
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft
File: hF2I4KIVFF82fZMEvz9xrujrTC0.mft (raw, json)
Hash identifier: 1P4/3WJSUK6SXxAryCpT3U3Hx5X/aCNuy8k01BzIwJE=
Subject key identifier: 22:3A:D7:27:6E:CA:D4:28:A1:BC:A9:C5:C7:86:4E:9A:90:28:1A:E0
Authority key identifier: 84:5D:88:E0:A2:15:14:5F:36:7D:93:04:BF:3F:71:AE:E8:EB:4C:2D
Certificate issuer: /CN=A9194AE2/serialNumber=845D88E0A215145F367D9304BF3F71AEE8EB4C2D
Certificate serial: 01BF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hF2I4KIVFF82fZMEvz9xrujrTC0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft
Manifest number: 01A7
Signing time: Mon 21 Sep 2026 04:13:23 +0000
Manifest this update: Mon 21 Sep 2026 04:13:23 +0000
Manifest next update: Mon 28 Sep 2026 04:13:23 +0000
Files and hashes: 1: hF2I4KIVFF82fZMEvz9xrujrTC0.crl (hash: 6zO6/4dg46v9E89OVGceRt3dL0/l/yvK9XtqjEdp2Vk=)
2: 2042987C6C4411EF9B263275C4F9AE02.roa (hash: j16LuDv13C+xPwm2QZb9CGFB7DnHm32KOWNgy88gmoU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.crl
rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hF2I4KIVFF82fZMEvz9xrujrTC0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 04:13:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 447 (0x1bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194AE2, serialNumber=845D88E0A215145F367D9304BF3F71AEE8EB4C2D
Validity
Not Before: Sep 21 04:13:23 2026 GMT
Not After : Sep 28 04:13:23 2026 GMT
Subject: CN=6ab0aee3-9872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ac:61:4c:68:8d:05:80:0e:2f:e1:6c:cc:7e:
10:00:4f:20:b4:e3:de:20:9f:4d:13:27:dd:96:0f:
b0:8f:d5:cf:df:fb:fd:ea:81:bc:b6:1c:b0:cd:d5:
e6:34:68:c5:42:20:2b:d2:f1:09:d2:f9:f1:a9:f4:
63:0e:b5:0a:55:44:ed:9b:09:0a:b9:b5:b7:da:83:
1e:cf:36:e1:f2:da:ba:1a:3c:ad:2d:fa:88:6a:d8:
f5:7c:8e:84:f8:f6:92:db:8a:9e:59:dd:41:3a:23:
6c:1d:de:f6:fe:9f:f1:96:7e:65:d4:cf:74:9a:0a:
e6:ab:fc:3a:96:02:2f:31:01:eb:2d:9b:2d:9b:b7:
de:37:92:6d:9c:c4:40:60:03:b3:f7:be:e3:8b:00:
b7:f8:08:8e:f5:55:61:97:6f:ef:31:f6:3f:bc:fa:
df:a5:38:81:34:bc:c8:c8:3c:04:bf:1a:55:a2:7b:
04:aa:0f:fb:dd:15:47:0d:58:7a:6c:1d:24:0f:c1:
25:e1:c2:a0:4a:72:e4:b8:de:bf:81:07:a9:51:e9:
76:d7:fb:1f:38:0e:ed:a1:15:f8:a5:9c:5f:63:3e:
c7:35:00:0a:32:2b:8d:ab:50:63:1c:28:d7:1a:c6:
40:38:ae:98:71:48:88:31:8e:ca:4e:f0:81:86:da:
da:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:3A:D7:27:6E:CA:D4:28:A1:BC:A9:C5:C7:86:4E:9A:90:28:1A:E0
X509v3 Authority Key Identifier:
keyid:84:5D:88:E0:A2:15:14:5F:36:7D:93:04:BF:3F:71:AE:E8:EB:4C:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hF2I4KIVFF82fZMEvz9xrujrTC0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:ed:60:e2:c9:05:3d:a3:6c:54:8b:58:43:cd:4c:cd:74:76:
0a:49:d9:b1:70:38:34:84:df:e1:a7:57:7f:ed:d1:0a:50:8f:
fc:f1:05:ca:f3:6f:62:77:00:38:62:0d:5c:66:22:57:ba:58:
60:f3:e5:30:81:3a:1b:34:09:52:7e:05:e4:03:1d:29:2f:df:
64:f0:fa:f9:1f:99:9b:5d:16:7b:97:8e:8e:05:d9:3e:aa:ce:
3e:39:ed:37:65:4b:8c:98:1f:02:05:d6:79:6d:a9:5e:1d:47:
6a:65:b6:15:e9:d8:62:ad:bc:ab:40:51:7b:0c:06:1a:d8:da:
8f:52:b7:32:55:93:c6:b7:a1:33:b2:9f:ce:33:19:44:f3:3a:
f5:fb:2b:03:2e:7b:76:d1:a4:44:08:7f:61:9f:30:7e:c3:75:
aa:f5:8b:08:e1:fe:34:20:c6:da:dc:81:24:a8:c1:d8:43:8e:
50:9a:a3:44:49:2a:42:40:c8:cc:64:2c:f0:e4:5a:6d:f3:71:
0e:cb:d4:42:7f:bf:06:47:35:cc:96:2b:27:8e:1e:4d:77:c7:
af:5a:69:fd:6d:9f:24:f8:0b:38:56:9b:ed:93:92:18:af:d0:
7f:95:1f:bc:00:ab:67:0d:33:24:8a:89:21:d0:1b:84:8d:e8:
1c:7a:ae:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:11:26 2026 by rpki-client