
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189218/D857A13EDEBF11EB9AA63B6AC4F9AE02/he9PUr5sDQk3OGmpACI4YoIz6-8.mft
File: he9PUr5sDQk3OGmpACI4YoIz6-8.mft (raw, json)
Hash identifier: zdHGAu3UBcZzKWoAx/lsm+IWUcX/vWIbN8Z4JGYhJWs=
Subject key identifier: C8:8F:59:9B:AC:F0:B9:FD:3B:79:4E:CC:1D:26:D5:71:B7:B2:4C:A0
Authority key identifier: 85:EF:4F:52:BE:6C:0D:09:37:38:69:A9:00:22:38:62:82:33:EB:EF
Certificate issuer: /CN=A9189218/serialNumber=85EF4F52BE6C0D09373869A9002238628233EBEF
Certificate serial: 0622
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he9PUr5sDQk3OGmpACI4YoIz6-8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189218/D857A13EDEBF11EB9AA63B6AC4F9AE02/he9PUr5sDQk3OGmpACI4YoIz6-8.mft
Manifest number: 061B
Signing time: Thu 16 Apr 2026 22:44:16 +0000
Manifest this update: Thu 16 Apr 2026 22:44:16 +0000
Manifest next update: Thu 23 Apr 2026 22:44:16 +0000
Files and hashes: 1: he9PUr5sDQk3OGmpACI4YoIz6-8.crl (hash: dX/qTyA3hs6Yc4LHWMsTK1xx1E7kBUoRtKJqvFqc4no=)
2: 82A9E362DEC111EB9010BE6AC4F9AE02.roa (hash: r63sbdb81aS0Y3D1jhysh8/CnvmDL9CRF/6oUTPKQNI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189218/D857A13EDEBF11EB9AA63B6AC4F9AE02/he9PUr5sDQk3OGmpACI4YoIz6-8.crl
rsync://rpki.apnic.net/member_repository/A9189218/D857A13EDEBF11EB9AA63B6AC4F9AE02/he9PUr5sDQk3OGmpACI4YoIz6-8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he9PUr5sDQk3OGmpACI4YoIz6-8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:44:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1570 (0x622)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189218, serialNumber=85EF4F52BE6C0D09373869A9002238628233EBEF
Validity
Not Before: Apr 16 22:44:16 2026 GMT
Not After : Apr 23 22:44:16 2026 GMT
Subject: CN=69e16640-f2a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8a:0d:e9:76:64:14:70:09:2b:4d:11:c7:99:
de:98:e2:57:f6:6c:b2:66:d9:02:3e:8d:70:8d:91:
da:96:8f:e4:e3:ed:99:ee:4a:6b:32:5f:e7:59:54:
6e:e7:b3:b9:49:cd:66:49:7c:75:3e:25:59:e6:e4:
ec:aa:90:ca:a0:dd:00:09:e4:39:3d:fa:f9:71:55:
18:17:9f:a6:19:d7:cb:c2:5f:37:fb:7e:df:5a:18:
d2:6b:e8:b2:59:eb:a7:fa:f7:36:5b:1d:f9:09:12:
4a:02:ff:5b:a6:cf:65:d8:69:06:e9:d7:8d:ac:b0:
d1:5b:9e:44:60:e6:ff:0f:1f:16:f6:ae:10:f9:00:
ad:25:3d:00:46:7a:93:71:52:26:83:81:f6:57:e1:
87:87:e1:2f:32:78:77:e8:1b:dd:97:68:bb:ea:63:
d2:af:4c:56:d8:b3:cd:6d:d1:4f:34:6f:0e:a6:83:
8f:37:eb:fd:de:3e:00:00:54:8f:a2:c3:dd:82:d6:
e7:fe:c6:7b:10:57:5d:83:4a:a0:34:4b:ad:95:c3:
f4:f0:26:dd:63:dc:1f:0f:19:44:d8:42:ed:76:cb:
51:6f:35:ff:93:27:ac:4f:3b:a0:8f:11:f7:43:f7:
97:d4:54:0b:ab:b5:21:70:c8:9f:c7:f3:a5:b0:94:
54:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:8F:59:9B:AC:F0:B9:FD:3B:79:4E:CC:1D:26:D5:71:B7:B2:4C:A0
X509v3 Authority Key Identifier:
keyid:85:EF:4F:52:BE:6C:0D:09:37:38:69:A9:00:22:38:62:82:33:EB:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189218/D857A13EDEBF11EB9AA63B6AC4F9AE02/he9PUr5sDQk3OGmpACI4YoIz6-8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he9PUr5sDQk3OGmpACI4YoIz6-8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189218/D857A13EDEBF11EB9AA63B6AC4F9AE02/he9PUr5sDQk3OGmpACI4YoIz6-8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:18:54:29:99:48:ab:88:7b:58:61:67:09:d2:c9:01:7a:81:
cc:96:5f:f2:47:89:f7:04:28:9e:fe:7c:36:1e:5a:f2:3a:ae:
09:98:81:75:98:ef:c8:26:0f:ae:29:ad:4e:72:c2:97:b8:fb:
21:39:fb:9e:37:1d:28:23:27:e9:9b:da:b0:7d:93:31:12:52:
8b:ed:98:cb:25:f3:c1:4c:7d:d6:1f:4b:03:26:15:e1:eb:83:
4f:65:16:34:10:38:8c:43:0d:b7:40:de:99:5c:dc:e9:3f:b3:
42:86:94:89:6f:3e:61:33:84:ee:6f:46:11:7c:ee:b2:65:00:
0c:f6:d4:aa:8c:b1:58:5c:25:5c:b3:42:a8:fd:b1:84:47:90:
71:27:6b:24:c9:13:f0:d4:e4:f4:16:3d:79:41:75:98:27:50:
81:a0:a5:f4:43:57:ba:3a:b7:8e:ad:ad:b7:73:b3:7d:01:43:
33:f1:2d:bb:28:8e:42:0b:38:f6:c2:35:30:f5:51:cf:65:fa:
34:c9:b6:35:cc:c9:9f:5d:dc:1e:96:4c:32:22:bb:f7:5b:90:
e6:82:02:28:18:dd:c5:8a:5b:0b:d1:83:4e:80:a7:ec:ce:2b:
0c:2c:21:8a:e7:0a:82:c9:8c:af:ef:3d:55:72:43:bf:ba:0c:
2e:fc:77:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:48:06 2026 by rpki-client