
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft
File: h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft (raw, json)
Hash identifier: qinmGHKvhFTrdsfKDgRGZFqtOKgqpxCc23zH7jpTEFo=
Subject key identifier: 24:50:FF:8C:13:2F:11:16:F9:66:3B:85:B6:86:E2:55:9A:FF:FB:18
Authority key identifier: 87:DA:44:A4:CF:83:9C:38:81:C6:BC:38:68:3C:CD:C3:08:CA:7C:E9
Certificate issuer: /CN=A919D180/serialNumber=87DA44A4CF839C3881C6BC38683CCDC308CA7CE9
Certificate serial: 010B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9pEpM-DnDiBxrw4aDzNwwjKfOk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft
Manifest number: F9
Signing time: Fri 17 Apr 2026 06:08:19 +0000
Manifest this update: Fri 17 Apr 2026 06:08:18 +0000
Manifest next update: Fri 24 Apr 2026 06:08:18 +0000
Files and hashes: 1: h9pEpM-DnDiBxrw4aDzNwwjKfOk.crl (hash: T9MOHa7eTp8UwWKRB4MEF/y06AVYHY4Q3oho3r0qEAA=)
2: C8D5160AE75E11EF97E59E40C4F9AE02.roa (hash: P4tVkKssSKb9dDeUTAtVa6Ci3IKXk3pij9DywFDumYU=)
3: 8A991E5AD6DC11EF9E9B2B15C4F9AE02.roa (hash: XNgGFgwjyc461p4JNKdvJk4zW9gJQhSshCp4+fjMbAY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.crl
rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9pEpM-DnDiBxrw4aDzNwwjKfOk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:08:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 267 (0x10b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D180, serialNumber=87DA44A4CF839C3881C6BC38683CCDC308CA7CE9
Validity
Not Before: Apr 17 06:08:18 2026 GMT
Not After : Apr 24 06:08:18 2026 GMT
Subject: CN=69e1ce53-7f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d4:58:fd:b5:de:85:b9:3b:38:9c:29:66:9d:
82:ac:a8:89:78:3c:9e:10:f2:e9:5f:76:e8:87:74:
ef:7c:c7:e6:6b:c5:d8:86:a9:21:f5:51:ea:ec:57:
e7:3a:de:53:65:c3:48:56:14:83:24:fa:2d:f8:f5:
f4:90:99:c7:81:55:c2:91:b5:b1:9f:f8:a8:7b:36:
8e:bc:b9:fd:cb:40:8c:6a:12:78:16:35:5a:5d:cc:
51:59:51:51:cd:2a:5a:27:c2:0d:aa:46:ee:af:46:
92:6c:77:94:66:42:12:89:3d:04:28:13:c1:a4:67:
53:96:5e:1f:4b:2f:4c:50:24:62:ba:dd:7a:34:68:
26:73:2c:5f:35:94:97:ff:f9:81:73:a2:6d:10:d3:
e8:8d:13:73:1a:70:16:db:31:0b:d0:56:7e:90:38:
c1:e7:fe:f1:75:f0:fb:e8:17:d3:5b:d4:de:74:83:
7a:bd:01:72:a1:ac:98:77:21:ec:36:8c:70:42:b0:
26:0d:7c:e3:de:ad:3d:39:f2:72:25:df:17:60:8c:
91:0f:9d:6b:e9:e5:3f:98:29:fc:a3:fa:98:31:c9:
65:19:6f:1e:28:a1:11:ad:9f:5b:28:6b:8d:f9:80:
1c:fc:0d:35:2c:2c:4c:ad:25:7e:38:40:79:d4:56:
17:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:50:FF:8C:13:2F:11:16:F9:66:3B:85:B6:86:E2:55:9A:FF:FB:18
X509v3 Authority Key Identifier:
keyid:87:DA:44:A4:CF:83:9C:38:81:C6:BC:38:68:3C:CD:C3:08:CA:7C:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9pEpM-DnDiBxrw4aDzNwwjKfOk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:fb:39:b4:31:f5:2e:b4:7e:8b:27:41:4c:3d:29:1b:7d:cd:
c8:fe:37:0d:69:9d:c6:46:03:0f:72:11:14:99:40:1a:bd:62:
87:8d:e5:76:a1:c4:57:64:d9:1e:de:09:43:d6:96:13:bc:65:
98:7b:a4:f5:15:45:74:1d:5b:45:40:4b:34:d3:aa:f6:be:35:
7c:c1:51:a3:e5:69:66:52:40:3d:6a:23:2a:c3:60:07:4f:fc:
a4:37:7a:7f:6e:70:bc:d6:2a:e6:b5:d2:6d:7b:de:c4:f9:d5:
d4:89:f4:76:f9:9a:ff:17:0e:fc:39:67:23:59:e2:31:f5:32:
e7:6d:49:8a:4d:5d:ca:f1:d4:c6:6b:16:7c:b4:60:44:7c:b1:
66:3c:68:07:f1:8a:70:c3:64:08:2c:b2:c2:70:5e:e5:58:40:
84:63:ce:ac:8b:12:df:97:15:6e:b6:8a:5d:34:5d:47:f9:1c:
45:9a:e4:c5:41:73:3c:f4:3a:b7:27:b6:8b:b0:5c:f2:07:15:
60:8a:f6:f3:3c:d7:88:34:ca:4f:ed:f8:86:82:43:72:d3:9e:
5d:65:91:5d:8f:fc:28:0a:e9:63:8a:0f:35:7c:8e:98:70:e1:
d0:1e:34:65:10:3d:30:a7:f6:5c:d7:53:14:56:66:b9:63:24:
50:6b:4d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:21:59 2026 by rpki-client