
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.mft
File: hhe5_iqn_uIl8uDS3IdkCYE33m0.mft (raw, json)
Hash identifier: ahmMUtsZ0uzKUtw69g0TOrLnD34z7oxLRYBbss9Y/tI=
Subject key identifier: AD:CA:31:B7:6D:E8:D6:94:BC:69:71:8C:D4:F8:E2:F2:41:4D:0E:30
Authority key identifier: 86:17:B9:FE:2A:A7:FE:E2:25:F2:E0:D2:DC:87:64:09:81:37:DE:6D
Certificate issuer: /CN=A9117715/serialNumber=8617B9FE2AA7FEE225F2E0D2DC8764098137DE6D
Certificate serial: 0AE7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hhe5_iqn_uIl8uDS3IdkCYE33m0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.mft
Manifest number: 0ADD
Signing time: Thu 08 Oct 2026 19:31:29 +0000
Manifest this update: Thu 08 Oct 2026 19:31:28 +0000
Manifest next update: Thu 15 Oct 2026 19:31:28 +0000
Files and hashes: 1: hhe5_iqn_uIl8uDS3IdkCYE33m0.crl (hash: /qDSlXYlk4EPcy/4XNqpnyUCDn8ppwzMwK6BefaO6rY=)
2: E118A9DA7CB911EABD07CE5EC4F9AE02.roa (hash: IQxEBmP4et/Kr7uKG8HCuWwAUdMBf+1SeFtUWAGK3LQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.crl
rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hhe5_iqn_uIl8uDS3IdkCYE33m0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 19:31:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2791 (0xae7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117715, serialNumber=8617B9FE2AA7FEE225F2E0D2DC8764098137DE6D
Validity
Not Before: Oct 8 19:31:28 2026 GMT
Not After : Oct 15 19:31:28 2026 GMT
Subject: CN=6ac7ef90-a102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5e:27:4d:1d:6e:04:bc:45:97:fc:cf:6f:f5:
43:5e:a5:cb:fd:7f:03:64:ec:e0:46:f3:a7:d2:9a:
73:6f:93:c7:f6:e9:97:55:45:d7:31:50:2b:d5:1b:
6b:03:79:6d:0b:2e:60:9c:7d:24:51:e7:51:a6:e0:
0d:26:20:46:77:30:d6:39:c5:57:eb:a4:60:d5:fc:
6b:a2:60:7d:60:cc:ac:94:0e:02:ff:8b:df:ea:88:
92:27:ff:99:7a:86:1f:cd:42:5b:91:9b:08:2b:e3:
62:23:8f:27:a0:68:39:55:8d:e0:e8:ae:9f:0e:83:
7e:4a:8d:c2:9b:5a:af:39:aa:5a:c6:4c:e0:eb:bc:
df:3e:c0:fc:2b:59:90:19:b1:88:1d:33:dd:e9:89:
05:b3:ac:f2:49:01:76:c9:dc:52:6c:52:eb:e3:97:
70:94:3a:4d:6a:e0:bd:16:27:84:a2:f8:7d:ef:d4:
df:c5:4b:da:48:7b:1c:0a:80:b1:b8:7b:85:6d:b0:
36:92:0b:63:40:c8:10:30:20:61:bb:e9:c7:71:20:
77:b3:b6:e3:db:27:e1:35:b9:5d:4d:41:fd:eb:63:
90:18:a8:50:76:ac:31:a2:f6:e1:e4:71:72:73:4f:
d3:72:ea:59:84:38:d9:3d:08:39:5c:90:06:54:a2:
86:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:CA:31:B7:6D:E8:D6:94:BC:69:71:8C:D4:F8:E2:F2:41:4D:0E:30
X509v3 Authority Key Identifier:
keyid:86:17:B9:FE:2A:A7:FE:E2:25:F2:E0:D2:DC:87:64:09:81:37:DE:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hhe5_iqn_uIl8uDS3IdkCYE33m0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:8d:a6:9e:55:16:75:cb:29:7d:5c:6b:87:db:64:7d:33:c1:
ab:bb:e5:48:9b:77:08:7c:a2:e6:69:70:a9:5d:af:91:6d:e7:
1b:c2:4c:e1:a3:de:71:74:af:29:a6:e8:16:32:30:b5:f9:9f:
76:e7:ec:b5:44:08:ba:16:0c:9e:70:7b:a8:b6:ac:25:5c:b0:
98:92:85:2f:4c:09:fa:7e:72:30:34:8b:58:86:af:6b:2a:18:
48:d2:5b:5e:aa:e3:bf:42:9c:5b:0f:7c:67:fb:90:25:1d:75:
46:61:b6:dd:d3:11:92:ef:ca:6d:f7:f6:54:76:d6:06:91:4b:
4a:87:89:05:68:a8:c4:6d:40:63:0e:90:c0:eb:31:a5:e7:f1:
06:a2:c6:a5:38:ad:fa:fe:d3:07:e2:5e:33:11:c6:bc:fe:60:
8e:5f:96:12:d4:43:58:b4:2d:5a:2e:d2:2b:dc:3e:5d:df:ea:
27:e3:0b:4a:61:68:d4:26:90:52:9e:ac:8c:80:5e:a6:d0:af:
cb:a6:b3:e6:98:36:0b:47:94:84:fe:5a:af:f3:78:17:8e:30:
d8:e0:70:08:e5:76:e6:d2:5c:4e:d7:23:38:96:c1:f6:ec:06:
99:5b:45:bc:f0:49:82:c0:5b:98:c1:ba:01:b6:04:16:72:cc:
8f:3c:4e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 09:32:33 2026 by rpki-client