
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.mft
File: hGiwIZf8m3cK-EBVe_QVoLYTgg0.mft (raw, json)
Hash identifier: bbDM4C+qYhx3kXwBB4zf7820QOD7pluN8wkpJiG+xJ8=
Subject key identifier: 86:7D:D9:F2:13:E2:D3:E6:87:C8:A6:22:AC:C9:5D:46:A0:45:FA:C2
Authority key identifier: 84:68:B0:21:97:FC:9B:77:0A:F8:40:55:7B:F4:15:A0:B6:13:82:0D
Certificate issuer: /CN=A9198767/serialNumber=8468B02197FC9B770AF840557BF415A0B613820D
Certificate serial: 01F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGiwIZf8m3cK-EBVe_QVoLYTgg0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.mft
Manifest number: 01EA
Signing time: Sat 13 Jun 2026 03:29:04 +0000
Manifest this update: Sat 13 Jun 2026 03:29:03 +0000
Manifest next update: Sat 20 Jun 2026 03:29:03 +0000
Files and hashes: 1: hGiwIZf8m3cK-EBVe_QVoLYTgg0.crl (hash: zNDHBGqgCJDrhqh8mdtAHDJhZiy7ai+3bhvFuKqsNVY=)
2: 7BABB4BE884C11EE81C71A38C4F9AE02.roa (hash: 9Cz73WT7Rn3Trdhhklo6EWl3uWAxMBB/0nYJ5e8QOZY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.crl
rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGiwIZf8m3cK-EBVe_QVoLYTgg0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 03:29:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 503 (0x1f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9198767, serialNumber=8468B02197FC9B770AF840557BF415A0B613820D
Validity
Not Before: Jun 13 03:29:03 2026 GMT
Not After : Jun 20 03:29:03 2026 GMT
Subject: CN=6a2cce7f-395e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d2:89:5f:56:f4:bc:bd:64:77:4f:6f:13:0c:
8f:15:8a:cd:cb:b6:07:f5:86:2d:de:8e:ed:40:d7:
2b:fe:5a:43:b2:d2:8c:65:6f:1c:a5:f8:05:91:58:
37:28:f6:de:5d:42:51:ad:ab:2e:ca:ad:6d:41:e1:
f3:2b:57:d2:2c:54:7b:aa:ce:cc:70:f2:37:a0:bc:
98:91:3c:aa:04:7c:66:8d:2a:dd:ad:5f:46:a9:cc:
20:9a:8b:65:05:c4:2c:77:20:fa:b2:fa:df:5d:d6:
84:a7:37:8a:d7:b6:a2:e0:a8:6a:5c:e0:ec:a6:9b:
b0:a6:2c:49:66:36:9b:8d:34:dc:2b:c6:2c:62:6c:
38:6d:a1:9f:71:ec:0d:4d:9a:1b:43:54:7f:5e:aa:
ec:7a:fa:d7:ed:bb:07:7b:0c:80:70:bb:65:c9:56:
99:f5:72:5c:0d:3f:a6:4a:88:56:b0:21:1b:fd:90:
b2:95:a3:1d:78:01:e6:6f:bc:07:5f:ac:e4:cf:3e:
1c:c0:64:5c:72:d2:69:d6:b5:5f:ad:18:31:9f:ab:
d5:e4:55:7b:e4:fe:99:2e:e8:b6:11:e3:bd:5b:f5:
a0:14:92:a7:b7:8b:37:e4:ed:e9:e8:4d:68:b3:08:
be:9e:27:12:65:d1:1d:8c:9f:63:20:66:19:c5:5c:
cb:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:7D:D9:F2:13:E2:D3:E6:87:C8:A6:22:AC:C9:5D:46:A0:45:FA:C2
X509v3 Authority Key Identifier:
