
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft
File: hF2I4KIVFF82fZMEvz9xrujrTC0.mft (raw, json)
Hash identifier: xT+ymeQrAXpm0ph1Zg4QnTqhq5NzbS8c7kEBReoDEp8=
Subject key identifier: 8E:25:5E:4E:D1:C3:AF:1E:29:57:C8:18:1E:B0:A3:AD:54:0E:ED:DD
Authority key identifier: 84:5D:88:E0:A2:15:14:5F:36:7D:93:04:BF:3F:71:AE:E8:EB:4C:2D
Certificate issuer: /CN=A9194AE2/serialNumber=845D88E0A215145F367D9304BF3F71AEE8EB4C2D
Certificate serial: 0189
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hF2I4KIVFF82fZMEvz9xrujrTC0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft
Manifest number: 0172
Signing time: Sat 13 Jun 2026 04:47:06 +0000
Manifest this update: Sat 13 Jun 2026 04:47:06 +0000
Manifest next update: Sat 20 Jun 2026 04:47:06 +0000
Files and hashes: 1: hF2I4KIVFF82fZMEvz9xrujrTC0.crl (hash: FDHvqpPuRd1eq5MnnNPj0l1ZR2AKhy081gMItKYnD30=)
2: 2042987C6C4411EF9B263275C4F9AE02.roa (hash: 9GZpU2PHliAK9NY+OWOq5Tt+JHpwX/IWIj0455bKALU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.crl
rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hF2I4KIVFF82fZMEvz9xrujrTC0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 04:47:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 393 (0x189)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194AE2, serialNumber=845D88E0A215145F367D9304BF3F71AEE8EB4C2D
Validity
Not Before: Jun 13 04:47:06 2026 GMT
Not After : Jun 20 04:47:06 2026 GMT
Subject: CN=6a2ce0ca-af1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9b:90:a2:26:d2:7d:6a:4e:87:20:c9:28:e1:
02:52:08:04:8d:1e:cd:8d:13:a4:20:18:c9:50:7c:
e2:53:8a:15:87:bb:9b:42:43:37:bf:90:77:ed:77:
d5:1d:39:7d:0a:35:6f:8b:18:33:88:79:54:e9:bc:
c6:ec:3a:63:4c:70:03:a6:46:1a:0e:b7:a7:f7:37:
c3:22:4b:7d:dd:a7:ca:f2:0f:ae:a9:a0:a5:e6:a7:
1d:4f:bb:cb:d4:8b:d5:bc:10:5c:74:33:1b:1d:46:
a0:99:85:bf:b3:46:c3:4c:42:18:9a:93:ce:a5:66:
45:ea:f9:1b:0a:a4:00:58:04:7d:0f:47:2a:ad:47:
5a:91:ba:fd:f7:bf:c5:dd:6c:af:29:d0:02:a2:3e:
af:43:f3:ac:2b:09:99:91:fc:c9:dc:84:41:56:79:
f6:2b:d4:7b:4e:02:57:c3:97:90:e8:11:fc:23:d4:
a0:9b:41:fe:71:11:7f:c4:d5:e0:1a:d7:77:f5:c2:
e7:75:6c:72:03:7d:37:f0:d5:cc:3b:ea:9b:2d:3e:
9c:83:df:c3:db:5d:44:79:81:29:67:6a:27:96:2f:
bb:46:2b:8a:15:b6:58:70:d6:85:29:c9:5d:05:d9:
5a:0a:7c:8b:b5:a8:63:4e:17:51:ae:cd:ef:bc:29:
3c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:25:5E:4E:D1:C3:AF:1E:29:57:C8:18:1E:B0:A3:AD:54:0E:ED:DD
X509v3 Authority Key Identifier:
keyid:84:5D:88:E0:A2:15:14:5F:36:7D:93:04:BF:3F:71:AE:E8:EB:4C:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hF2I4KIVFF82fZMEvz9xrujrTC0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:ca:cb:b9:39:26:0e:c4:14:59:64:d7:ce:bf:8c:0c:60:be:
eb:97:ad:b5:24:b0:8b:d3:da:fc:9d:86:30:09:47:ca:0c:32:
8f:a1:45:75:4f:85:e6:e3:0a:cb:6d:7e:54:57:3b:4d:cb:c3:
df:4c:e9:52:57:0b:f0:a7:e2:f4:22:06:d5:4d:aa:be:9e:d7:
4b:49:24:1a:50:34:c2:ec:50:4e:a5:7b:dd:70:a4:5f:8d:f7:
de:3f:47:38:db:41:6a:9d:ad:70:dc:b1:24:51:d7:20:0b:b8:
31:67:42:a9:01:88:31:ef:b4:f1:5d:23:37:2c:a7:c3:61:7f:
81:17:eb:12:08:5b:f7:15:9a:46:3e:0b:57:2b:65:36:c9:f4:
62:7c:1d:83:9f:0a:a7:9f:8c:74:18:df:15:d8:35:81:1a:cc:
fb:ad:ed:66:a1:b9:34:52:27:c1:69:c3:f1:53:6a:67:0d:6e:
f2:18:e2:00:5c:b8:1d:10:b5:07:f6:6a:fe:57:85:5e:16:ae:
84:fe:5a:5b:ca:31:ba:7f:1d:02:23:8b:11:d1:92:ca:f0:32:
e3:b5:5e:9a:e8:fd:5c:f9:f8:36:cf:9e:43:16:36:a4:f9:9c:
f3:63:8c:17:8f:04:65:1b:b3:af:59:5e:2d:52:c2:3e:20:62:
0a:ad:a5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:50:14 2026 by rpki-client