certificate issuer: /CN=A9158682/serialNumber=23E1E4259FABCD49FD58CCD46CF200CD121E2EAC
Certificate serial: 99
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.mft
Manifest number: 96
Signing time: Mon 21 Sep 2026 07:27:43 +0000
Manifest this update: Mon 21 Sep 2026 07:27:43 +0000
Manifest next update: Mon 28 Sep 2026 07:27:43 +0000
Files and hashes: 1: I-HkJZ-rzUn9WMzUbPIAzRIeLqw.crl (hash: HgdS5peFm2M+6CjGwz3vLQISQVPZKEpwf8HhMqBpbJg=)
2: C5D7EA08D5CF11F0A0EA7C48C4F9AE02.roa (hash: FWaWZRn2VagzBM02EknVAFE8HgmoQjfzWkVbJA60FRs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.crl
rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:27:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153 (0x99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158682, serialNumber=23E1E4259FABCD49FD58CCD46CF200CD121E2EAC
Validity
Not Before: Sep 21 07:27:43 2026 GMT
Not After : Sep 28 07:27:43 2026 GMT
Subject: CN=6ab0dc6f-c921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:65:8c:4e:1c:81:fa:51:f9:62:18:b1:29:9a:
d6:ef:ba:f3:00:09:ad:b6:a6:d2:76:86:ea:25:17:
2a:1e:05:01:d8:56:0e:ad:ec:e9:0d:e6:80:34:24:
73:14:b1:91:46:2b:19:c2:d5:b7:0e:3e:29:7e:9b:
76:db:6c:72:29:09:4a:ed:b4:02:83:57:d9:c4:21:
1f:da:64:a2:7e:ac:17:80:39:da:3a:e1:8c:85:f9:
dc:ab:74:d6:9e:34:3c:6d:65:af:3d:56:21:91:c1:
77:d3:1e:9a:3a:0f:d1:d2:b0:80:fb:1f:80:11:cc:
52:63:29:54:fe:8d:de:c8:f4:23:71:fc:e6:c5:86:
20:44:0c:67:dd:15:49:1d:bf:93:68:74:a6:c5:e7:
9b:fe:fc:c1:98:58:d9:53:b1:1c:3f:9f:e5:0b:e9:
a5:03:e4:0a:b9:6b:a6:a6:e4:56:42:89:23:20:81:
95:1c:03:28:ea:6d:ef:72:3a:68:d4:95:7c:4d:ed:
8f:35:6d:51:d4:ca:ae:b2:6f:77:aa:27:f1:80:45:
73:82:af:e8:6f:08:05:87:60:1a:df:62:e0:35:e4:
fb:8c:ed:09:61:10:62:6c:7d:c1:23:f5:38:bc:93:
3e:34:36:4b:27:f4:26:aa:52:76:df:75:a5:e0:a2:
ab:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D1:AC:4E:73:81:16:06:82:E2:65:02:BD:B6:14:67:1C:92:EB:0B
X509v3 Authority Key Identifier:
keyid:23:E1:E4:25:9F:AB:CD:49:FD:58:CC:D4:6C:F2:00:CD:12:1E:2E:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:7a:83:5c:7b:f5:f1:9d:d7:42:87:88:26:e3:15:d5:93:71:
c4:67:d6:cf:bd:ec:8b:28:c1:ba:68:a6:0c:34:97:80:5e:0b:
50:33:78:e8:13:1f:f2:3e:aa:f9:9c:e5:a1:99:31:e2:02:38:
67:30:82:4b:af:db:b6:56:68:87:bb:e4:b4:d1:c9:b1:df:d5:
1b:0e:46:4c:dd:68:39:e8:4f:92:31:e5:79:87:a4:39:b1:83:
e6:ff:ff:8d:84:92:d0:d6:23:6f:98:26:32:cb:6a:0e:4d:71:
c8:a5:f7:cc:57:5e:bb:65:66:73:d0:46:98:58:7b:ac:d4:48:
82:97:d8:e1:56:83:0f:c5:0e:4c:53:54:57:dc:12:db:25:be:
3e:d6:7e:63:9f:5a:1b:2a:e4:c9:b4:d7:31:e4:ca:66:e2:16:
3d:b1:b4:22:a7:50:4b:92:b7:ff:da:93:b1:af:e9:2a:bf:d4:
6a:66:ef:be:c1:72:f6:8a:c3:f0:78:7f:db:dc:6a:be:b1:62:
19:28:ec:95:ac:46:ef:28:dc:42:c4:52:15:02:c5:c7:5f:0e:
eb:c1:b5:47:73:a1:c0:0f:31:e7:4c:bb:80:49:6b:81:98:78:
78:0c:25:cc:31:cc:5b:5a:06:23:8f:2d:29:2a:f2:df:23:58:
09:34:46:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:21:33 2026 by rpki-client