
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft
File: hF2I4KIVFF82fZMEvz9xrujrTC0.mft (raw, json)
Hash identifier: b7rDcSsPKWLrgb/EmNC+lFh1nal+Uf4FnpDECUWM+OM=
Subject key identifier: 03:14:E4:22:BE:1F:86:40:8C:32:5A:F3:DE:C4:43:AB:A3:68:A9:88
Authority key identifier: 84:5D:88:E0:A2:15:14:5F:36:7D:93:04:BF:3F:71:AE:E8:EB:4C:2D
Certificate issuer: /CN=A9194AE2/serialNumber=845D88E0A215145F367D9304BF3F71AEE8EB4C2D
Certificate serial: 0144
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hF2I4KIVFF82fZMEvz9xrujrTC0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft
Manifest number: 013C
Signing time: Sun 01 Mar 2026 06:26:47 +0000
Manifest this update: Sun 01 Mar 2026 06:26:46 +0000
Manifest next update: Sun 08 Mar 2026 06:26:46 +0000
Files and hashes: 1: hF2I4KIVFF82fZMEvz9xrujrTC0.crl (hash: 3bBwFo4yYbn8xueZXeGD8ya3+qKJ0nP/gssLX41QDms=)
2: 2042987C6C4411EF9B263275C4F9AE02.roa (hash: NjBAV+BZBuGQVA2KV6NfHJRJuvgRL/XOA20W9Q3lchw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.crl
rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hF2I4KIVFF82fZMEvz9xrujrTC0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 324 (0x144)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194AE2, serialNumber=845D88E0A215145F367D9304BF3F71AEE8EB4C2D
Validity
Not Before: Mar 1 06:26:46 2026 GMT
Not After : Mar 8 06:26:46 2026 GMT
Subject: CN=69a3dc27-f746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:63:82:ae:45:17:c2:86:7e:4b:f9:7a:62:17:
d5:7e:df:80:84:2b:f1:0b:af:25:4e:bf:51:6e:61:
bd:b6:4a:39:0d:75:e5:2a:e3:d3:14:c2:3d:7f:6a:
56:3e:95:45:67:6c:86:8f:0d:26:22:3f:46:64:b2:
f7:11:94:9b:a1:8e:39:f1:e3:8a:e1:b5:a1:0d:76:
4f:fc:0e:ff:f2:49:a2:6e:80:5e:39:c9:c6:03:8b:
e8:fd:cc:0a:de:66:40:0a:6e:09:4e:2b:ee:30:90:
d2:8e:ef:dc:b7:ea:df:1a:00:51:4d:43:4d:e0:00:
35:bd:78:1c:a0:3e:31:a0:f1:07:c4:52:f8:3f:31:
0f:9b:5a:bd:26:dc:24:c8:6f:cb:07:fa:f2:d1:f4:
9e:8d:d5:7f:22:c5:7f:88:e9:46:c0:d2:57:06:c9:
56:fc:6b:8b:26:e2:b3:d1:9f:79:01:e0:54:da:7b:
a4:43:8e:7e:9d:28:5d:2f:6f:44:6e:bd:c0:b1:17:
7d:f5:b8:31:49:b9:54:ce:ab:24:79:c5:19:2d:8a:
60:e8:08:84:d4:0e:0e:5b:75:1d:30:b7:49:4e:8c:
e4:30:3a:9e:9c:37:24:6e:18:e7:4b:dc:e5:5f:ce:
2d:f7:dd:86:19:5d:bc:c2:6d:99:69:d4:33:a0:4d:
0e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:14:E4:22:BE:1F:86:40:8C:32:5A:F3:DE:C4:43:AB:A3:68:A9:88
X509v3 Authority Key Identifier:
keyid:84:5D:88:E0:A2:15:14:5F:36:7D:93:04:BF:3F:71:AE:E8:EB:4C:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hF2I4KIVFF82fZMEvz9xrujrTC0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:bc:52:14:3e:3a:ed:50:48:00:c8:2b:b1:47:0b:e5:5c:f9:
38:33:b5:83:22:8c:52:73:89:fe:9f:06:1f:c5:ad:1f:fc:64:
f9:85:13:10:fd:01:4f:5e:f5:fc:a0:08:9d:ae:dc:82:12:98:
c0:b5:d7:f9:7b:a7:5b:b7:f4:bf:a1:a5:44:cd:23:79:ad:2e:
00:6a:9a:b6:82:9e:09:ba:b2:9f:2b:cb:5a:54:f6:ef:b7:b4:
21:b9:12:54:53:09:14:69:10:dd:8a:4f:73:33:6a:57:2e:e6:
a9:11:91:16:cb:18:58:9b:81:4c:f5:40:12:88:42:64:f2:e8:
e6:8b:dd:57:80:60:cb:24:f2:f9:34:2c:9a:c6:a9:3c:dd:7e:
84:11:1c:f0:67:22:bf:76:be:22:1c:57:1b:4e:38:aa:0f:ae:
ca:51:9e:11:a2:ea:b8:79:fc:65:3b:b1:72:48:9b:1a:7e:71:
0a:ae:f3:33:6b:62:13:e7:2a:b7:59:f2:64:22:ee:6b:27:fa:
07:4e:33:18:bf:e1:be:09:15:13:2e:26:1d:35:70:d9:e7:67:
63:31:2a:74:1a:16:da:37:da:d9:38:32:66:ee:2e:05:10:44:
2b:bd:48:8f:c6:fb:ed:7d:3a:6e:b0:cd:cd:4b:39:cb:f2:13:
f2:e1:85:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:36:04 2026 by rpki-client