
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189218/D857A13EDEBF11EB9AA63B6AC4F9AE02/he9PUr5sDQk3OGmpACI4YoIz6-8.mft
File: he9PUr5sDQk3OGmpACI4YoIz6-8.mft (raw, json)
Hash identifier: gX811nL6wtabttFXBaT1jUol5pRpZZ4aAN45JJLMhX4=
Subject key identifier: 22:DB:4F:81:C1:2D:A4:CA:D3:AD:DC:1E:8A:35:2E:A0:FF:C2:E0:B3
Authority key identifier: 85:EF:4F:52:BE:6C:0D:09:37:38:69:A9:00:22:38:62:82:33:EB:EF
Certificate issuer: /CN=A9189218/serialNumber=85EF4F52BE6C0D09373869A9002238628233EBEF
Certificate serial: 063F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he9PUr5sDQk3OGmpACI4YoIz6-8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189218/D857A13EDEBF11EB9AA63B6AC4F9AE02/he9PUr5sDQk3OGmpACI4YoIz6-8.mft
Manifest number: 0638
Signing time: Fri 12 Jun 2026 22:46:43 +0000
Manifest this update: Fri 12 Jun 2026 22:46:42 +0000
Manifest next update: Fri 19 Jun 2026 22:46:42 +0000
Files and hashes: 1: he9PUr5sDQk3OGmpACI4YoIz6-8.crl (hash: Ajpnl9SIdeiKiIUNPGGBky7hl+EhlglMEEO9HLQRIME=)
2: 82A9E362DEC111EB9010BE6AC4F9AE02.roa (hash: r63sbdb81aS0Y3D1jhysh8/CnvmDL9CRF/6oUTPKQNI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189218/D857A13EDEBF11EB9AA63B6AC4F9AE02/he9PUr5sDQk3OGmpACI4YoIz6-8.crl
rsync://rpki.apnic.net/member_repository/A9189218/D857A13EDEBF11EB9AA63B6AC4F9AE02/he9PUr5sDQk3OGmpACI4YoIz6-8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he9PUr5sDQk3OGmpACI4YoIz6-8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 22:46:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1599 (0x63f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189218, serialNumber=85EF4F52BE6C0D09373869A9002238628233EBEF
Validity
Not Before: Jun 12 22:46:42 2026 GMT
Not After : Jun 19 22:46:42 2026 GMT
Subject: CN=6a2c8c52-1cfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d6:c3:78:62:e5:5b:4e:ee:c3:af:e5:fd:a4:
15:dd:36:70:0c:8f:03:8f:aa:61:96:a3:54:2c:b6:
88:4c:53:9d:63:84:77:2d:14:d3:f8:18:2f:a7:f2:
ec:67:f8:e2:eb:19:c8:bf:a3:3c:12:8e:88:da:40:
53:5f:34:3e:f1:22:e9:c0:2b:cb:ef:7d:5b:92:69:
1e:6e:57:ef:3e:4e:8e:d3:64:f6:f9:c8:4a:8e:2a:
8e:d6:34:20:19:7f:6f:eb:78:0f:a5:f6:8a:d9:b6:
e8:91:56:12:58:05:20:a0:ce:d5:d9:db:f6:3d:da:
f8:c4:24:5d:d5:5d:4a:8a:22:59:ed:87:3d:19:b1:
7e:76:24:a5:3e:bb:4e:e0:4f:28:93:12:5d:1c:ae:
63:68:a4:f3:7f:6c:9e:2c:c1:b7:89:8b:2d:c8:f0:
d1:c4:1f:ff:18:de:73:43:3e:99:60:99:55:a3:7b:
f4:66:f3:dc:8e:93:ef:35:68:de:0d:58:bb:63:73:
66:6d:cf:8f:44:d0:d7:74:52:17:a5:f2:ed:7a:de:
bf:6c:72:78:51:14:fe:2d:9c:a3:fe:40:d2:17:4e:
b5:18:66:35:c4:ad:e4:66:d0:0c:09:04:c5:46:67:
25:83:25:31:c5:ef:f9:a5:b9:02:de:bb:f0:d5:51:
a9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DB:4F:81:C1:2D:A4:CA:D3:AD:DC:1E:8A:35:2E:A0:FF:C2:E0:B3
X509v3 Authority Key Identifier:
keyid:85:EF:4F:52:BE:6C:0D:09:37:38:69:A9:00:22:38:62:82:33:EB:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189218/D857A13EDEBF11EB9AA63B6AC4F9AE02/he9PUr5sDQk3OGmpACI4YoIz6-8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he9PUr5sDQk3OGmpACI4YoIz6-8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189218/D857A13EDEBF11EB9AA63B6AC4F9AE02/he9PUr5sDQk3OGmpACI4YoIz6-8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:21:3a:74:4b:56:bb:c0:ba:ae:af:bd:f9:90:6b:8b:54:fa:
7f:16:a6:f8:8b:9d:d7:ba:25:04:d5:fd:97:39:04:d3:c8:73:
ee:bb:75:0f:7f:58:d7:bb:65:06:e5:52:0e:24:98:05:7f:0c:
70:a7:8e:8f:87:b4:ec:a1:0d:a8:8a:3b:69:90:62:83:04:e5:
3e:2e:36:47:05:9d:1c:00:75:d3:83:56:e2:73:c0:33:25:9a:
2b:52:2f:6a:dd:d5:53:7a:68:d4:9e:4a:56:64:6f:47:75:12:
85:6d:0f:30:2e:ac:7b:b9:38:09:50:a4:ff:0b:2f:48:e2:0c:
25:de:b8:5f:84:c5:7c:f1:aa:77:dc:0a:e0:d1:71:a9:ba:47:
87:0e:d6:81:2b:af:21:31:99:84:f7:d6:76:f6:db:7f:ec:2d:
35:47:61:a9:aa:25:c8:77:82:ac:9a:77:c7:65:a9:96:9e:0c:
e7:c6:36:68:f2:3d:59:4b:59:44:66:c2:5e:6a:95:27:42:a2:
29:4c:f0:d2:80:f5:a5:10:18:ea:ac:75:8d:73:2b:29:7c:77:
1d:5f:c9:a8:ef:66:d6:00:bb:70:b5:e1:57:09:7e:38:22:4b:
fb:e4:39:d7:0b:04:e4:2e:e4:d3:4f:a4:66:ce:60:41:78:b8:
95:a2:12:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:56:57 2026 by rpki-client