
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
File: HXJckcDUci80AIjRN03S2vN9gxI.mft (raw, json)
Hash identifier: a6bjhoTHho1IT5QcEz0e+ukDLUmVg4IdWXPsMGLfbHA=
Subject key identifier: E9:D9:7B:A9:20:0E:22:D5:D1:64:EB:EB:D1:52:84:21:14:78:EC:28
Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
Certificate issuer: /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Certificate serial: 0702
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
Manifest number: 06D5
Signing time: Sun 26 Jul 2026 23:04:40 +0000
Manifest this update: Sun 26 Jul 2026 23:04:39 +0000
Manifest next update: Sun 02 Aug 2026 23:04:39 +0000
Files and hashes: 1: HXJckcDUci80AIjRN03S2vN9gxI.crl (hash: dK23qYjtvYBp3ym9WQVC1mXOuswrehS6qkR/CeLIDsc=)
2: 6BEA61CCACC311EBA28FAD5FC4F9AE02.roa (hash: v/foeEKordGhb9+twDBbACvfymVczEIMIF+8PlsYKI8=)
3: 6DD1144AACC311EBA28FAD5FC4F9AE02.roa (hash: zlHp90z6YflX6Zoion059ib8bnfEmetsjV8gpqhjGfE=)
4: 6E9FF116ACC311EBA28FAD5FC4F9AE02.roa (hash: 2BUIUgxvcNc8FKQNTEn2iBIeuclNjrnmHDRM3YAQDcg=)
5: 6D407F66ACC311EBA28FAD5FC4F9AE02.roa (hash: JyfcUr1tWyuOITJhrtk9V3F9eH5PW2R7X5x70HXGjr4=)
6: 6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa (hash: p/TVTKAt5KdzhUbxLMpy828VFw5LwqckZkSH14Ik/o8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl
rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 23:04:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1794 (0x702)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119508, serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Validity
Not Before: Jul 26 23:04:39 2026 GMT
Not After : Aug 2 23:04:39 2026 GMT
Subject: CN=6a669287-9a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5b:70:4e:72:06:9a:5d:9f:7c:0d:66:1a:16:
95:42:66:75:f8:ed:b9:f2:77:45:8a:7e:2f:37:08:
b5:6b:0f:3b:fb:37:26:fb:ba:67:c0:03:cf:2c:ea:
72:ab:45:d7:c5:b8:ec:91:d0:0c:e7:a0:d1:2a:1f:
e8:34:d7:d2:02:4d:57:b7:f4:9f:c9:11:da:68:86:
dc:c0:a7:02:8e:ad:bf:84:f3:14:db:b4:4f:a9:ea:
24:07:24:2a:71:62:e2:95:ea:fb:13:1c:55:ea:72:
47:64:2a:64:b8:8e:b0:c7:c6:ba:92:77:87:e6:ff:
82:8d:53:d7:e8:7c:c5:6f:22:96:7d:5c:99:14:53:
98:7d:90:99:e7:3a:56:5c:63:14:1d:5c:cc:a9:a1:
5a:30:59:a3:94:18:55:f1:5b:25:a1:91:cb:1e:70:
93:a4:c2:05:ee:75:b0:73:8e:08:da:bc:9b:d5:4f:
ed:b5:36:0d:f3:3b:f1:e7:df:af:ab:07:fa:df:9b:
77:7e:c4:01:65:60:56:ce:64:d9:d7:bf:f1:37:26:
01:ce:80:ce:8a:94:bc:9c:84:4b:14:8e:29:cd:25:
5d:aa:02:16:b7:30:90:74:43:af:03:ac:a9:0f:84:
a5:92:cf:0d:db:9f:8f:c5:3c:81:82:99:48:64:76:
75:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:D9:7B:A9:20:0E:22:D5:D1:64:EB:EB:D1:52:84:21:14:78:EC:28
X509v3 Authority Key Identifier:
keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:57:0b:c7:db:cd:01:07:8a:82:6c:ad:f6:bc:20:93:a4:73:
ee:7a:e9:ba:61:82:55:74:3a:84:de:7e:84:58:dd:08:07:5a:
77:d3:0d:90:76:65:71:71:c9:50:ad:70:04:4c:b8:87:26:21:
a2:48:e0:41:03:20:cd:02:8b:c9:69:54:70:0c:42:69:31:e9:
3f:e8:ea:0a:63:59:6d:9b:5f:e1:48:b2:5b:ae:93:97:d9:e6:
48:5a:6e:3b:06:d9:a8:df:84:8b:7e:38:be:42:2d:4d:bb:33:
b6:ad:24:4a:ab:56:dd:5b:4e:b4:b2:2e:09:43:c9:5f:d9:38:
b8:d3:da:f0:ea:2d:c5:45:36:1b:92:9d:20:09:b6:f6:27:b1:
8c:80:8e:f5:3b:5f:61:8d:51:a1:d5:5c:b7:d4:ed:ee:3b:a2:
1c:9c:b3:12:93:ad:b0:5e:b4:d0:de:42:06:46:ef:38:ef:41:
16:57:dd:44:ad:7f:a2:a1:f1:87:5e:f4:6b:2d:c7:43:21:62:
b4:15:c0:6f:1b:4a:c7:62:8c:31:7d:11:06:09:2a:83:aa:6f:
99:8f:14:80:e6:91:cb:d1:2c:77:f6:90:3b:4f:21:c1:db:4e:
47:80:b2:8d:7c:fc:0a:38:65:2b:08:9d:af:5a:df:95:78:3e:
a7:33:9f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 17:18:38 2026 by rpki-client