
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
File: HXJckcDUci80AIjRN03S2vN9gxI.mft (raw, json)
Hash identifier: rSJbiXQGVikuSFxMiT8+woXfqPNVJJUdbNT/jLtHJLw=
Subject key identifier: 5E:B2:97:11:1D:CA:84:39:73:30:3F:90:34:F9:71:A2:71:63:FF:62
Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
Certificate issuer: /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Certificate serial: 06AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
Manifest number: 0687
Signing time: Thu 26 Feb 2026 22:07:30 +0000
Manifest this update: Thu 26 Feb 2026 22:07:29 +0000
Manifest next update: Thu 05 Mar 2026 22:07:29 +0000
Files and hashes: 1: HXJckcDUci80AIjRN03S2vN9gxI.crl (hash: nIdi8lU9JDvXN3WvI2fqZLUJaW1fNyoaAn+5Le7M+TA=)
2: 6DD1144AACC311EBA28FAD5FC4F9AE02.roa (hash: WmyJmw5Mihv9A2JQO2xOhy7URLFfnvxzxKThl7eGoxs=)
3: 6E9FF116ACC311EBA28FAD5FC4F9AE02.roa (hash: +Kdj0gKuBf0PY5h283LzyQmY9m+afZnjRv+cn+9Qh6s=)
4: 6BEA61CCACC311EBA28FAD5FC4F9AE02.roa (hash: NFCDhwk26+PLfvWvLWF4LR17BmkncUJCTi9+94vSI6k=)
5: 6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa (hash: bx+K75Qji7U/L3EOHI9zaUJ5yAV9kmoLl7pZd625FIc=)
6: 6D407F66ACC311EBA28FAD5FC4F9AE02.roa (hash: knpLwXQdC9MTp1jnTgeGf5Z4M6oM8mDDcMnK1p/I7B0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl
rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 22:07:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1706 (0x6aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119508, serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Validity
Not Before: Feb 26 22:07:29 2026 GMT
Not After : Mar 5 22:07:29 2026 GMT
Subject: CN=69a0c422-c521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:cb:af:3a:51:ba:72:06:66:17:66:e4:c1:39:
d0:cc:20:6f:e7:ab:d1:fd:e6:b6:be:66:b8:10:6b:
bc:0d:cb:e0:b3:3b:71:bd:29:68:ac:7d:de:39:df:
b8:5d:94:ed:9f:26:1e:ff:4c:6d:9d:3d:26:01:7f:
55:6e:e8:88:9b:64:37:ae:da:22:15:40:54:0b:a1:
da:c2:dc:bc:c6:8b:e5:89:22:d3:6b:9f:b9:10:a8:
b9:57:0f:b2:7b:ac:38:74:d7:09:75:bb:4c:24:06:
96:48:8a:19:54:76:87:f0:d3:b8:26:19:53:45:ac:
3e:dc:d8:7d:63:65:6b:78:20:d2:b8:51:06:0a:14:
ac:55:7f:71:f9:cc:97:a8:9a:f1:41:91:d5:f6:b8:
22:33:6a:83:b1:fb:e8:77:e9:ee:f3:60:6b:e8:28:
ad:7b:9e:7c:c5:d1:f5:c3:15:9e:af:c5:c4:f4:1a:
50:4f:1c:42:dd:35:4a:a2:e3:c7:5b:9d:ff:0c:d2:
48:67:8a:89:36:93:9d:ef:86:dc:8c:4a:97:bd:51:
53:cd:45:dd:e9:bf:84:40:3f:0d:86:1c:03:94:85:
aa:2d:16:fc:95:04:c3:a1:7d:c3:16:63:e5:c5:97:
3e:81:b1:3f:26:13:42:7f:e0:0f:91:ac:4d:b7:ac:
bb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B2:97:11:1D:CA:84:39:73:30:3F:90:34:F9:71:A2:71:63:FF:62
X509v3 Authority Key Identifier:
keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:bb:2e:df:31:a6:05:ba:6f:26:bf:08:00:2e:49:46:09:a6:
7b:dd:92:b3:4d:1d:cd:a1:66:03:0e:dc:2b:3e:60:ad:d8:88:
a9:91:6c:1c:a4:02:ca:81:61:c4:30:87:5a:41:2e:20:8a:c3:
5e:9c:47:68:7e:27:64:b2:da:6a:b6:38:0c:c4:6d:9c:6e:78:
ad:b3:86:84:3a:bd:8d:21:18:db:63:a8:0c:cf:4b:b4:18:b0:
cf:0d:e1:b4:bc:37:af:83:a5:3b:05:46:40:ea:96:46:c0:9a:
7c:c9:3e:03:dd:e6:a8:77:42:72:5a:d1:bb:6a:f0:56:2c:da:
90:23:a7:d3:ae:c4:94:5d:55:4c:dc:21:19:dc:f9:42:09:e0:
34:ab:6c:74:1d:82:56:a9:0e:dc:e6:fe:c1:05:d2:28:cd:fa:
c2:b1:d1:1d:01:c6:0e:27:97:73:29:e4:d1:bd:03:f6:0b:84:
b6:04:6a:96:3c:8e:86:cd:3b:83:d8:f4:a8:c6:18:80:40:c2:
42:2d:41:c1:76:1b:bf:3e:71:61:43:7e:53:62:28:5b:c2:d1:
00:66:c1:de:e0:90:bb:0e:43:f0:f9:d8:c2:14:4e:ba:36:31:
b9:c0:5a:af:c2:f5:5d:0d:3b:04:53:34:0d:50:26:03:bc:62:
64:f2:ea:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 00:27:58 2026 by rpki-client