
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft
File: h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft (raw, json)
Hash identifier: sza0LNRiocTtimjVRPtmWninCNYq64VZsb7wqqoJj0k=
Subject key identifier: A3:9B:DB:24:0A:D9:98:CE:D6:B1:65:5A:DC:23:88:64:A0:63:D5:BC
Authority key identifier: 87:DA:44:A4:CF:83:9C:38:81:C6:BC:38:68:3C:CD:C3:08:CA:7C:E9
Certificate issuer: /CN=A919D180/serialNumber=87DA44A4CF839C3881C6BC38683CCDC308CA7CE9
Certificate serial: 0127
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9pEpM-DnDiBxrw4aDzNwwjKfOk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft
Manifest number: 0115
Signing time: Sat 13 Jun 2026 06:11:45 +0000
Manifest this update: Sat 13 Jun 2026 06:11:44 +0000
Manifest next update: Sat 20 Jun 2026 06:11:44 +0000
Files and hashes: 1: h9pEpM-DnDiBxrw4aDzNwwjKfOk.crl (hash: jW5mioEmmSYuQGrTlQ0Q+uA9BrMGC1S7PllCrIQdFPw=)
2: C8D5160AE75E11EF97E59E40C4F9AE02.roa (hash: P4tVkKssSKb9dDeUTAtVa6Ci3IKXk3pij9DywFDumYU=)
3: 8A991E5AD6DC11EF9E9B2B15C4F9AE02.roa (hash: XNgGFgwjyc461p4JNKdvJk4zW9gJQhSshCp4+fjMbAY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.crl
rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9pEpM-DnDiBxrw4aDzNwwjKfOk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 06:11:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 295 (0x127)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D180, serialNumber=87DA44A4CF839C3881C6BC38683CCDC308CA7CE9
Validity
Not Before: Jun 13 06:11:44 2026 GMT
Not After : Jun 20 06:11:44 2026 GMT
Subject: CN=6a2cf4a0-93cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:c7:10:19:de:5c:ab:28:84:c9:57:d4:88:e6:
7b:a1:17:84:d7:8b:a3:23:d6:e2:eb:44:3f:6e:70:
48:6b:62:8a:f6:c0:e3:af:c0:9a:7d:91:b5:f6:33:
61:59:2d:6f:b4:40:59:a3:65:6c:35:72:37:3c:23:
49:b4:48:66:99:bf:a9:b0:ec:dd:d8:52:6b:7d:99:
32:c6:cf:48:55:12:fe:58:b4:7c:2e:70:be:f5:47:
ed:12:b9:d9:0a:85:d2:e0:40:7c:2c:09:4d:a5:82:
d1:a9:7d:93:27:e5:79:df:75:12:b2:3b:e2:11:74:
01:a6:0a:fa:f8:cb:15:47:1c:f3:c9:97:1f:ef:86:
9d:e8:c4:3c:42:8a:45:96:6b:c9:6c:7e:d4:3c:c7:
17:18:c3:69:bf:f5:94:34:00:c9:0a:78:d4:df:82:
c9:03:39:d6:44:9d:d8:fb:37:10:c5:07:5f:9b:bd:
d7:84:9a:8b:f7:7e:41:47:d7:9d:87:57:06:67:db:
60:ed:44:85:ba:08:12:b6:27:03:cb:fd:d3:5c:e6:
51:e5:4f:b6:fe:68:3f:c0:e6:3c:cf:90:b9:1f:0d:
b4:e7:a1:95:69:4b:60:ae:4b:9e:7c:72:f9:a5:f7:
4c:e5:05:b0:34:30:49:e9:a1:d2:89:12:70:19:b3:
c2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:9B:DB:24:0A:D9:98:CE:D6:B1:65:5A:DC:23:88:64:A0:63:D5:BC
X509v3 Authority Key Identifier:
keyid:87:DA:44:A4:CF:83:9C:38:81:C6:BC:38:68:3C:CD:C3:08:CA:7C:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9pEpM-DnDiBxrw4aDzNwwjKfOk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:13:f6:f2:d1:fd:5c:29:71:74:7e:1d:b0:e4:ae:ae:fc:15:
e9:ae:92:ac:fd:2f:66:b9:c9:7e:e7:12:80:16:35:e4:45:bc:
f0:02:49:d0:46:b1:a2:02:b5:d6:90:f8:34:bd:4a:6a:5a:b3:
27:e2:63:32:e2:07:18:e7:cb:78:95:97:40:f8:a9:03:a0:67:
1a:8c:10:60:2b:90:75:2c:bb:64:40:1a:ff:5e:47:bd:e8:47:
76:14:9b:c2:f3:ff:96:b6:35:ee:b6:27:be:af:ad:aa:01:33:
1e:33:2b:98:1a:79:c7:76:67:3d:32:eb:32:a9:c1:7a:90:17:
c9:25:0f:41:df:eb:88:1b:e7:06:b1:cc:4c:cb:ff:42:ea:ad:
9e:db:1f:75:46:09:9b:79:76:ce:c7:ae:ac:ef:55:5c:d9:90:
2a:c5:26:d4:33:b5:6e:97:9f:f7:39:a9:2a:9c:af:ea:3b:81:
19:be:60:19:7f:40:29:01:72:3f:ac:75:f8:ec:01:89:37:1b:
be:68:82:3b:bb:eb:9e:d6:4c:e7:30:25:be:fc:77:1d:4e:3d:
07:00:c0:84:13:de:d4:1d:61:28:f0:c0:40:87:b9:aa:5d:c4:
74:01:68:b5:bf:31:bc:2d:ae:eb:72:29:6c:28:94:5a:10:4b:
8d:7f:77:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:24:58 2026 by rpki-client