
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.mft
File: hGiwIZf8m3cK-EBVe_QVoLYTgg0.mft (raw, json)
Hash identifier: nvy1iIt2v/hNys3f4vVOodT4Lp1bY15O2Aa4lOOzAi0=
Subject key identifier: E5:C1:A3:B5:0B:69:79:DC:85:8D:33:51:C0:DD:35:DE:2F:65:70:5E
Authority key identifier: 84:68:B0:21:97:FC:9B:77:0A:F8:40:55:7B:F4:15:A0:B6:13:82:0D
Certificate issuer: /CN=A9198767/serialNumber=8468B02197FC9B770AF840557BF415A0B613820D
Certificate serial: 01C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGiwIZf8m3cK-EBVe_QVoLYTgg0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.mft
Manifest number: 01B4
Signing time: Mon 02 Mar 2026 02:22:17 +0000
Manifest this update: Mon 02 Mar 2026 02:22:14 +0000
Manifest next update: Mon 09 Mar 2026 02:22:14 +0000
Files and hashes: 1: hGiwIZf8m3cK-EBVe_QVoLYTgg0.crl (hash: VSHKEzLH8ultAMiGLwmzuafRcU+FHiVJs9na9JjwGq4=)
2: 7BABB4BE884C11EE81C71A38C4F9AE02.roa (hash: HevTC5ZTqWMZdb2lCr7Xxf/uzITO4Vvq7vTDaOoX1vI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.crl
rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGiwIZf8m3cK-EBVe_QVoLYTgg0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:22:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 448 (0x1c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9198767, serialNumber=8468B02197FC9B770AF840557BF415A0B613820D
Validity
Not Before: Mar 2 02:22:14 2026 GMT
Not After : Mar 9 02:22:14 2026 GMT
Subject: CN=69a4f458-65fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7b:23:d8:96:c2:bc:e9:56:4c:78:98:56:51:
83:1c:ff:ab:ae:62:77:0f:6c:ad:0c:35:ad:ce:19:
27:ff:fd:67:9a:3a:81:f1:b7:c3:b2:35:ec:2c:1a:
fb:d4:40:70:96:cc:80:7f:c0:7f:b1:39:58:99:09:
0a:40:16:60:cb:d3:40:f7:69:8f:e2:89:ca:19:26:
e6:14:4a:f4:3d:61:d6:78:c5:cc:5a:fd:af:a6:08:
65:ad:50:e3:4a:e5:26:92:4d:05:7e:af:62:c9:e1:
80:d4:86:84:d6:6d:03:30:e7:69:ce:48:11:8e:e6:
90:26:42:c2:fe:d3:dd:a5:85:4f:e5:42:fc:c4:6b:
2f:54:15:7b:21:5d:6c:97:87:03:7c:37:5d:8f:75:
af:67:1b:a8:d2:f4:70:b9:e4:43:3c:3e:ba:35:8f:
4d:04:04:83:12:50:9b:48:df:5e:1c:28:6c:3f:68:
89:33:fa:e2:36:a0:2b:ee:45:b7:3b:16:57:6b:fc:
3d:dd:02:9f:4f:5e:63:80:60:a4:72:b5:e3:3a:c7:
62:32:7c:f6:f6:66:91:13:a9:27:50:9b:6d:36:d6:
4e:49:4c:be:a5:db:9b:90:4c:5b:af:a8:fc:b4:8c:
63:01:61:39:49:f5:86:89:a4:3f:48:0a:83:e6:49:
ae:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C1:A3:B5:0B:69:79:DC:85:8D:33:51:C0:DD:35:DE:2F:65:70:5E
X509v3 Authority Key Identifier:
keyid:84:68:B0:21:97:FC:9B:77:0A:F8:40:55:7B:F4:15:A0:B6:13:82:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGiwIZf8m3cK-EBVe_QVoLYTgg0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:81:fc:fa:0c:07:f5:61:ce:2b:46:7d:13:fe:a4:97:32:76:
bc:c9:d0:08:f6:7c:16:23:2f:09:13:61:12:bb:d6:7b:95:7f:
59:6f:55:b1:bc:10:5c:c8:13:37:e5:11:0c:01:59:e8:de:9e:
30:c9:c2:d2:67:eb:46:2f:16:6c:81:0e:4e:53:c2:7d:a9:3f:
b0:bb:38:65:aa:6b:9c:32:08:2d:40:a2:cb:52:4e:02:9d:74:
c8:13:d8:be:83:b4:15:f5:ab:73:25:c7:91:82:29:c0:cc:7c:
33:cf:05:2b:5e:39:38:c8:9d:d8:0f:65:ea:b3:9a:c9:05:25:
9e:00:77:72:40:56:c8:3d:62:a6:e6:3c:91:90:c4:76:1e:53:
bf:91:6f:16:5d:0e:d3:06:f4:b7:d6:19:f4:b8:1b:58:25:50:
5a:7b:d4:75:9e:df:ab:b3:a4:06:98:e5:19:2d:79:97:90:be:
6c:a1:5c:1d:5f:82:7b:15:1f:1e:66:cb:41:0a:6d:8e:06:c9:
72:11:1d:d5:5d:52:8c:11:a3:91:ad:d4:3f:77:1b:29:1d:c7:
a9:2a:9a:50:0e:9e:d3:7d:da:8c:3a:84:b6:eb:a2:30:95:63:
59:48:83:a1:7c:5d:c4:a9:b9:85:86:f1:f5:84:17:12:11:99:
6a:ad:66:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:25:52 2026 by rpki-client