
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
File: HXJckcDUci80AIjRN03S2vN9gxI.mft (raw, json)
Hash identifier: zhuSYT3mj3aCf8Qfn1H1vH3fkpMxK8ti27sP/7r0wMI=
Subject key identifier: BB:10:78:98:7F:47:FA:39:E2:92:96:11:BE:0D:07:21:E0:5C:67:22
Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
Certificate issuer: /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Certificate serial: 0718
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
Manifest number: 06EB
Signing time: Sun 06 Sep 2026 21:58:25 +0000
Manifest this update: Sun 06 Sep 2026 21:58:24 +0000
Manifest next update: Sun 13 Sep 2026 21:58:24 +0000
Files and hashes: 1: HXJckcDUci80AIjRN03S2vN9gxI.crl (hash: MBGGF4iWIp8f2tR3bUEiJffCKFwVoLSGlImsfIR9Hzc=)
2: 6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa (hash: p/TVTKAt5KdzhUbxLMpy828VFw5LwqckZkSH14Ik/o8=)
3: 6DD1144AACC311EBA28FAD5FC4F9AE02.roa (hash: zlHp90z6YflX6Zoion059ib8bnfEmetsjV8gpqhjGfE=)
4: 6E9FF116ACC311EBA28FAD5FC4F9AE02.roa (hash: 2BUIUgxvcNc8FKQNTEn2iBIeuclNjrnmHDRM3YAQDcg=)
5: 6BEA61CCACC311EBA28FAD5FC4F9AE02.roa (hash: v/foeEKordGhb9+twDBbACvfymVczEIMIF+8PlsYKI8=)
6: 6D407F66ACC311EBA28FAD5FC4F9AE02.roa (hash: JyfcUr1tWyuOITJhrtk9V3F9eH5PW2R7X5x70HXGjr4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl
rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 13 Sep 2026 21:58:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1816 (0x718)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119508, serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Validity
Not Before: Sep 6 21:58:24 2026 GMT
Not After : Sep 13 21:58:24 2026 GMT
Subject: CN=6a9de201-413b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4e:96:20:93:9b:87:84:3d:d8:d0:9f:36:e2:
19:cd:9b:43:af:fb:b4:c5:d6:05:23:88:c3:99:ab:
0e:3c:63:ad:d5:60:c6:74:d7:e0:a7:55:24:ad:1b:
a1:5c:e6:76:21:f5:c1:e7:5e:96:84:e1:13:fb:f6:
dc:8f:69:f7:3b:b4:0d:19:73:8f:fb:fc:cd:d2:a9:
66:b5:22:49:b7:69:96:40:89:16:32:9a:08:12:b4:
54:60:b4:e9:b4:90:08:6c:f9:67:c7:69:27:af:42:
65:89:9c:de:6d:0d:c3:9a:55:2e:25:ec:b5:9e:09:
3b:bf:1e:f1:a2:6e:68:ba:21:6d:75:61:65:3c:b2:
b1:2a:0f:77:4b:61:80:b3:f1:af:3a:26:16:62:35:
24:dd:8b:ba:58:47:1b:b0:f0:5e:ef:35:88:d4:f9:
6b:d2:78:35:f8:1d:d1:ab:9d:c3:59:ff:e5:86:45:
c9:84:05:30:7d:24:f7:df:7d:5a:2d:89:52:01:d6:
93:28:f0:80:5d:66:ee:2f:0e:ad:f4:fa:ac:7a:ab:
b2:d0:31:c7:ea:ce:be:c1:6b:24:6b:01:09:2d:95:
63:fc:ab:d1:76:c8:31:66:e4:7a:ed:01:6b:5a:77:
9c:27:9d:17:5c:7c:23:d2:67:74:fb:31:e9:ee:7b:
16:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:10:78:98:7F:47:FA:39:E2:92:96:11:BE:0D:07:21:E0:5C:67:22
X509v3 Authority Key Identifier:
keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:51:f7:c8:0c:a8:e5:ab:02:e8:28:b3:c3:e8:32:d2:3b:cf:
b7:f2:65:d3:87:8c:eb:6e:83:f8:fa:0c:1d:41:ae:28:9a:be:
d0:b0:18:89:c1:ff:e4:27:a6:e6:0e:7c:42:83:32:c2:e7:ed:
04:0c:20:c9:ea:3c:66:fa:b5:82:bf:3d:0c:b7:7f:40:3c:49:
48:d1:12:a3:bb:0d:9c:e8:89:6b:24:24:a5:35:51:8c:a1:ac:
b7:54:eb:b3:c2:59:e5:15:09:ed:69:d1:8c:6c:4d:f3:24:00:
3d:70:70:6a:42:6f:ff:7f:e2:78:4e:22:4c:d3:2e:bf:7b:56:
95:7e:a3:f1:34:1c:f7:16:95:f7:5c:9e:96:25:11:04:92:73:
08:fd:8d:a4:11:61:52:e5:df:a9:62:27:c7:c8:51:d0:5a:dd:
9c:f9:b2:5c:9a:e0:7f:16:4f:1a:3a:84:e5:1f:da:c3:46:a1:
e6:d4:4e:2a:a5:21:42:5c:a5:b8:52:83:b2:14:94:2c:95:7d:
1f:09:48:60:17:e2:16:ad:32:6b:af:94:6c:42:ff:af:2a:f3:
b6:3d:01:8b:ee:d6:d5:d6:a3:69:ff:5f:ac:a1:67:69:ed:f4:
74:6b:ed:46:3a:23:3a:21:aa:28:07:e3:b5:45:23:01:cb:de:
43:c3:4e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 7 21:54:01 2026 by rpki-client