
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft
File: _hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft (raw, json)
Hash identifier: m0134bDFqsQW42Lx+PvDGj45hK8QEYR7+yGdQwfhEoY=
Subject key identifier: F1:5C:B4:8A:8F:79:A0:90:3B:BE:2E:62:DE:89:DD:3B:09:53:5A:43
Authority key identifier: FE:19:77:8A:0D:07:BD:DB:5F:F6:B9:F0:5B:E2:D5:45:52:0E:C4:94
Certificate issuer: /CN=A9186C2F/serialNumber=FE19778A0D07BDDB5FF6B9F05BE2D545520EC494
Certificate serial: 0451
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft
Manifest number: 043C
Signing time: Wed 29 Jul 2026 01:00:08 +0000
Manifest this update: Wed 29 Jul 2026 01:00:07 +0000
Manifest next update: Wed 05 Aug 2026 01:00:07 +0000
Files and hashes: 1: _hl3ig0Hvdtf9rnwW-LVRVIOxJQ.crl (hash: QmqDZ/Qn40gdNNaNa8LN1tJiwpqWrO4/NsqKeSb9pdc=)
2: E0722F2EB41B11ECB8529210C4F9AE02.roa (hash: IqecsrYsQpIp/5eCM+4hpeu8TBUj8KVmWEPSTo60jis=)
3: 9837349AB41E11ECAFDA1F1AC4F9AE02.roa (hash: kkADNHMGho1cJcxgujF7FqwJofNaLhAL0T7zwMKpQTE=)
4: AB3742F4B34411ECB016765EC4F9AE02.roa (hash: gYFwC5k2adNiGUC8mTnrPd2F0ktvtrVBLWYeACoVYqU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.crl
rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 01:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1105 (0x451)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186C2F, serialNumber=FE19778A0D07BDDB5FF6B9F05BE2D545520EC494
Validity
Not Before: Jul 29 01:00:07 2026 GMT
Not After : Aug 5 01:00:07 2026 GMT
Subject: CN=6a695098-cdde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:57:7a:6a:55:64:0a:af:03:19:38:91:7a:08:
87:5e:a2:9e:57:4e:67:73:c3:ca:4f:85:d6:b2:30:
ee:2f:e0:aa:97:62:4d:6a:67:02:df:9a:06:0f:34:
2d:42:65:fe:e7:d8:d4:cf:67:da:fd:12:d9:ee:50:
04:87:78:5a:78:bb:7c:c2:8a:2c:39:4b:ef:e5:16:
18:3b:01:db:8b:ea:1c:c7:0c:66:0c:a4:36:62:3b:
ca:4a:01:06:77:10:21:91:56:95:12:d5:16:8b:ad:
07:cb:7a:65:a8:46:96:ea:3c:92:82:45:f2:9a:bb:
25:24:1d:58:09:5e:09:83:82:0e:bd:9d:08:5f:73:
b0:2b:db:4d:ba:b5:8c:9e:0f:a6:3e:b6:d8:a2:8a:
94:57:55:82:8c:19:db:be:90:03:78:0d:48:3f:c0:
e6:4a:ad:36:21:8a:58:98:7d:bb:45:f9:54:cc:ca:
f7:67:af:1f:7f:97:56:60:d2:a5:59:00:0e:4c:9a:
c4:f2:54:9e:db:5c:6c:80:ec:dc:c8:ce:2b:fd:09:
93:65:08:04:36:22:cc:4e:bf:62:2e:be:53:ff:26:
93:c3:42:59:65:55:eb:2f:7e:bf:9a:0f:f9:4e:25:
e7:8f:22:57:76:c5:df:ae:29:ae:1c:90:85:ab:a1:
c5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:5C:B4:8A:8F:79:A0:90:3B:BE:2E:62:DE:89:DD:3B:09:53:5A:43
X509v3 Authority Key Identifier:
keyid:FE:19:77:8A:0D:07:BD:DB:5F:F6:B9:F0:5B:E2:D5:45:52:0E:C4:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:01:d5:96:80:0b:ca:09:95:26:51:3d:6f:18:23:5e:b9:47:
04:c1:da:af:98:b0:a1:e7:5f:49:6c:e3:26:30:80:e9:6c:35:
fc:a0:1d:a6:fb:16:15:73:c7:15:c1:39:52:84:b8:78:94:ac:
d2:e5:83:48:99:3e:56:82:42:0c:aa:cf:14:97:37:f3:df:ef:
ee:7f:85:a5:7e:a6:84:ad:18:58:5c:80:d5:00:fa:d1:01:95:
b8:63:68:f2:e7:36:e7:86:f8:df:00:2d:18:8f:37:52:f2:91:
e7:f7:61:b4:4b:aa:d4:07:ac:0b:87:bf:0c:15:41:eb:e6:a3:
07:d3:c8:b3:93:ba:e6:b0:3e:8d:80:f0:eb:9a:76:4c:f2:42:
a7:c9:34:58:fe:2d:c8:e4:d4:9b:e4:18:16:6b:2f:81:25:79:
d2:4c:d8:f9:21:42:a2:f9:28:e9:05:99:fb:a8:81:a8:25:3c:
d2:46:b4:ab:d1:14:9f:4a:7f:e1:0a:92:6b:92:6f:7a:39:76:
e1:0c:77:ae:b3:0c:76:67:88:2a:9d:43:a5:70:7f:bc:be:08:
c0:f0:2d:c9:34:48:14:9e:25:96:d8:be:b4:b8:05:2d:d3:20:
1d:e9:37:82:de:6d:55:67:3e:86:3e:a9:67:b8:f2:38:20:59:
ce:6a:46:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:34:44 2026 by rpki-client