
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
File: HXJckcDUci80AIjRN03S2vN9gxI.mft (raw, json)
Hash identifier: 8SHOxg9SSLNf41Lukm1QtOSH5iliAl35mhpYWxAC3Sc=
Subject key identifier: 02:FE:A3:2C:29:B5:D6:14:4F:CF:A4:AF:5D:71:15:06:5D:55:69:62
Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
Certificate issuer: /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Certificate serial: 06BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
Manifest number: 0690
Signing time: Thu 12 Mar 2026 22:05:33 +0000
Manifest this update: Thu 12 Mar 2026 22:05:33 +0000
Manifest next update: Thu 19 Mar 2026 22:05:33 +0000
Files and hashes: 1: HXJckcDUci80AIjRN03S2vN9gxI.crl (hash: 6HP+Wlb2saJ/Fvx9l44g26eBHXjd7W1+L3RPwJiKgrw=)
2: 6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa (hash: p/TVTKAt5KdzhUbxLMpy828VFw5LwqckZkSH14Ik/o8=)
3: 6BEA61CCACC311EBA28FAD5FC4F9AE02.roa (hash: v/foeEKordGhb9+twDBbACvfymVczEIMIF+8PlsYKI8=)
4: 6D407F66ACC311EBA28FAD5FC4F9AE02.roa (hash: JyfcUr1tWyuOITJhrtk9V3F9eH5PW2R7X5x70HXGjr4=)
5: 6DD1144AACC311EBA28FAD5FC4F9AE02.roa (hash: zlHp90z6YflX6Zoion059ib8bnfEmetsjV8gpqhjGfE=)
6: 6E9FF116ACC311EBA28FAD5FC4F9AE02.roa (hash: 2BUIUgxvcNc8FKQNTEn2iBIeuclNjrnmHDRM3YAQDcg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl
rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 22:05:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1725 (0x6bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119508, serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Validity
Not Before: Mar 12 22:05:33 2026 GMT
Not After : Mar 19 22:05:33 2026 GMT
Subject: CN=69b338ad-0346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:33:55:21:c6:85:0a:82:29:0a:fb:33:f9:d9:
e0:a9:7e:31:63:06:e6:71:74:97:e3:4a:46:c5:df:
b1:92:74:51:45:ff:c1:1c:80:57:f0:1c:7f:ed:09:
15:45:39:2f:a0:ae:3a:48:9e:c1:ac:aa:53:84:0e:
aa:e9:83:7a:54:17:f5:9f:4e:66:9b:39:c7:8b:0f:
4e:4e:92:c7:c2:b0:c1:70:7e:d9:9a:df:45:87:21:
c2:08:96:1b:f9:1f:c5:9a:fa:09:51:99:7b:d8:a6:
b7:c8:a6:a8:62:9e:b8:7d:80:ad:dc:e6:94:cc:d1:
bb:99:7d:b3:2b:db:c5:60:10:07:81:95:15:40:cf:
f9:e3:e9:8e:ed:1b:93:8f:3f:b4:74:24:d1:c9:4e:
b1:09:3f:13:22:98:2b:60:5d:e0:ea:26:6f:06:d3:
6f:e7:8b:c7:3e:10:02:5e:98:cb:80:ea:4c:85:79:
44:db:7d:28:f3:c5:bd:91:5a:dd:94:e6:e3:ba:d2:
ad:01:47:a3:d4:6f:29:19:73:da:78:f2:c7:a4:5e:
3a:a2:83:22:f9:ee:b5:46:c1:17:9f:f9:05:f2:b3:
7e:d3:6c:c3:b6:1b:4d:a9:cb:d5:b1:89:36:6f:57:
4b:e0:54:03:fb:ff:d2:2c:01:b5:a1:57:f3:8e:44:
28:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:FE:A3:2C:29:B5:D6:14:4F:CF:A4:AF:5D:71:15:06:5D:55:69:62
X509v3 Authority Key Identifier:
keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:86:2d:c5:18:e6:47:da:7f:fc:1f:07:ee:c7:20:ec:a8:af:
ff:70:b8:6c:88:52:1e:d6:e8:9e:bf:33:df:0e:27:20:3b:ed:
87:60:d2:c4:d1:be:28:ee:bd:e6:09:e7:89:6b:d1:e7:a9:d7:
f6:c2:e0:7f:09:d2:fb:38:26:24:3d:9e:31:2b:99:87:9c:5d:
1d:be:55:b8:01:bb:b8:3b:b9:30:ae:eb:99:1d:35:bd:49:b2:
1d:3b:68:b6:f2:a1:ce:58:9b:06:a6:1f:f3:8c:22:90:e4:10:
c1:86:f9:49:ae:2a:ca:3c:44:ae:fb:5f:55:f7:e2:88:7f:61:
7e:86:32:f8:8a:2e:09:94:fe:ea:e4:53:f5:16:a0:fb:0d:51:
aa:15:38:e7:a1:3e:41:76:4d:89:f5:c2:f6:3e:00:b5:22:23:
9c:ee:e3:3f:28:e6:60:98:cb:57:13:77:c5:5d:3b:b7:d3:4e:
20:db:0a:62:a0:32:1c:f0:e1:ff:89:d9:46:b5:83:a9:38:a6:
e0:8c:3a:31:9d:dc:06:c4:65:f2:fd:12:ee:31:4e:d8:17:9f:
11:4f:6e:96:6a:c6:81:08:4e:eb:73:78:07:f0:50:f6:97:25:
d8:6b:6b:dd:0f:f3:5f:f1:0b:d3:e3:47:22:e7:a7:ad:04:b4:
46:7c:42:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 08:50:04 2026 by rpki-client