
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.mft
File: hhe5_iqn_uIl8uDS3IdkCYE33m0.mft (raw, json)
Hash identifier: Cc5f/Xb+RbobB7iN9xUNDfC5a+UwjWXmYkmoSiGl3lQ=
Subject key identifier: 3D:B1:39:C7:DE:AB:D5:1B:39:3C:09:F5:E8:C1:8F:02:B7:81:5E:5A
Authority key identifier: 86:17:B9:FE:2A:A7:FE:E2:25:F2:E0:D2:DC:87:64:09:81:37:DE:6D
Certificate issuer: /CN=A9117715/serialNumber=8617B9FE2AA7FEE225F2E0D2DC8764098137DE6D
Certificate serial: 0A6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hhe5_iqn_uIl8uDS3IdkCYE33m0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.mft
Manifest number: 0A65
Signing time: Wed 18 Feb 2026 19:11:36 +0000
Manifest this update: Wed 18 Feb 2026 19:11:35 +0000
Manifest next update: Wed 25 Feb 2026 19:11:35 +0000
Files and hashes: 1: hhe5_iqn_uIl8uDS3IdkCYE33m0.crl (hash: ztrsmPe+a9tOFa9UlnNHYah1q8dT9e1EBx9rS8iL04o=)
2: E118A9DA7CB911EABD07CE5EC4F9AE02.roa (hash: QwIma1yY7YkOQP5MP7P6PHkUn+CQDErkQ0yx5EKSwl8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.crl
rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hhe5_iqn_uIl8uDS3IdkCYE33m0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 19:11:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2669 (0xa6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117715, serialNumber=8617B9FE2AA7FEE225F2E0D2DC8764098137DE6D
Validity
Not Before: Feb 18 19:11:35 2026 GMT
Not After : Feb 25 19:11:35 2026 GMT
Subject: CN=69960ee8-94fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ec:c7:58:54:13:c1:97:4c:b6:78:26:14:1b:
23:d7:67:ee:da:99:63:d5:cd:34:59:9d:e5:9b:d3:
38:1c:82:37:c2:e7:20:64:27:cc:55:df:cc:f3:5c:
96:47:68:42:a7:06:5e:28:11:cb:22:5b:f5:6c:2b:
81:d6:fc:b0:76:bb:8b:09:67:5b:89:fe:f3:fe:ca:
a7:d3:96:18:66:44:d6:fd:25:a9:98:1b:49:82:f2:
ff:05:08:63:79:7f:2e:cc:89:4a:21:a4:0f:38:14:
56:c6:38:26:a8:0e:c0:8e:1a:98:db:1f:94:b4:7e:
9e:1d:63:f5:1e:8d:7d:14:2d:03:0a:d0:a0:e6:f0:
bb:a2:61:72:f3:9c:88:ef:65:fe:40:c3:44:df:1e:
69:cc:4b:23:e9:d9:2e:43:ba:9a:7f:0c:91:b2:b9:
dc:45:9b:00:25:c8:87:3c:1f:86:77:f6:af:6d:ed:
be:bd:d8:ed:88:80:08:da:31:e1:2f:4a:31:59:bf:
4b:12:00:21:c7:32:cb:57:4d:99:02:1d:be:20:d6:
97:9c:78:6d:80:77:f3:da:a6:e7:08:a7:44:dc:55:
e7:04:53:21:81:0f:cb:c8:27:d7:28:fa:69:5e:7c:
6b:ca:44:1c:3e:ca:08:ee:45:99:30:f1:b4:e4:db:
f0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B1:39:C7:DE:AB:D5:1B:39:3C:09:F5:E8:C1:8F:02:B7:81:5E:5A
X509v3 Authority Key Identifier:
keyid:86:17:B9:FE:2A:A7:FE:E2:25:F2:E0:D2:DC:87:64:09:81:37:DE:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hhe5_iqn_uIl8uDS3IdkCYE33m0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:6d:53:58:1e:b0:1f:4f:39:40:ae:48:50:89:ba:87:c9:c0:
a7:38:c9:bc:fa:7b:b0:09:79:aa:4b:49:ff:59:d8:0d:24:a2:
6a:ac:fc:79:a2:fd:05:a3:dc:de:ab:2a:b9:bd:55:34:11:ee:
96:a6:20:38:69:7e:52:f2:e7:f3:42:ff:64:4a:6b:dc:94:2c:
96:b6:5c:52:d2:d3:25:bd:e8:de:f7:a5:a1:74:05:65:d4:aa:
53:cc:f1:92:88:4e:cd:3d:05:03:9e:da:39:31:ab:d6:f7:bc:
37:98:7f:f0:18:96:2d:43:9b:64:0e:90:58:b0:af:b1:b8:2c:
17:c7:27:57:61:e5:ae:35:63:ec:83:cb:37:49:21:2e:3f:3f:
17:07:88:79:a8:ad:dd:84:70:bd:b7:be:2b:8c:21:1b:60:9a:
b2:10:09:15:15:bd:cf:48:8c:26:3a:fa:ba:b1:7a:5d:4a:7c:
91:4c:d8:43:ca:78:65:ea:df:2a:03:11:2d:c0:51:35:d7:36:
4e:9b:4e:52:80:58:fb:6c:26:43:53:67:97:17:a7:e1:90:8d:
33:db:4c:23:32:a5:eb:08:8d:7c:7b:2c:20:5f:e5:1f:15:fd:
09:1a:8b:ec:c5:cf:1b:85:d7:aa:72:62:bb:53:61:77:7c:ae:
c7:71:91:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:27:07 2026 by rpki-client