
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
File: HXJckcDUci80AIjRN03S2vN9gxI.mft (raw, json)
Hash identifier: iwVJ5lF+55oTfK7H2qkWzELwWMk8p6CC/crgWQhr21s=
Subject key identifier: D3:18:62:8F:6E:A7:6A:67:48:AF:80:1E:5A:D4:F9:4B:B5:51:0B:48
Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
Certificate issuer: /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Certificate serial: 06F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
Manifest number: 06C3
Signing time: Sat 20 Jun 2026 22:19:16 +0000
Manifest this update: Sat 20 Jun 2026 22:19:15 +0000
Manifest next update: Sat 27 Jun 2026 22:19:15 +0000
Files and hashes: 1: HXJckcDUci80AIjRN03S2vN9gxI.crl (hash: H7kRFwf3mshAA/Km8fi5dqbB0yRYkODAXuk8bimPJrY=)
2: 6D407F66ACC311EBA28FAD5FC4F9AE02.roa (hash: JyfcUr1tWyuOITJhrtk9V3F9eH5PW2R7X5x70HXGjr4=)
3: 6DD1144AACC311EBA28FAD5FC4F9AE02.roa (hash: zlHp90z6YflX6Zoion059ib8bnfEmetsjV8gpqhjGfE=)
4: 6BEA61CCACC311EBA28FAD5FC4F9AE02.roa (hash: v/foeEKordGhb9+twDBbACvfymVczEIMIF+8PlsYKI8=)
5: 6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa (hash: p/TVTKAt5KdzhUbxLMpy828VFw5LwqckZkSH14Ik/o8=)
6: 6E9FF116ACC311EBA28FAD5FC4F9AE02.roa (hash: 2BUIUgxvcNc8FKQNTEn2iBIeuclNjrnmHDRM3YAQDcg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl
rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Jun 2026 22:19:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1776 (0x6f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119508, serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Validity
Not Before: Jun 20 22:19:15 2026 GMT
Not After : Jun 27 22:19:15 2026 GMT
Subject: CN=6a3711e4-898d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:51:40:c1:b5:21:65:dd:37:6d:a0:cc:64:ca:
60:c1:12:11:6e:f4:72:4e:d2:f7:c6:b2:16:47:6b:
a0:87:b4:9c:42:34:f6:db:b2:65:8d:3b:e3:cf:27:
f0:52:74:ca:39:e2:c7:db:92:6f:b2:f6:f0:b2:58:
12:b5:84:7c:19:6b:38:06:f9:04:13:7b:cc:b8:39:
9e:31:2c:56:f2:9f:5e:9b:52:27:bf:08:08:f8:c8:
6a:b9:10:5b:f7:0b:f8:0a:57:f5:72:37:d5:e4:d5:
6e:86:2c:f3:f5:fb:40:3f:51:1a:20:d5:76:c7:1f:
8f:d1:9b:09:e5:ff:57:15:1b:d4:db:dc:82:56:a9:
c8:d3:93:90:eb:fa:fd:8a:44:2a:25:40:58:4b:cd:
c9:1c:6c:f1:4c:3a:11:c7:b5:82:fd:15:31:38:e9:
54:b5:a7:da:53:08:8c:43:52:9e:01:b6:42:ea:55:
d7:0b:9f:45:06:76:50:e9:01:98:c3:69:45:90:17:
1d:39:e9:22:c5:79:8a:92:c7:07:cb:97:01:cf:ef:
15:07:b9:b0:ba:c1:07:f6:cf:52:20:ed:98:90:70:
1a:33:1f:fb:2d:77:16:ae:e1:79:9d:23:6c:c1:d1:
11:70:da:9c:87:d8:81:d8:2f:0a:87:d8:a8:e2:f4:
4c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:18:62:8F:6E:A7:6A:67:48:AF:80:1E:5A:D4:F9:4B:B5:51:0B:48
