
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
File: HXJckcDUci80AIjRN03S2vN9gxI.mft (raw, json)
Hash identifier: hsaW5aedr9v/hkML5pY447/OkfdzmkTdQE0LY1+5nA8=
Subject key identifier: B2:DD:ED:9F:6E:D6:B5:CE:FD:04:EB:85:DC:95:D2:C0:BB:CD:8C:41
Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
Certificate issuer: /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Certificate serial: 06CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
Manifest number: 06A2
Signing time: Thu 16 Apr 2026 22:20:24 +0000
Manifest this update: Thu 16 Apr 2026 22:20:24 +0000
Manifest next update: Thu 23 Apr 2026 22:20:24 +0000
Files and hashes: 1: HXJckcDUci80AIjRN03S2vN9gxI.crl (hash: 6tU8xn5V6hDZFclfNF3ZCVnUULcmlRXNlm3SyYUtmZ0=)
2: 6DD1144AACC311EBA28FAD5FC4F9AE02.roa (hash: zlHp90z6YflX6Zoion059ib8bnfEmetsjV8gpqhjGfE=)
3: 6E9FF116ACC311EBA28FAD5FC4F9AE02.roa (hash: 2BUIUgxvcNc8FKQNTEn2iBIeuclNjrnmHDRM3YAQDcg=)
4: 6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa (hash: p/TVTKAt5KdzhUbxLMpy828VFw5LwqckZkSH14Ik/o8=)
5: 6BEA61CCACC311EBA28FAD5FC4F9AE02.roa (hash: v/foeEKordGhb9+twDBbACvfymVczEIMIF+8PlsYKI8=)
6: 6D407F66ACC311EBA28FAD5FC4F9AE02.roa (hash: JyfcUr1tWyuOITJhrtk9V3F9eH5PW2R7X5x70HXGjr4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl
rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:20:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1743 (0x6cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119508, serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Validity
Not Before: Apr 16 22:20:24 2026 GMT
Not After : Apr 23 22:20:24 2026 GMT
Subject: CN=69e160a8-2088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:49:a5:29:05:d2:c0:26:8a:43:21:33:22:7f:
e4:d7:37:21:c2:da:9f:ce:1c:d8:bf:28:7d:cb:76:
2e:fc:db:f8:d4:9e:a3:8f:15:0b:2a:ba:da:17:dd:
45:1a:0b:e8:38:02:13:19:61:a3:6c:7b:a8:5b:32:
24:99:94:24:72:fe:65:a3:e8:36:d6:26:45:42:c8:
62:c5:bd:ff:cd:1b:5a:7d:2e:5f:84:66:e2:96:68:
3a:39:42:b7:8b:61:a7:f9:bc:57:df:fa:50:b1:bb:
33:aa:fd:a0:13:73:f9:a9:e3:f5:03:63:70:ab:31:
25:a5:93:5e:18:eb:1d:99:3f:60:e6:c8:e3:8a:07:
a5:e7:b4:50:fa:9f:93:8a:40:0f:ff:56:ee:45:93:
26:b2:f7:2b:94:83:9f:36:e8:96:cd:53:8f:a7:ad:
a4:d1:a5:e5:0c:45:52:fd:e7:04:cb:5c:f6:4f:e2:
2a:77:a3:bf:e2:b1:0e:87:49:75:d2:f1:83:07:ff:
2a:44:03:d0:f4:82:ba:4d:cc:e9:78:ea:56:da:cb:
92:c1:47:4c:80:35:64:42:c4:88:c4:15:2d:10:0e:
5e:92:6f:2b:09:b4:ab:a0:ec:61:65:67:e9:af:b7:
63:ca:47:42:08:c7:2d:3f:1f:6e:6c:1b:02:d7:5c:
8b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:DD:ED:9F:6E:D6:B5:CE:FD:04:EB:85:DC:95:D2:C0:BB:CD:8C:41
X509v3 Authority Key Identifier:
keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d5:63:65:0a:2f:46:a6:7f:08:97:00:4f:00:90:93:97:57:3a:
a7:1c:37:e5:49:84:88:79:ec:31:01:84:e4:82:b2:9c:e6:dc:
3f:00:49:86:8c:06:d1:ef:27:70:f9:ae:67:77:3f:9f:b6:74:
7e:b5:20:87:8f:71:2b:e7:5d:0a:12:db:15:fb:05:e8:77:0f:
45:c3:61:76:8b:1a:74:d8:74:4d:bf:91:23:98:8c:d5:80:7f:
4d:e0:7b:6e:0d:2e:3b:9d:0b:b9:05:50:ee:4a:23:f1:64:49:
b7:ea:ea:a0:da:07:15:b2:5c:e4:b4:05:e3:14:b5:cc:d6:85:
6f:0e:8f:c6:dc:85:40:4c:2c:d9:bd:d5:9c:e6:8f:b8:93:c3:
22:c7:70:1f:c5:86:d1:e4:74:88:d2:42:73:0f:a6:3e:92:b3:
b9:4b:ba:91:78:b0:76:db:4d:a3:7b:eb:cf:20:a5:4b:c9:74:
52:7c:ff:6e:2e:a7:c2:64:0d:91:ef:51:37:2f:37:52:2e:a5:
dd:ea:ae:ae:94:6a:29:1e:2a:85:6f:5b:b3:90:ec:98:a6:d2:
ca:23:f0:6a:f2:64:c7:20:b3:99:68:19:c8:f7:16:19:38:19:
93:85:f8:7c:7a:50:32:db:22:56:23:c8:81:fd:51:84:13:50:
f1:3b:ba:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:06:57 2026 by rpki-client