
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
File: HXJckcDUci80AIjRN03S2vN9gxI.mft (raw, json)
Hash identifier: R/R32E9meAi2XhsqxKr7e/kNF53Pcop+58Cm5GLNnR8=
Subject key identifier: 29:AC:2A:EF:B7:A5:D7:87:63:6B:60:5D:12:D3:85:13:AF:E5:EC:E6
Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
Certificate issuer: /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Certificate serial: 072E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
Manifest number: 06FC
Signing time: Tue 06 Oct 2026 22:18:32 +0000
Manifest this update: Tue 06 Oct 2026 22:18:31 +0000
Manifest next update: Tue 13 Oct 2026 22:18:31 +0000
Files and hashes: 1: HXJckcDUci80AIjRN03S2vN9gxI.crl (hash: mHTTm9Y1mDTq4KpvkxkuC1pzmeMJiVbpHf2YAyhl1e0=)
2: 6E9FF116ACC311EBA28FAD5FC4F9AE02.roa (hash: EQASLtuoR6EsjHdG53Md+z8IqytyzdxiEBxgg98uaVo=)
3: 6BEA61CCACC311EBA28FAD5FC4F9AE02.roa (hash: gmiznf/rB7enYpTf/YzP3CAZPFsBXf6xe87sGWeVl4c=)
4: 6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa (hash: o/XwhsB+XVooPsmWzQGDETGh7dBjz+5eR8mUlPI8cLs=)
5: 6DD1144AACC311EBA28FAD5FC4F9AE02.roa (hash: O6E2zr3QVTkio/pvxmFA+1SqKB5lb53jqEw26yPfilY=)
6: 6D407F66ACC311EBA28FAD5FC4F9AE02.roa (hash: xknjJ13gwZ9xl2TQQYccPkk8b/iDjk0MZUEtEXEv1tA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl
rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 22:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1838 (0x72e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119508, serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Validity
Not Before: Oct 6 22:18:31 2026 GMT
Not After : Oct 13 22:18:31 2026 GMT
Subject: CN=6ac573b8-be91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:64:b5:cf:7d:c5:76:f7:28:2d:13:53:9a:e3:
fc:a0:ec:e7:99:66:ef:8c:92:29:f1:71:b0:1d:9b:
59:c7:52:07:80:a4:e6:69:aa:fb:51:a3:0e:16:5a:
d8:19:da:3b:de:b4:75:81:91:ba:ef:3c:ab:73:a6:
28:d4:5d:75:f5:04:59:1a:93:5a:cd:c2:d5:66:d0:
4e:9c:36:66:c2:27:a1:11:6f:36:29:70:3a:e5:87:
45:42:9e:6d:a3:bd:bd:ed:e1:f8:1b:ff:b4:8a:31:
33:46:d2:54:a2:f5:ec:54:be:7b:81:da:e3:7a:6e:
e9:7b:ef:90:4f:69:81:c9:0c:db:63:1e:0e:a3:5a:
06:10:99:21:7b:4d:28:6e:c1:4a:1f:08:ca:4a:ae:
76:56:13:1b:95:6c:e7:64:a7:08:38:cd:8c:fb:50:
88:00:09:48:1b:0d:ab:25:39:06:63:72:d5:21:d6:
80:bb:ff:29:61:0c:9a:4d:1b:e4:42:b2:e3:16:21:
9c:32:8d:54:2d:f0:de:23:48:b2:6a:57:ff:93:62:
f0:05:dd:4e:eb:80:f3:93:8e:54:0d:ef:a2:7e:09:
81:5b:44:37:64:a2:b9:2b:5c:bf:97:6d:61:af:02:
9b:d0:c2:b9:bd:b8:d0:a7:b0:9e:29:4a:f3:8b:12:
11:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:AC:2A:EF:B7:A5:D7:87:63:6B:60:5D:12:D3:85:13:AF:E5:EC:E6
X509v3 Authority Key Identifier:
keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:7b:b2:ec:14:6e:a8:e6:16:5b:f7:2f:af:0a:12:10:5a:c8:
38:04:8d:a4:70:34:0a:3d:0b:51:4a:69:e1:76:2d:ff:96:3a:
63:ba:43:09:c7:bf:bf:d1:40:cd:f9:d4:b9:4f:ba:1a:ee:0a:
54:60:5a:30:87:1b:aa:ac:18:07:19:9c:b2:92:2f:f2:e1:df:
40:54:a0:8c:ab:cd:d3:6c:ae:fb:71:d6:6c:4f:63:39:e9:2a:
e4:51:6a:7b:fe:86:98:28:70:00:af:91:9d:d1:24:db:80:04:
a0:78:fb:da:3e:2b:3b:65:a1:77:e4:66:2a:51:93:fa:3d:e2:
c1:3d:e0:c2:10:91:9e:d7:4e:01:c5:c1:eb:ee:e6:75:a3:fa:
3f:c4:3e:0c:7f:96:cb:67:29:b4:3f:f2:ef:fe:8b:52:19:44:
0d:fe:3d:61:10:cd:40:72:be:4d:1e:81:7e:b0:2f:c4:21:1b:
99:b4:c6:a3:3e:bb:73:80:b5:d5:dc:29:1f:91:37:ab:40:af:
46:5b:6d:bb:c0:3d:c1:99:ba:06:30:40:1a:32:4d:83:1d:12:
4b:b9:ed:1b:16:9e:17:1e:be:13:4e:4f:a7:c1:65:3c:c5:1f:
59:73:70:30:2c:de:a6:56:f6:bd:e5:4f:71:a0:ce:61:4f:89:
e0:81:5e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:58:09 2026 by rpki-client