
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft
File: HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft (raw, json)
Hash identifier: jdHmzcvZgOocVpciOJ1DuTTTpNQq5pvYMqLFL62yxlE=
Subject key identifier: B4:96:7F:C3:C1:7C:06:A2:44:98:73:64:8E:D8:6C:27:09:52:17:89
Authority key identifier: 1C:42:2B:B1:FC:96:FE:60:D4:B2:FF:5F:6C:12:45:0E:CC:9E:E9:6C
Certificate issuer: /CN=A9163609/serialNumber=1C422BB1FC96FE60D4B2FF5F6C12450ECC9EE96C
Certificate serial: 02BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HEIrsfyW_mDUsv9fbBJFDsye6Ww.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft
Manifest number: 02B7
Signing time: Mon 21 Sep 2026 01:26:19 +0000
Manifest this update: Mon 21 Sep 2026 01:26:19 +0000
Manifest next update: Mon 28 Sep 2026 01:26:19 +0000
Files and hashes: 1: HEIrsfyW_mDUsv9fbBJFDsye6Ww.crl (hash: sLKas99/BOUMs3KmcJkXx6jvJr4b2Le1WjW8kunrAis=)
2: 4Nm4cUgaAqJbFSvTnbxQNF9jQzE.asa (hash: Xs+VY24SytYmkpk3hC7Bpp3vyNK1OEYGmwv/Xfm0vyw=)
3: F2AB2F288FE011EDA9919C57C4F9AE02.roa (hash: KTnG5DXA4ykdIF+F6HQFhuSS9PnoKt4qehFaA66nt4k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.crl
rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HEIrsfyW_mDUsv9fbBJFDsye6Ww.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 01:26:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 702 (0x2be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9163609, serialNumber=1C422BB1FC96FE60D4B2FF5F6C12450ECC9EE96C
Validity
Not Before: Sep 21 01:26:19 2026 GMT
Not After : Sep 28 01:26:19 2026 GMT
Subject: CN=6ab087bb-f24a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:13:4e:67:8f:51:79:7d:e8:0c:00:7e:a8:e1:
7e:a8:df:74:27:46:54:3f:98:10:2e:56:48:ad:b0:
2e:70:c2:30:b8:8a:1c:a5:7b:d4:1e:fc:f6:31:61:
44:3d:94:2f:bc:64:0b:29:8d:9c:56:0c:f9:5d:53:
a2:8f:7b:09:64:70:80:81:ae:f6:5b:00:91:ff:67:
7b:98:e0:ee:11:10:4a:c4:b3:1c:17:22:75:45:bd:
79:df:24:18:5d:7d:27:c6:12:e8:c7:78:82:5e:63:
8a:f0:17:70:da:ed:12:82:f7:6a:1a:b6:bd:6f:43:
fc:76:ac:b3:06:05:6f:2e:ec:41:d9:92:b7:b6:d7:
a1:8b:e8:cd:26:79:08:93:80:9c:1d:04:66:2c:9b:
8b:ca:e9:18:21:79:d3:14:29:30:e1:8f:34:f4:5d:
61:53:43:ba:b5:f1:62:09:6f:9e:bb:85:13:7b:fb:
a7:4b:36:48:9f:7a:1f:d0:da:c2:0e:5b:e0:bb:95:
fc:56:2a:ef:cc:cb:91:32:37:8f:75:56:9d:80:b6:
6f:49:b0:53:51:4c:f1:11:cd:49:e3:2a:d7:44:46:
e8:28:c6:73:3c:4c:53:fd:78:a9:7b:f8:0f:74:16:
0a:79:a9:93:9a:6c:8d:22:d8:25:0e:bb:25:00:42:
2b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:96:7F:C3:C1:7C:06:A2:44:98:73:64:8E:D8:6C:27:09:52:17:89
X509v3 Authority Key Identifier:
keyid:1C:42:2B:B1:FC:96:FE:60:D4:B2:FF:5F:6C:12:45:0E:CC:9E:E9:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HEIrsfyW_mDUsv9fbBJFDsye6Ww.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:b5:40:67:9e:74:c0:10:7d:a3:a2:22:1b:35:d3:a9:c5:6a:
da:9c:bd:2d:a6:86:98:64:3a:27:39:b9:48:cc:80:fe:05:90:
e1:62:12:b4:4b:97:da:c2:59:cb:70:44:97:ee:7d:6d:2a:f8:
f8:81:54:9c:0e:31:59:42:6d:36:7a:d2:82:2a:0f:3f:21:8d:
8a:b7:06:27:da:7a:ba:f0:85:c5:d8:c9:67:28:dc:ad:ed:85:
e3:c0:de:68:1c:0b:f6:67:74:33:43:fc:00:9b:5f:96:35:11:
16:42:20:46:b2:91:da:bb:13:ba:f0:fb:92:e0:97:21:87:ef:
49:c8:8d:c5:dd:b0:77:cf:08:6b:07:04:b0:c3:b2:24:e0:04:
25:a3:70:bd:66:4f:70:a3:d1:9f:f1:8a:36:d8:30:5f:a9:f6:
a8:5f:16:c7:9c:bb:7e:aa:bc:4c:5b:ae:34:9e:55:1b:9a:9d:
48:8c:bb:dd:18:9d:55:cb:46:51:a8:e8:ab:85:80:c6:14:82:
f9:f3:b2:20:80:6d:90:dc:04:ff:25:0d:9c:fb:b4:5f:ce:2d:
95:4f:6d:9d:70:ff:ed:9d:96:9e:c2:82:57:ba:8c:97:be:2c:
39:db:db:50:9c:9b:69:87:f1:f5:88:73:53:a3:79:1b:67:24:
82:08:1f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:34:33 2026 by rpki-client