
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft
File: Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft (raw, json)
Hash identifier: jx6HgaregRI30j2juXMgrfONTHewFBSpRSCosaTyUHQ=
Subject key identifier: 0E:2F:65:62:09:C5:2A:E7:70:57:59:35:5B:D5:9C:C2:1B:2C:B5:73
Authority key identifier: 1D:EB:B7:37:1A:B9:7B:B9:F3:A9:06:EB:07:D5:91:C9:CF:38:8D:5D
Certificate issuer: /CN=A91CFA8D/serialNumber=1DEBB7371AB97BB9F3A906EB07D591C9CF388D5D
Certificate serial: 079C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Heu3Nxq5e7nzqQbrB9WRyc84jV0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft
Manifest number: 0795
Signing time: Fri 12 Jun 2026 21:34:16 +0000
Manifest this update: Fri 12 Jun 2026 21:34:15 +0000
Manifest next update: Fri 19 Jun 2026 21:34:15 +0000
Files and hashes: 1: Heu3Nxq5e7nzqQbrB9WRyc84jV0.crl (hash: eGuH7NdYYTfebQkbwlS3Pt+pQV5BXdu3mFr3sUhiXus=)
2: 6AA36A7E564D11EB8B387024C4F9AE02.roa (hash: EjQAXg2usCcTUh9gyvVBrkzQeLYgfkd976KZ0ehXsBM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.crl
rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Heu3Nxq5e7nzqQbrB9WRyc84jV0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 21:34:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1948 (0x79c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFA8D, serialNumber=1DEBB7371AB97BB9F3A906EB07D591C9CF388D5D
Validity
Not Before: Jun 12 21:34:15 2026 GMT
Not After : Jun 19 21:34:15 2026 GMT
Subject: CN=6a2c7b58-0ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6d:87:16:b5:1f:34:41:35:d9:ea:11:6e:6a:
26:05:ec:6b:fe:1f:18:35:b8:ee:a6:1a:32:53:ee:
b0:a7:ec:21:19:bc:71:9b:1d:69:bc:e0:70:22:ed:
d3:c3:9e:cb:3c:93:1e:03:c5:8b:b1:99:77:29:1c:
55:6f:00:eb:7f:bb:d1:ab:2d:db:23:1b:58:66:b7:
45:09:2c:ba:50:62:12:25:97:ce:d1:1d:0c:e3:34:
03:a1:a2:ef:40:69:a9:b5:26:49:fd:ff:44:1b:6d:
01:71:5a:cf:70:94:d6:9a:53:37:33:11:f9:0d:31:
6a:c2:bd:62:ad:74:e0:58:ef:c4:19:50:ca:30:78:
e4:53:92:ad:73:e7:31:a0:99:b0:ff:c0:06:f0:81:
c4:6c:b5:47:57:7a:f8:00:b0:04:43:da:ef:17:ee:
ae:bd:16:1c:e0:1a:3c:83:0f:5d:a5:04:f4:ed:cc:
77:b6:3c:ca:0f:07:00:27:9e:37:29:02:3e:e4:5f:
ad:62:df:87:4a:b1:a1:83:e6:0c:3d:f2:db:33:5e:
68:6d:45:eb:09:8f:3a:b6:a7:b7:89:fa:53:e0:a6:
c1:a0:25:02:bd:0b:26:a7:fa:c7:20:cc:83:cd:46:
6d:74:9d:41:d7:9b:3b:43:9f:64:89:1a:41:69:28:
9d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:2F:65:62:09:C5:2A:E7:70:57:59:35:5B:D5:9C:C2:1B:2C:B5:73
X509v3 Authority Key Identifier:
keyid:1D:EB:B7:37:1A:B9:7B:B9:F3:A9:06:EB:07:D5:91:C9:CF:38:8D:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Heu3Nxq5e7nzqQbrB9WRyc84jV0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:6e:5c:2e:aa:f0:3a:3b:a3:b4:e9:ab:72:e3:4c:85:6b:7a:
76:2d:b3:b9:3e:f2:cd:f1:5e:94:99:03:d5:f8:29:ee:d9:d0:
0d:01:82:a2:d3:db:c8:cb:e2:d8:67:3f:ac:27:00:3e:af:56:
8b:46:f8:4e:f5:c5:5c:2f:8e:89:7f:1d:1d:05:16:0a:61:56:
fe:25:d8:82:28:ea:77:99:bd:00:39:89:bf:11:8f:1b:97:4a:
91:47:8e:54:7b:da:15:70:05:26:00:1e:7b:fa:84:a7:f8:9b:
d4:09:65:76:7d:29:61:db:01:2d:6b:fb:96:d7:99:32:39:e7:
8d:23:00:20:fb:22:0a:97:2a:aa:bf:77:a6:3d:c6:68:a7:34:
09:2f:93:f2:43:1f:4e:50:5a:ab:0b:8d:d4:30:87:6f:0c:20:
21:40:e7:8f:dc:61:34:4a:c0:81:e3:b6:14:96:69:2d:14:77:
c7:a4:4f:40:b8:93:02:1e:9c:7d:c5:13:a1:7b:72:71:c1:2e:
46:b2:d4:e7:25:18:26:e4:14:e8:61:55:c6:65:5c:fc:61:13:
5e:19:88:94:c7:47:50:dd:c3:3f:a6:6e:c8:3c:1e:1b:78:08:
26:11:a6:1e:fd:a3:de:fe:8b:d4:c0:b3:e2:a7:1d:42:e1:e9:
bb:51:ae:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:58:41 2026 by rpki-client