X509v3 Authority Key Identifier:
keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:54:1a:e8:48:9d:0a:65:9b:ce:fc:32:aa:8b:f1:91:60:45:
8e:84:50:1a:20:0a:7b:e8:22:6b:c5:a1:38:ce:57:0b:72:1e:
66:2a:96:f0:5b:07:da:30:52:d7:05:fe:e9:54:67:7d:ee:1b:
68:92:69:d8:96:25:5f:79:c0:60:88:8d:54:43:86:0d:7a:41:
5f:2c:33:27:a4:92:39:4f:81:db:13:12:42:a0:05:b6:a3:d3:
a0:58:8a:69:0b:d8:03:0e:51:04:08:b5:18:ac:17:a4:d0:d7:
04:8d:4e:46:18:9f:fa:9e:7d:43:e9:d1:3c:60:7c:f5:60:7e:
8d:4e:80:86:c6:ab:9e:3b:2a:21:64:f9:25:45:bc:a3:22:f1:
f6:c9:8c:3c:b4:c1:68:12:1d:23:27:49:70:06:91:f5:79:fd:
08:d7:46:80:a3:66:2f:84:87:bb:f0:86:62:0d:58:93:20:89:
a1:10:39:8e:b1:67:20:48:41:02:ea:63:66:5b:1a:c7:e6:ef:
b0:33:c8:73:70:45:f7:0d:5a:d8:0e:87:dc:5f:e6:ed:ba:9d:
95:3f:38:33:f1:73:a5:f9:5a:c5:07:c8:4b:ce:83:37:e2:2f:
85:ff:d4:45:5f:fb:67:19:b0:94:d8:5b:2e:3c:3a:89:fa:54:
ac:36:15:75
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBvAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTk1MDgxMTAvBgNVBAUTKDFENzI1QzkxQzBENDcyMkYzNDAwODhEMTM3NEREMkRB
RjM3RDgzMTIwHhcNMjYwNjIwMjIxOTE1WhcNMjYwNjI3MjIxOTE1WjAYMRYwFAYD
VQQDEw02YTM3MTFlNC04OThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuFFAwbUhZd03baDMZMpgwRIRbvRyTtL3xrIWR2ugh7ScQjT227JljTvjzyfw
UnTKOeLH25JvsvbwslgStYR8GWs4BvkEE3vMuDmeMSxW8p9em1InvwgI+MhquRBb
9wv4Clf1cjfV5NVuhizz9ftAP1EaINV2xx+P0ZsJ5f9XFRvU29yCVqnI05OQ6/r9
ikQqJUBYS83JHGzxTDoRx7WC/RUxOOlUtafaUwiMQ1KeAbZC6lXXC59FBnZQ6QGY
w2lFkBcdOekixXmKkscHy5cBz+8VB7mwusEH9s9SIO2YkHAaMx/7LXcWruF5nSNs
wdERcNqch9iB2C8Kh9io4vRMgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNMYYo9u
p2pnSK+AHlrU+Uu1UQtIMB8GA1UdIwQYMBaAFB1yXJHA1HIvNACI0TdN0trzfYMS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTUwOC8wMDAyMDI3MkFD
QzIxMUVCQUJFMTk1NUVDNEY5QUUwMi9IWEpja2NEVWNpODBBSWpSTjAzUzJ2Tjln
eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hYSmNrY0RVY2k4MEFJalJOMDNTMnZOOWd4SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
OTUwOC8wMDAyMDI3MkFDQzIxMUVCQUJFMTk1NUVDNEY5QUUwMi9IWEpja2NEVWNp
ODBBSWpSTjAzUzJ2TjlneEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiFQa6EidCmWbzvwyqovxkWBFjoRQGiAKe+gia8WhOM5XC3IeZiqW8FsH2jBS
1wX+6VRnfe4baJJp2JYlX3nAYIiNVEOGDXpBXywzJ6SSOU+B2xMSQqAFtqPToFiK
aQvYAw5RBAi1GKwXpNDXBI1ORhif+p59Q+nRPGB89WB+jU6AhsarnjsqIWT5JUW8
oyLx9smMPLTBaBIdIydJcAaR9Xn9CNdGgKNmL4SHu/CGYg1YkyCJoRA5jrFnIEhB
AupjZlsax+bvsDPIc3BF9w1a2A6H3F/m7bqdlT84M/FzpflaxQfIS86DN+Ivhf/U
RV/7ZxmwlNhbLjw6ifpUrDYVdQ==
-----END CERTIFICATE-----
Generated at Mon Jun 22 06:47:48 2026 by rpki-client