
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.mft
File: Hr-HiCR2Rfmq8BbQIPTPwuITwpY.mft (raw, json)
Hash identifier: KP70r51ZfzRo44UVCgLdN6mRnUGtCzBPu2c4JlXOjFY=
Subject key identifier: 38:D7:CB:97:34:96:1E:A3:26:86:A9:0E:4F:59:8D:58:5C:23:E4:EB
Authority key identifier: 1E:BF:87:88:24:76:45:F9:AA:F0:16:D0:20:F4:CF:C2:E2:13:C2:96
Certificate issuer: /CN=A912C770/serialNumber=1EBF8788247645F9AAF016D020F4CFC2E213C296
Certificate serial: 84
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.mft
Manifest number: 81
Signing time: Sun 25 Oct 2026 08:07:03 +0000
Manifest this update: Sun 25 Oct 2026 08:07:02 +0000
Manifest next update: Sun 01 Nov 2026 08:07:02 +0000
Files and hashes: 1: Hr-HiCR2Rfmq8BbQIPTPwuITwpY.crl (hash: vPc7cHvw/mEuYtwsxcwRSKY2+34Bd068DK+yP59cQMc=)
2: C7FCC7D210DE11F18FBC6D5B083D8C67.roa (hash: ZJ2mGof4d8TGjIUSjiSJIxX88gLNKzRhctZ8YiDrvqI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.crl
rsync://rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 08:07:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132 (0x84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C770, serialNumber=1EBF8788247645F9AAF016D020F4CFC2E213C296
Validity
Not Before: Oct 25 08:07:02 2026 GMT
Not After : Nov 1 08:07:02 2026 GMT
Subject: CN=6addb8a7-9dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1f:b9:52:46:dd:fd:da:26:b3:b2:3e:f8:bb:
eb:bd:ce:a6:f2:76:58:ab:c4:58:aa:da:0f:27:82:
9c:76:35:2e:e7:de:27:e6:ff:f3:e9:62:d8:19:77:
6a:db:c4:1d:ed:cf:c1:53:81:94:9a:6f:fa:80:47:
a6:aa:5a:e7:43:e2:88:0a:94:6b:da:f4:14:dd:20:
69:1d:1c:13:b1:0f:64:ad:99:42:62:58:1f:24:b3:
8c:f7:33:39:43:a2:59:2a:68:87:aa:12:35:07:7b:
5f:4a:b0:f7:0e:fe:1b:1a:c5:75:f0:16:81:9c:4a:
60:f7:87:bb:45:d6:31:e5:b1:fd:67:97:0e:da:b5:
b8:56:b4:15:86:17:ff:84:45:a7:01:a6:80:70:c5:
49:86:93:ec:e0:47:d6:c2:18:a9:4c:f6:7f:0c:b8:
e1:23:3a:85:8b:eb:92:80:f4:66:51:03:25:2b:f8:
2c:b5:07:c2:3e:a7:5e:be:a2:71:da:3c:c9:51:f8:
1a:88:16:61:30:32:61:41:e1:8b:2b:28:d8:7a:31:
56:e9:13:19:7e:30:d1:99:55:01:7e:44:5a:da:87:
9a:dd:96:d5:c7:8b:39:0b:01:0d:7a:c5:c7:5c:7a:
ea:1b:e0:ed:e8:4c:07:1c:a5:a8:9b:ae:36:86:09:
59:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D7:CB:97:34:96:1E:A3:26:86:A9:0E:4F:59:8D:58:5C:23:E4:EB
X509v3 Authority Key Identifier:
keyid:1E:BF:87:88:24:76:45:F9:AA:F0:16:D0:20:F4:CF:C2:E2:13:C2:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:7d:2d:63:e1:c7:66:74:d1:43:4a:77:bc:be:8a:e8:c7:38:
