
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176632/AB5A87065E0D11F094762F13C4F9AE02/hDGOgbLln2EUsQL6RQgzfekVw5M.mft
File: hDGOgbLln2EUsQL6RQgzfekVw5M.mft (raw, json)
Hash identifier: 3G3hrb2pIDZjqqaNR48lTa3Lz0jlS4S+N/2fF9z4TXg=
Subject key identifier: 42:4B:69:07:BF:EF:4A:A1:90:0A:CF:16:34:FF:63:9D:00:E2:69:47
Authority key identifier: 84:31:8E:81:B2:E5:9F:61:14:B1:02:FA:45:08:33:7D:E9:15:C3:93
Certificate issuer: /CN=A9176632/serialNumber=84318E81B2E59F6114B102FA4508337DE915C393
Certificate serial: C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDGOgbLln2EUsQL6RQgzfekVw5M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176632/AB5A87065E0D11F094762F13C4F9AE02/hDGOgbLln2EUsQL6RQgzfekVw5M.mft
Manifest number: C3
Signing time: Mon 27 Jul 2026 09:01:18 +0000
Manifest this update: Mon 27 Jul 2026 09:01:17 +0000
Manifest next update: Mon 03 Aug 2026 09:01:17 +0000
Files and hashes: 1: hDGOgbLln2EUsQL6RQgzfekVw5M.crl (hash: s31UVrgUR5MwP8aUilzG2peIkqhYNs2S3P5NtYfvwRA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176632/AB5A87065E0D11F094762F13C4F9AE02/hDGOgbLln2EUsQL6RQgzfekVw5M.crl
rsync://rpki.apnic.net/member_repository/A9176632/AB5A87065E0D11F094762F13C4F9AE02/hDGOgbLln2EUsQL6RQgzfekVw5M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDGOgbLln2EUsQL6RQgzfekVw5M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 195 (0xc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176632, serialNumber=84318E81B2E59F6114B102FA4508337DE915C393
Validity
Not Before: Jul 27 09:01:17 2026 GMT
Not After : Aug 3 09:01:17 2026 GMT
Subject: CN=6a671e5d-897d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d7:f5:79:75:96:06:4a:11:b6:07:8e:cf:0e:
0a:fe:78:33:87:a6:11:65:fd:6b:fd:b5:51:1f:56:
12:13:a3:7d:08:ed:85:d3:0c:66:ec:aa:42:0c:5e:
b2:60:b4:a3:43:95:87:4b:96:51:9d:6f:dc:bd:cc:
80:51:57:43:e2:70:0d:66:0d:d8:e0:1c:46:88:0f:
26:a7:06:44:28:b3:d6:9f:8c:5a:b4:e6:cc:46:f6:
03:5d:e1:6d:56:c8:02:46:70:96:99:5c:d2:0e:0b:
28:5f:ac:d4:5e:b7:f6:5d:a3:40:90:ca:3a:ae:2b:
29:f0:b5:02:e2:71:5d:01:21:db:08:d6:23:bd:6a:
2d:80:47:36:8d:77:ff:c7:63:2e:13:7a:13:61:e1:
13:ae:50:97:b4:b5:5b:67:a8:75:7a:68:af:89:d1:
6f:4b:3e:75:d9:db:7f:8e:73:e8:39:04:a1:10:3a:
22:2f:55:0f:65:fa:24:0e:aa:0b:ef:3d:e7:87:54:
b4:5a:57:ab:04:b9:7a:3c:66:0b:3a:cf:e6:03:03:
6d:c5:fa:cc:59:52:45:78:eb:2a:9a:da:06:c1:f4:
3f:2b:da:b8:6e:46:f2:e7:a1:d5:ec:2c:a6:19:d2:
30:6e:a9:ae:b6:53:d2:6d:63:06:2e:4b:f7:7b:ec:
ab:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:4B:69:07:BF:EF:4A:A1:90:0A:CF:16:34:FF:63:9D:00:E2:69:47
X509v3 Authority Key Identifier:
keyid:84:31:8E:81:B2:E5:9F:61:14:B1:02:FA:45:08:33:7D:E9:15:C3:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176632/AB5A87065E0D11F094762F13C4F9AE02/hDGOgbLln2EUsQL6RQgzfekVw5M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDGOgbLln2EUsQL6RQgzfekVw5M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176632/AB5A87065E0D11F094762F13C4F9AE02/hDGOgbLln2EUsQL6RQgzfekVw5M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:f3:85:3a:0f:3a:b6:78:75:ac:d3:02:70:13:86:9c:a9:0a:
50:ad:c4:72:46:46:fd:4a:e9:73:76:c5:3e:b3:36:fc:31:d4:
3e:d7:7f:f5:25:0c:bf:b6:50:2f:77:dd:11:27:ba:15:b5:60:
ab:f2:a6:46:cc:38:ca:b2:c2:a4:e4:87:05:99:f0:e8:b6:5d:
cc:5c:ad:9c:9d:cc:4b:35:73:22:96:d0:22:fe:04:14:0c:7f:
55:90:25:f6:2c:43:40:19:60:86:e4:6e:2b:64:7d:ef:89:70:
f5:07:00:91:1c:b4:77:40:22:16:97:96:f6:3e:95:04:6b:61:
75:7b:e9:91:d2:1e:a6:8e:c8:3b:da:07:c4:de:5a:bf:ee:1b:
bb:54:ad:53:68:2b:f8:e4:9d:ba:95:3e:bb:e4:06:4b:b5:0a:
33:ef:3e:0e:fd:94:9a:a8:b7:2a:01:dc:e0:32:96:c9:98:1f:
2d:6e:d4:66:21:71:28:e7:02:4e:08:d8:67:15:aa:5e:90:fc:
b5:ed:87:4a:0d:da:9b:64:ad:42:aa:87:5b:ed:2c:27:6e:90:
02:5d:bd:86:40:f0:e4:92:69:47:53:ea:74:31:94:5e:f4:44:
f7:d3:d7:0d:ae:83:19:8b:37:7e:a9:ab:35:21:c4:73:c8:a0:
8c:d6:ba:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:45:02 2026 by rpki-client