
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
File: HXJckcDUci80AIjRN03S2vN9gxI.mft (raw, json)
Hash identifier: TpZYdpwVHJpJVy9cDNweZgkeon1tfOQH4cv1SIbJnDs=
Subject key identifier: 02:87:BB:C1:BD:09:CA:72:B8:2F:74:45:BD:C6:6C:A8:AB:9C:D8:61
Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
Certificate issuer: /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Certificate serial: 0709
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
Manifest number: 06DC
Signing time: Sat 08 Aug 2026 21:55:55 +0000
Manifest this update: Sat 08 Aug 2026 21:55:55 +0000
Manifest next update: Sat 15 Aug 2026 21:55:55 +0000
Files and hashes: 1: HXJckcDUci80AIjRN03S2vN9gxI.crl (hash: yugWSjdEFRoVWmXKWk9NUHTxTVQnYoZkTwB10jQHWXU=)
2: 6BEA61CCACC311EBA28FAD5FC4F9AE02.roa (hash: v/foeEKordGhb9+twDBbACvfymVczEIMIF+8PlsYKI8=)
3: 6DD1144AACC311EBA28FAD5FC4F9AE02.roa (hash: zlHp90z6YflX6Zoion059ib8bnfEmetsjV8gpqhjGfE=)
4: 6D407F66ACC311EBA28FAD5FC4F9AE02.roa (hash: JyfcUr1tWyuOITJhrtk9V3F9eH5PW2R7X5x70HXGjr4=)
5: 6E9FF116ACC311EBA28FAD5FC4F9AE02.roa (hash: 2BUIUgxvcNc8FKQNTEn2iBIeuclNjrnmHDRM3YAQDcg=)
6: 6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa (hash: p/TVTKAt5KdzhUbxLMpy828VFw5LwqckZkSH14Ik/o8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl
rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 15 Aug 2026 21:55:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1801 (0x709)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119508, serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Validity
Not Before: Aug 8 21:55:55 2026 GMT
Not After : Aug 15 21:55:55 2026 GMT
Subject: CN=6a77a5eb-58f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a6:8b:95:93:7d:ef:65:2c:c0:fe:c3:b6:b8:
e3:dd:d1:9b:21:b9:d5:60:43:f8:c6:4d:79:37:d5:
c7:9d:47:12:4d:a3:96:51:ea:f2:fd:37:ab:da:fd:
0e:b6:50:ca:c3:0d:c2:a4:b6:27:c3:4e:4e:65:42:
ff:5e:ee:14:53:08:ad:a4:2f:ae:05:ee:a0:f7:4b:
7d:82:05:dd:32:c5:36:be:07:f0:a5:86:45:b7:9e:
39:53:a4:06:67:35:70:d7:cf:51:f9:6c:3c:f3:40:
ac:46:6c:9c:7c:85:60:bd:bd:81:78:49:f4:68:73:
63:9e:dd:60:27:b7:6e:3e:83:61:0d:f0:30:c4:68:
d6:fd:4d:65:07:c1:45:40:9a:12:fe:66:5c:0a:3b:
73:30:d8:0d:8c:99:75:ec:de:b3:c5:45:52:5c:30:
d8:d6:b5:25:4f:f8:77:e7:c8:5c:2b:2f:41:82:05:
d8:0f:fb:00:70:d6:c4:d9:0f:62:a7:21:53:c0:e8:
ac:2d:eb:35:db:cf:02:9e:8a:aa:b5:a9:28:13:d9:
22:92:3c:e7:e8:e0:31:52:55:cf:2b:5f:a2:db:3f:
b0:14:9f:4a:f1:ef:45:4b:f8:07:b3:88:b8:36:a1:
ad:29:37:11:e7:4d:90:be:b5:92:75:ed:03:87:81:
12:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:87:BB:C1:BD:09:CA:72:B8:2F:74:45:BD:C6:6C:A8:AB:9C:D8:61
X509v3 Authority Key Identifier:
keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:05:fa:05:fa:b6:8e:19:59:e0:be:6a:01:d3:ce:a4:08:e9:
0a:12:bf:da:a7:e4:5c:0c:c2:ae:cd:48:2d:50:b8:e1:40:4f:
7f:2a:72:6f:f3:03:33:e3:f5:52:ea:36:b2:77:74:a2:e3:d3:
65:43:e9:e3:1c:e3:50:bf:e9:a1:db:2e:b9:24:83:f4:46:68:
cf:05:e7:67:83:96:1f:b2:8e:44:d6:23:d5:36:c0:83:be:30:
7f:2c:b3:37:f9:bf:75:4f:37:07:95:90:c2:f0:2f:a5:85:08:
fc:55:9f:6c:d1:23:74:cc:f8:05:74:86:28:23:f0:18:d7:37:
cd:2c:33:4b:5e:aa:71:ac:63:67:89:79:56:26:7e:d1:9f:4c:
80:15:d7:c4:ef:ee:27:38:ba:69:85:d6:2c:60:9a:9b:84:75:
9b:76:43:99:0b:c6:c9:c0:58:0d:1d:b9:13:4d:9d:b4:c9:2e:
d5:0d:63:25:ec:8e:1b:ff:12:11:b4:d9:a7:b5:80:01:32:07:
cd:71:6b:62:cc:b0:c3:d3:aa:e9:5b:80:bc:3f:db:44:35:8b:
e9:f1:5a:72:6e:9a:b4:bc:08:7c:04:8c:64:e2:df:11:d7:1f:
ef:02:3d:cf:20:16:75:1e:a1:78:ca:8f:50:10:1d:d7:8b:cc:
7d:a4:a1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 10 20:19:33 2026 by rpki-client