98:07:1f:33:59:d8:05:ea:ca:0f:d2:23:a0:64:98:e2:e5:23:
97:5d:ee:23:e1:74:8e:f9:25:60:bb:44:db:c7:fa:e4:cf:b6:
e9:0a:b0:fc:64:4e:aa:c8:ee:26:16:b9:c9:b3:53:f8:65:1a:
d5:94:13:82:83:91:88:d2:34:77:b2:db:5a:b8:66:dc:78:31:
80:eb:ff:3a:d4:94:c8:ca:36:a7:9c:5e:56:38:76:86:bb:7a:
74:80:04:b2:b5:ab:ae:87:6d:bc:01:37:d8:6c:bb:8f:2c:d4:
c1:3d:21:fa:3b:fe:c4:a3:8f:17:76:80:2b:f3:cd:f0:a2:9e:
35:34:e7:d6:13:95:19:42:6e:89:e4:6d:29:49:6d:eb:e5:03:
52:76:73:c2:bd:a3:b5:94:7b:be:b4:24:96:d4:ee:a7:7f:f8:
c1:4c:d8:b4:5c:0e:9e:28:07:38:c8:20:28:c6:bc:9c:3a:b6:
1d:45:21:4f:0b:a1:e0:c9:ca:a8:d9:7d:56:55:af:e5:82:9a:
47:57:95:88:2d:a0:df:64:35:72:16:f5:9f:f2:15:85:44:c4:
b2:40:72:63:4a:c7:6a:95:ad:f3:6d:0c:b2:4d:f1:95:b6:00:
6a:ee:e7:ca
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkM3NzAxMTAvBgNVBAUTKDFFQkY4Nzg4MjQ3NjQ1RjlBQUYwMTZEMDIwRjRDRkMy
RTIxM0MyOTYwHhcNMjYxMDI1MDgwNzAyWhcNMjYxMTAxMDgwNzAyWjAYMRYwFAYD
VQQDEw02YWRkYjhhNy05ZGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApx+5Ukbd/doms7I++Lvrvc6m8nZYq8RYqtoPJ4KcdjUu594n5v/z6WLYGXdq
28Qd7c/BU4GUmm/6gEemqlrnQ+KICpRr2vQU3SBpHRwTsQ9krZlCYlgfJLOM9zM5
Q6JZKmiHqhI1B3tfSrD3Dv4bGsV18BaBnEpg94e7RdYx5bH9Z5cO2rW4VrQVhhf/
hEWnAaaAcMVJhpPs4EfWwhipTPZ/DLjhIzqFi+uSgPRmUQMlK/gstQfCPqdevqJx
2jzJUfgaiBZhMDJhQeGLKyjYejFW6RMZfjDRmVUBfkRa2oea3ZbVx4s5CwENesXH
XHrqG+Dt6EwHHKWom642hglZfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDjXy5c0
lh6jJoapDk9ZjVhcI+TrMB8GA1UdIwQYMBaAFB6/h4gkdkX5qvAW0CD0z8LiE8KW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzc3MC80QUNGOTZENjEw
REUxMUYxODE3MTkyNTcwODNEOEM2Ny9Ici1IaUNSMlJmbXE4QmJRSVBUUHd1SVR3
cFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL0hyLUhpQ1IyUmZtcThCYlFJUFRQd3VJVHdwWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
Qzc3MC80QUNGOTZENjEwREUxMUYxODE3MTkyNTcwODNEOEM2Ny9Ici1IaUNSMlJm
bXE4QmJRSVBUUHd1SVR3cFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABn0tY+HHZnTRQ0p3vL6K6Mc4mAcfM1nYBerKD9IjoGSY4uUjl13uI+F0jvkl
YLtE28f65M+26Qqw/GROqsjuJha5ybNT+GUa1ZQTgoORiNI0d7LbWrhm3HgxgOv/
OtSUyMo2p5xeVjh2hrt6dIAEsrWrrodtvAE32Gy7jyzUwT0h+jv+xKOPF3aAK/PN
8KKeNTTn1hOVGUJuieRtKUlt6+UDUnZzwr2jtZR7vrQkltTup3/4wUzYtFwOnigH
OMggKMa8nDq2HUUhTwuh4MnKqNl9VlWv5YKaR1eViC2g32Q1chb1n/IVhUTEskBy
Y0rHapWt820Msk3xlbYAau7nyg==
-----END CERTIFICATE-----
Generated at Mon Oct 26 11:44:42 2026 by rpki-client