keyid:84:68:B0:21:97:FC:9B:77:0A:F8:40:55:7B:F4:15:A0:B6:13:82:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGiwIZf8m3cK-EBVe_QVoLYTgg0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:b7:ad:21:12:a4:0f:18:c5:f8:0a:9e:5c:a8:d0:71:88:c2:
3d:55:95:f1:88:31:49:a4:7b:df:52:0b:c9:04:d6:d9:f1:73:
09:e3:9f:ba:da:af:6a:35:02:21:e4:d7:54:cb:14:c0:31:4c:
df:71:e0:ca:16:f0:14:d3:e1:cc:53:32:2a:30:31:f8:71:0b:
bf:aa:39:94:82:78:ae:45:fa:25:aa:f0:77:05:5c:e0:1f:65:
90:fc:e4:da:71:28:f0:47:b9:46:ea:2f:b3:3c:95:ca:20:ae:
32:6a:59:cf:e1:19:6e:94:d3:a7:96:c0:00:83:bd:7f:ee:93:
32:02:91:78:32:f9:b7:0f:9b:ef:b7:20:96:7f:f1:09:58:ad:
58:d7:0e:35:67:b4:25:72:32:bd:e7:47:ba:cf:87:4c:d4:6d:
4b:03:b6:02:40:f8:62:68:a1:cc:ff:88:a9:af:bf:3c:1a:c4:
6d:2b:d8:d1:d0:52:77:f3:a6:8f:f3:f1:7a:cc:cf:12:f7:34:
58:ce:78:b9:43:cb:ef:7e:90:4b:4f:e3:1c:ef:b6:91:de:78:
ad:be:7a:f1:ca:d1:ac:b7:21:7c:d8:9f:f6:83:28:b5:8b:b8:
1d:f4:8a:01:09:fb:59:f4:b7:2a:87:eb:70:37:2c:34:f7:ed:
0b:d9:69:9d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTg3NjcxMTAvBgNVBAUTKDg0NjhCMDIxOTdGQzlCNzcwQUY4NDA1NTdCRjQxNUEw
QjYxMzgyMEQwHhcNMjYwNjEzMDMyOTAzWhcNMjYwNjIwMDMyOTAzWjAYMRYwFAYD
VQQDEw02YTJjY2U3Zi0zOTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtdKJX1b0vL1kd09vEwyPFYrNy7YH9YYt3o7tQNcr/lpDstKMZW8cpfgFkVg3
KPbeXUJRrasuyq1tQeHzK1fSLFR7qs7McPI3oLyYkTyqBHxmjSrdrV9Gqcwgmotl
BcQsdyD6svrfXdaEpzeK17ai4KhqXODsppuwpixJZjabjTTcK8YsYmw4baGfcewN
TZobQ1R/XqrsevrX7bsHewyAcLtlyVaZ9XJcDT+mSohWsCEb/ZCylaMdeAHmb7wH
X6zkzz4cwGRcctJp1rVfrRgxn6vV5FV75P6ZLui2EeO9W/WgFJKnt4s35O3p6E1o
swi+nicSZdEdjJ9jIGYZxVzL9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIZ92fIT
4tPmh8imIqzJXUagRfrCMB8GA1UdIwQYMBaAFIRosCGX/Jt3CvhAVXv0FaC2E4IN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODc2Ny83QkM2MUQ4Mjg4
NEIxMUVFODE3RkI2N0ZDNEY5QUUwMi9oR2l3SVpmOG0zY0stRUJWZV9RVm9MWVRn
ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hHaXdJWmY4bTNjSy1FQlZlX1FWb0xZVGdnMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
ODc2Ny83QkM2MUQ4Mjg4NEIxMUVFODE3RkI2N0ZDNEY5QUUwMi9oR2l3SVpmOG0z
Y0stRUJWZV9RVm9MWVRnZzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAc7etIRKkDxjF+AqeXKjQcYjCPVWV8YgxSaR731ILyQTW2fFzCeOfutqvajUC
IeTXVMsUwDFM33HgyhbwFNPhzFMyKjAx+HELv6o5lIJ4rkX6JarwdwVc4B9lkPzk
2nEo8Ee5RuovszyVyiCuMmpZz+EZbpTTp5bAAIO9f+6TMgKReDL5tw+b77cgln/x
CVitWNcONWe0JXIyvedHus+HTNRtSwO2AkD4YmihzP+Iqa+/PBrEbSvY0dBSd/Om
j/PxeszPEvc0WM54uUPL736QS0/jHO+2kd54rb568crRrLchfNif9oMotYu4HfSK
AQn7WfS3KofrcDcsNPftC9lpnQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:01:42 2026 by rpki-client