
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.mft
File: hEvW0alyz9K2C4TeDLY-XVSvqM8.mft (raw, json)
Hash identifier: PVNKWnml+kvBGtHdyGPo/s6RryrnFiQRmA3mzkpUgZg=
Subject key identifier: 55:6B:10:8E:AB:5D:64:26:AD:1D:68:CF:30:DA:67:E5:10:90:F0:FE
Authority key identifier: 84:4B:D6:D1:A9:72:CF:D2:B6:0B:84:DE:0C:B6:3E:5D:54:AF:A8:CF
Certificate issuer: /CN=A9161CEF/serialNumber=844BD6D1A972CFD2B60B84DE0CB63E5D54AFA8CF
Certificate serial: B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEvW0alyz9K2C4TeDLY-XVSvqM8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.mft
Manifest number: 0C76
Signing time: Fri 12 Jun 2026 19:02:46 +0000
Manifest this update: Fri 12 Jun 2026 19:02:46 +0000
Manifest next update: Fri 19 Jun 2026 19:02:46 +0000
Files and hashes: 1: hEvW0alyz9K2C4TeDLY-XVSvqM8.crl (hash: 3kqfAML1jY+yUsA4Ykitk9WHPaf0EDVlVeHRylM1jJI=)
2: 42B2A584790C11F0BFDABE73C4F9AE02.roa (hash: d07BUh1ehjR2H6atZT4gZxx1nTwyrrMun9HGnJk0rnE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.crl
rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEvW0alyz9K2C4TeDLY-XVSvqM8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 19:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178 (0xb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161CEF, serialNumber=844BD6D1A972CFD2B60B84DE0CB63E5D54AFA8CF
Validity
Not Before: Jun 12 19:02:46 2026 GMT
Not After : Jun 19 19:02:46 2026 GMT
Subject: CN=6a2c57d6-a5c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:94:cd:29:bc:b1:df:d4:94:89:88:f3:4b:dd:
84:1d:88:7f:63:55:25:4f:a4:24:4a:86:5a:37:93:
6a:7d:33:4c:82:b2:c8:6d:78:c9:c0:3b:52:c4:a4:
5e:27:de:7f:94:9d:3c:06:8a:bf:f4:9a:19:ce:02:
0d:b2:77:a0:3e:5b:b0:b1:68:3e:9f:cb:40:1a:7d:
8f:c3:b4:54:19:72:30:83:0d:4e:56:6a:9d:c4:e2:
5d:4c:ce:b9:29:53:7b:e6:a3:1b:99:45:d2:bc:73:
8a:da:de:e0:bb:c7:38:47:55:7a:97:cd:a0:a1:d8:
0a:19:c9:2f:64:3f:cb:d2:79:59:9b:85:fc:c8:7c:
83:dd:a7:ff:10:0f:73:75:22:82:b9:c4:2b:0c:f5:
1e:24:60:fe:6b:fd:df:8d:63:97:c9:1e:07:37:f0:
87:8c:3c:3c:fc:00:23:48:ef:85:48:5e:3a:68:a3:
5e:39:e7:ea:e2:da:a1:33:37:b0:ae:7e:bc:83:a3:
fb:55:08:03:b9:af:e9:49:24:e7:33:8b:ec:e5:b3:
20:5f:b3:b9:67:2f:2e:eb:b1:aa:f2:de:df:f6:e3:
b5:59:5e:13:bf:6c:89:81:75:31:60:86:6e:89:e5:
3d:2d:84:d1:ce:96:40:42:a0:dd:a4:a2:20:36:c6:
e2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:6B:10:8E:AB:5D:64:26:AD:1D:68:CF:30:DA:67:E5:10:90:F0:FE
X509v3 Authority Key Identifier:
keyid:84:4B:D6:D1:A9:72:CF:D2:B6:0B:84:DE:0C:B6:3E:5D:54:AF:A8:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEvW0alyz9K2C4TeDLY-XVSvqM8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:c0:f1:17:8b:d2:61:31:21:84:b8:d3:85:eb:f8:18:f7:33:
23:46:26:9e:00:eb:5c:b8:62:ed:f0:f2:6d:78:26:38:b7:ce:
a2:ab:b6:bc:4d:c4:c0:31:d3:66:bd:7a:5a:85:ce:87:be:7b:
c2:5f:96:9a:be:c8:0c:d4:32:c3:bc:d7:82:d9:92:cb:c0:e9:
71:36:68:8f:f9:31:27:9a:95:8f:d0:46:cc:39:cf:ad:0f:71:
f4:d0:d8:ba:6c:ed:17:a2:fa:f5:cd:3b:66:d5:4b:a9:66:2d:
14:7c:77:11:b6:15:be:e3:39:aa:5a:de:f7:d3:cc:8a:f1:b8:
6b:4f:24:f1:cb:8b:76:5c:8f:63:16:ad:2c:62:85:78:97:e5:
63:a1:2f:04:fd:ba:c6:b3:19:f4:f1:99:bb:df:c1:f0:b6:a9:
37:10:26:99:e2:87:45:14:47:35:54:ca:24:31:e3:fb:3e:82:
62:0a:94:f1:fd:81:51:73:90:71:91:27:74:ab:c9:0d:04:cd:
12:bf:8e:e3:e8:f5:4a:4a:cd:ea:8a:6d:7b:31:33:18:a5:cf:
af:59:0c:66:b9:29:68:88:0a:41:ce:4c:3b:c8:b7:96:a3:7a:
1c:23:e5:56:b7:5a:11:db:b3:f8:63:66:3b:ac:3e:56:6c:b7:
5e:99:a7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:47:42 2026 by rpki-client