
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
File: HXJckcDUci80AIjRN03S2vN9gxI.mft (raw, json)
Hash identifier: oETjoGq2Cv7tTQ3CT8R7vF+ZOBKDYpfm3aBSxVf7ERc=
Subject key identifier: DF:B6:F1:FF:6C:C8:7F:0D:CA:3E:F4:A9:2A:C3:58:FA:F1:F8:64:18
Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
Certificate issuer: /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Certificate serial: 06FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
Manifest number: 06D1
Signing time: Sat 18 Jul 2026 22:40:20 +0000
Manifest this update: Sat 18 Jul 2026 22:40:19 +0000
Manifest next update: Sat 25 Jul 2026 22:40:19 +0000
Files and hashes: 1: HXJckcDUci80AIjRN03S2vN9gxI.crl (hash: myUVeJdUQgVHv5rEghf64BLk+1407yYgszf1VtmRz8k=)
2: 6D407F66ACC311EBA28FAD5FC4F9AE02.roa (hash: JyfcUr1tWyuOITJhrtk9V3F9eH5PW2R7X5x70HXGjr4=)
3: 6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa (hash: p/TVTKAt5KdzhUbxLMpy828VFw5LwqckZkSH14Ik/o8=)
4: 6BEA61CCACC311EBA28FAD5FC4F9AE02.roa (hash: v/foeEKordGhb9+twDBbACvfymVczEIMIF+8PlsYKI8=)
5: 6DD1144AACC311EBA28FAD5FC4F9AE02.roa (hash: zlHp90z6YflX6Zoion059ib8bnfEmetsjV8gpqhjGfE=)
6: 6E9FF116ACC311EBA28FAD5FC4F9AE02.roa (hash: 2BUIUgxvcNc8FKQNTEn2iBIeuclNjrnmHDRM3YAQDcg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl
rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 22:40:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1790 (0x6fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119508, serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Validity
Not Before: Jul 18 22:40:19 2026 GMT
Not After : Jul 25 22:40:19 2026 GMT
Subject: CN=6a5c00d3-07be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f7:86:6d:39:0e:68:2b:8a:66:37:99:ea:39:
23:22:05:22:36:6f:da:29:10:79:cf:65:d7:c0:67:
59:7c:c8:42:3d:03:4a:7a:dd:12:20:c5:b7:06:77:
44:42:6a:f0:10:c0:21:48:cc:de:08:af:68:68:1c:
13:96:16:a8:63:3d:de:6e:1d:de:5c:8e:78:48:74:
b7:e0:2c:e9:e5:5b:33:0e:87:1e:fc:8e:f4:25:57:
a1:05:6d:2d:4e:9f:23:5d:ec:e1:ea:71:c4:f8:5a:
93:43:f2:f9:0c:8a:ef:d7:c8:37:c9:fc:1f:e8:0b:
ec:67:83:df:1f:27:09:65:04:39:0b:9b:02:66:1a:
e1:ac:dd:d8:74:b4:94:42:8e:89:3b:b2:a0:05:be:
68:be:4b:11:00:04:2e:4a:45:6a:be:80:c3:3d:7c:
8b:39:ea:7d:8b:c3:51:ea:9f:28:fb:4b:e1:eb:0d:
59:06:2f:17:bb:a4:05:8a:3a:b8:af:84:e1:52:ec:
85:6f:f0:29:6e:a3:7d:bd:ce:07:23:3a:c3:2e:dd:
d3:9e:5c:90:82:3e:ef:7f:eb:18:f9:3f:e4:3e:95:
f1:43:4d:9e:cf:44:e2:cf:d3:6b:d5:dc:fe:6b:88:
1b:b6:97:ea:8f:2f:bc:7b:38:dd:75:47:a0:39:e8:
5c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B6:F1:FF:6C:C8:7F:0D:CA:3E:F4:A9:2A:C3:58:FA:F1:F8:64:18
X509v3 Authority Key Identifier:
keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:1f:18:13:c8:46:84:83:17:dc:08:1c:9a:c3:b7:e3:43:12:
6e:04:da:f2:a1:5d:ee:65:c6:62:a6:c5:99:ce:cc:28:59:bf:
dc:4a:d6:13:7f:7f:26:59:c3:13:ae:29:8c:ed:8c:63:f3:df:
78:21:e3:47:a5:72:b6:b0:9f:ba:83:f6:08:fd:60:ae:1b:3a:
e0:7c:f8:59:b9:39:48:ae:53:e9:74:69:3b:4b:c2:48:5c:65:
53:06:7d:54:35:13:49:04:2d:5e:cd:1a:00:7d:af:f1:da:ea:
52:06:7e:62:f7:5e:1c:b8:14:53:c0:57:6a:b1:0a:68:68:29:
30:ba:9e:4d:6d:06:70:9e:6d:8f:57:c6:93:00:49:52:95:f1:
dd:4c:cc:fc:18:b8:61:7a:f7:68:67:33:7a:89:b7:56:48:56:
be:39:b3:04:42:00:89:e1:fc:07:17:e7:6a:f8:8c:6a:91:8b:
83:7c:0e:50:e6:72:fe:60:e8:7b:18:ef:58:98:29:a9:19:90:
7f:08:c5:22:99:9e:2c:50:89:be:61:8c:50:08:b2:21:7f:47:
58:ed:67:0c:1b:6e:35:5d:3b:42:2b:f3:ee:87:68:e9:5b:81:
cb:5f:49:a7:be:d0:e5:39:f7:86:d4:0e:b0:ba:75:dd:95:88:
9a:2d:32:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 12:46:41 2026 by rpki-client