
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.mft
File: H9jsfGVHrsUq1-DgvDLPfKoiHjc.mft (raw, json)
Hash identifier: /SOor+60rAObI7its+WhaS55DaHAqxG/iZuueZguPV4=
Subject key identifier: 93:00:0D:BF:CC:92:F1:E8:44:41:21:B0:83:A7:FA:0C:34:85:ED:63
Authority key identifier: 1F:D8:EC:7C:65:47:AE:C5:2A:D7:E0:E0:BC:32:CF:7C:AA:22:1E:37
Certificate issuer: /CN=A917B4DF/serialNumber=1FD8EC7C6547AEC52AD7E0E0BC32CF7CAA221E37
Certificate serial: 068A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9jsfGVHrsUq1-DgvDLPfKoiHjc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.mft
Manifest number: 0683
Signing time: Sat 28 Feb 2026 23:01:33 +0000
Manifest this update: Sat 28 Feb 2026 23:01:32 +0000
Manifest next update: Sat 07 Mar 2026 23:01:32 +0000
Files and hashes: 1: H9jsfGVHrsUq1-DgvDLPfKoiHjc.crl (hash: mrlXxFRhGGwabRPJKxR1kosKsuwaKkMoZ5wSZuhweDA=)
2: F8CE85E2B30211EBA63AE482C4F9AE02.roa (hash: JNO//UyjyCwtO6c12uk/NjDfBJbKa4UXXgFo1EP+Qts=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.crl
rsync://rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9jsfGVHrsUq1-DgvDLPfKoiHjc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 23:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1674 (0x68a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B4DF, serialNumber=1FD8EC7C6547AEC52AD7E0E0BC32CF7CAA221E37
Validity
Not Before: Feb 28 23:01:32 2026 GMT
Not After : Mar 7 23:01:32 2026 GMT
Subject: CN=69a373cd-0fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:50:16:0a:34:46:d6:d3:45:ac:19:cb:64:e0:
14:22:f5:10:30:9f:f8:c6:e7:4b:88:eb:de:c7:d8:
98:a2:59:bb:30:4b:da:d2:ae:49:fc:d4:f5:48:2f:
10:43:27:96:3b:db:0c:28:37:11:cc:aa:76:9f:75:
70:b3:ff:29:fc:61:d3:1e:20:0c:93:05:4d:09:2a:
e1:5c:98:cf:1f:b4:40:2d:df:d7:a0:c4:fa:89:99:
cd:c1:81:58:89:99:2e:fb:3b:d6:7f:a3:6d:ac:86:
cc:6e:3e:0b:0a:c4:04:62:29:2c:bc:2b:7d:11:d9:
31:f4:fd:7e:70:5a:ee:af:0d:ec:a4:26:5b:8a:0e:
ee:85:4d:00:8f:78:52:f8:11:e6:2e:88:39:4a:21:
35:bb:c5:b4:20:ee:7b:f7:62:b2:02:91:45:60:9f:
90:77:46:ed:0e:24:5a:ea:12:04:79:1c:88:4a:5a:
b9:b6:03:f1:c2:da:2c:b6:a9:54:5c:f3:c3:c1:df:
34:3b:f9:4f:a7:97:68:05:c5:a4:e5:62:31:19:c1:
98:3b:26:b7:9b:c5:a3:ab:f5:ca:f1:57:81:af:63:
f7:ec:fa:4e:59:0e:e3:db:8d:ec:39:13:87:86:0d:
7e:03:77:19:30:9a:e0:19:84:1a:71:3c:86:26:f7:
63:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:00:0D:BF:CC:92:F1:E8:44:41:21:B0:83:A7:FA:0C:34:85:ED:63
X509v3 Authority Key Identifier:
keyid:1F:D8:EC:7C:65:47:AE:C5:2A:D7:E0:E0:BC:32:CF:7C:AA:22:1E:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9jsfGVHrsUq1-DgvDLPfKoiHjc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:fd:60:4d:d0:87:23:03:29:43:2d:41:02:85:cc:83:93:4e:
81:c2:85:e4:17:47:f4:0d:a1:b3:b9:ee:81:9e:26:37:26:f0:
45:31:1a:90:0c:0c:32:7b:2a:39:b3:0e:c3:aa:b7:95:75:ea:
45:06:ed:e6:79:fe:3b:77:3a:84:7e:ac:19:20:0e:ec:fe:74:
c8:04:f3:f3:c1:70:76:ba:50:e5:32:43:c8:ad:55:70:e2:04:
c8:21:ab:37:51:c0:1f:06:6a:9d:5e:f0:1f:65:d5:85:90:8f:
7c:3a:57:a4:aa:7d:90:07:49:e0:ef:a7:9a:0f:13:d8:98:4f:
f0:b5:d7:f8:57:fb:b8:24:76:86:0b:6a:a8:9c:f7:5c:9b:53:
43:4c:df:3c:89:0a:a0:3f:b0:dd:b0:01:de:e5:76:e6:17:70:
b0:2e:6d:8d:65:52:67:76:2b:d4:25:e6:47:a1:88:e7:18:4b:
f3:b4:e3:92:05:09:e6:a7:81:2e:6d:df:25:21:8e:b1:52:42:
68:a2:ff:1c:33:cb:7f:f3:70:f6:3d:03:6a:e2:84:e9:c9:1b:
52:0a:78:c3:f5:53:c8:1f:7d:af:4d:c1:c8:a6:ae:ef:0c:60:
5e:d3:b8:79:1e:ff:d1:02:93:39:8a:8d:fb:e6:e9:6a:57:05:
74:09:26:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:11:46 2026 by rpki-client