
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
File: HXJckcDUci80AIjRN03S2vN9gxI.mft (raw, json)
Hash identifier: rak8YYjdS1VRShof9MAhCd1OyfpQYJ324pSeK7D2YEQ=
Subject key identifier: 8B:73:11:2A:D2:A7:E0:2A:C7:7E:36:58:7D:8F:3D:68:6F:1B:0B:71
Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
Certificate issuer: /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Certificate serial: 0711
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
Manifest number: 06E4
Signing time: Mon 24 Aug 2026 22:08:58 +0000
Manifest this update: Mon 24 Aug 2026 22:08:58 +0000
Manifest next update: Mon 31 Aug 2026 22:08:58 +0000
Files and hashes: 1: HXJckcDUci80AIjRN03S2vN9gxI.crl (hash: 8kKn2lOP/+V32/Q6xn4miCnM0aMRIKk/JO4Ogx8Vh1E=)
2: 6D407F66ACC311EBA28FAD5FC4F9AE02.roa (hash: JyfcUr1tWyuOITJhrtk9V3F9eH5PW2R7X5x70HXGjr4=)
3: 6BEA61CCACC311EBA28FAD5FC4F9AE02.roa (hash: v/foeEKordGhb9+twDBbACvfymVczEIMIF+8PlsYKI8=)
4: 6E9FF116ACC311EBA28FAD5FC4F9AE02.roa (hash: 2BUIUgxvcNc8FKQNTEn2iBIeuclNjrnmHDRM3YAQDcg=)
5: 6DD1144AACC311EBA28FAD5FC4F9AE02.roa (hash: zlHp90z6YflX6Zoion059ib8bnfEmetsjV8gpqhjGfE=)
6: 6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa (hash: p/TVTKAt5KdzhUbxLMpy828VFw5LwqckZkSH14Ik/o8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl
rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 22:08:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1809 (0x711)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119508, serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Validity
Not Before: Aug 24 22:08:58 2026 GMT
Not After : Aug 31 22:08:58 2026 GMT
Subject: CN=6a8cc0fa-2a63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e3:a5:cb:5a:68:69:b8:54:d0:b1:f1:4f:6a:
fa:89:4a:e3:b6:51:42:6d:56:b6:92:3e:9c:08:85:
5b:3d:cc:64:6a:3f:fc:3e:5e:7e:0a:91:8d:22:d2:
e3:f9:24:bc:26:5e:2e:3c:00:56:95:39:14:3a:83:
97:b3:34:a4:b8:0b:29:87:15:32:47:6f:80:db:52:
f0:41:f1:54:48:5b:38:ad:66:e8:0d:19:11:89:bf:
be:8d:74:b4:0c:fb:55:c2:92:e4:1f:dd:4e:b9:67:
4e:2b:c9:b6:70:a2:93:e0:46:b4:18:e6:15:a6:d4:
97:a9:63:64:a4:25:5e:9e:41:a6:84:db:d9:0e:eb:
b2:a5:a9:95:50:08:19:4f:4b:80:7a:e2:72:d7:ba:
cc:84:f1:8f:c1:ea:aa:da:88:62:8f:d1:7c:47:8a:
67:1c:67:ad:7a:5c:aa:a7:5a:85:b9:92:3f:9a:aa:
68:c1:b5:8e:ad:84:eb:93:7b:a1:41:e8:a2:8e:30:
1e:51:69:fa:c6:82:24:f1:70:07:dc:69:48:b3:9e:
7a:54:31:f4:f5:f8:55:3a:7b:91:d7:15:1c:95:61:
0d:51:c5:7c:3c:69:da:b8:3d:df:0e:24:60:35:2d:
8e:22:3f:0c:2a:4f:15:24:f9:bb:b2:55:d3:ae:29:
80:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:73:11:2A:D2:A7:E0:2A:C7:7E:36:58:7D:8F:3D:68:6F:1B:0B:71
X509v3 Authority Key Identifier:
keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:87:b8:0f:b2:74:13:dc:8f:08:71:c9:3e:68:f5:45:77:f2:
24:57:86:2a:22:29:2a:66:4f:5d:f6:8e:ce:41:ba:e9:43:6a:
d2:be:47:f1:bc:97:78:c0:88:37:5f:fe:d2:4b:b0:55:08:b9:
d9:86:bc:dc:ef:d5:76:6c:74:3a:46:e9:4f:54:99:0b:57:ac:
d7:ff:e3:1d:68:ec:91:8d:36:83:cc:31:55:81:fc:a1:77:a5:
35:e5:79:b1:91:6b:0b:1f:96:16:ea:98:3d:03:e1:53:44:ab:
c2:b2:fe:34:13:77:14:48:62:3c:fd:8e:31:db:b9:cd:9a:83:
88:26:59:28:14:92:c8:d0:a2:cd:c4:cc:31:58:a0:43:15:45:
14:c4:e5:6d:b3:e9:e0:65:ac:e9:22:de:4c:ba:7f:66:05:ee:
92:91:55:81:60:ef:5e:4a:4a:84:43:9a:8f:00:45:97:f0:8d:
fa:3a:fd:87:79:90:c2:9d:46:bc:18:72:9c:f2:70:5c:a6:57:
32:25:51:48:4d:e3:4f:f4:8b:a3:f2:8d:3c:5e:05:03:df:af:
dc:cd:ee:ac:c3:9f:ee:63:31:30:2a:e1:6a:38:be:5e:0a:88:
eb:03:47:f7:cd:f8:8f:c8:0d:8c:41:2c:c9:80:ee:0c:4f:71:
e7:9b:4d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 02:19:35 2026 by rpki-client