
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
File: HXJckcDUci80AIjRN03S2vN9gxI.mft (raw, json)
Hash identifier: Z0Dn4CXL182FguCfTV3to+Yuy5agxITS9Nc+bg2po4M=
Subject key identifier: C7:24:30:BC:79:C4:9C:9F:2C:BD:22:52:97:B3:4C:90:CD:3F:00:2C
Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
Certificate issuer: /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Certificate serial: 0673
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
Manifest number: 0650
Signing time: Wed 12 Nov 2025 21:29:09 +0000
Manifest this update: Wed 12 Nov 2025 21:29:09 +0000
Manifest next update: Wed 19 Nov 2025 21:29:09 +0000
Files and hashes: 1: HXJckcDUci80AIjRN03S2vN9gxI.crl (hash: oUoVvjBz+xbOAm+du20Xa/jtUcmZh5toF80o2EhJZ6E=)
2: 6DD1144AACC311EBA28FAD5FC4F9AE02.roa (hash: WmyJmw5Mihv9A2JQO2xOhy7URLFfnvxzxKThl7eGoxs=)
3: 6E9FF116ACC311EBA28FAD5FC4F9AE02.roa (hash: +Kdj0gKuBf0PY5h283LzyQmY9m+afZnjRv+cn+9Qh6s=)
4: 6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa (hash: bx+K75Qji7U/L3EOHI9zaUJ5yAV9kmoLl7pZd625FIc=)
5: 6BEA61CCACC311EBA28FAD5FC4F9AE02.roa (hash: NFCDhwk26+PLfvWvLWF4LR17BmkncUJCTi9+94vSI6k=)
6: 6D407F66ACC311EBA28FAD5FC4F9AE02.roa (hash: knpLwXQdC9MTp1jnTgeGf5Z4M6oM8mDDcMnK1p/I7B0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl
rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 19 Nov 2025 21:29:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1651 (0x673)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119508, serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Validity
Not Before: Nov 12 21:29:09 2025 GMT
Not After : Nov 19 21:29:09 2025 GMT
Subject: CN=6914fc25-b36e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:7e:f7:90:12:a9:ef:97:46:24:d2:fa:46:12:
f6:04:16:2b:d3:5c:74:78:a8:10:ad:57:76:ac:4e:
f3:38:83:61:93:c5:e3:ad:5e:72:b8:29:a4:6a:07:
22:5d:f6:b8:c8:50:c0:0b:7b:0a:e3:ef:3e:c2:b0:
c8:e8:0d:73:8e:2d:8f:80:ad:84:27:0e:fe:76:d0:
22:e1:93:c0:5d:5e:26:68:6c:d7:60:54:a0:23:af:
0b:b5:c3:39:17:86:78:8f:34:1a:4a:41:f2:f2:4b:
82:fd:f5:0e:3a:98:20:ed:4c:86:65:e3:0a:1a:23:
06:c7:30:bd:2b:1f:da:bf:2a:17:99:65:69:a7:f5:
c8:57:5b:44:df:35:6c:01:18:29:08:56:f2:53:6b:
55:22:5c:6c:45:f8:66:51:d3:a3:42:0d:a3:39:26:
4b:b7:88:08:f8:94:34:0a:09:08:f8:4d:87:79:a2:
aa:7a:5a:50:02:79:b7:08:89:eb:54:1a:93:fb:94:
64:2b:b0:73:f6:f5:78:1e:9f:8d:ae:24:f5:0e:78:
46:53:97:d4:74:5a:74:6b:1b:28:2b:40:7f:39:84:
ec:5e:04:3a:73:36:d8:d9:dc:f8:33:a4:f4:23:1c:
f0:f5:34:85:3c:61:14:bb:86:5b:f4:2a:b2:c0:c6:
04:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:24:30:BC:79:C4:9C:9F:2C:BD:22:52:97:B3:4C:90:CD:3F:00:2C
X509v3 Authority Key Identifier:
keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:3b:77:7c:5d:a6:2c:f4:be:7a:fd:37:83:0b:71:0f:28:a8:
59:f8:02:4a:a6:d7:1f:86:a1:b1:ad:d5:dd:50:6c:0e:62:19:
99:be:0e:66:ee:0b:29:e1:2b:d6:17:75:c5:4d:68:6b:c0:2e:
74:b6:77:05:2e:45:5e:80:af:90:32:28:12:7b:79:00:e2:3d:
59:f5:a5:26:bb:a6:1e:c0:12:54:be:d3:be:2d:ad:31:41:8c:
6c:04:4a:a1:ef:ef:da:e6:c0:83:04:6e:9d:2b:de:2f:a0:9a:
17:99:37:46:55:4a:56:74:2d:39:d8:f4:88:d9:32:0b:7f:38:
24:79:64:38:2f:be:0e:72:a1:8f:33:24:d4:e6:59:4c:45:e9:
dc:67:32:5d:d7:94:26:f2:45:98:41:49:a5:17:b0:d7:7f:a1:
b2:dd:c9:71:ee:30:45:aa:2e:02:73:f7:52:7c:9c:6c:29:13:
99:83:23:9f:ca:7a:9a:d1:f1:1a:aa:ff:3a:ff:dc:e8:24:2d:
6c:11:ba:54:8e:7d:8b:cc:fb:f1:e6:ff:94:e6:75:72:91:44:
37:ab:2d:6f:40:00:cb:56:cf:f0:44:d5:fb:04:ef:a6:e1:53:
23:6e:1c:82:20:7f:2c:4a:55:a8:c0:c6:5b:73:1b:9e:65:e6:
59:d6:3a:47
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBnMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTk1MDgxMTAvBgNVBAUTKDFENzI1QzkxQzBENDcyMkYzNDAwODhEMTM3NEREMkRB
RjM3RDgzMTIwHhcNMjUxMTEyMjEyOTA5WhcNMjUxMTE5MjEyOTA5WjAYMRYwFAYD
VQQDEw02OTE0ZmMyNS1iMzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6n73kBKp75dGJNL6RhL2BBYr01x0eKgQrVd2rE7zOINhk8XjrV5yuCmkagci
Xfa4yFDAC3sK4+8+wrDI6A1zji2PgK2EJw7+dtAi4ZPAXV4maGzXYFSgI68LtcM5
F4Z4jzQaSkHy8kuC/fUOOpgg7UyGZeMKGiMGxzC9Kx/avyoXmWVpp/XIV1tE3zVs
ARgpCFbyU2tVIlxsRfhmUdOjQg2jOSZLt4gI+JQ0CgkI+E2HeaKqelpQAnm3CInr
VBqT+5RkK7Bz9vV4Hp+NriT1DnhGU5fUdFp0axsoK0B/OYTsXgQ6czbY2dz4M6T0
Ixzw9TSFPGEUu4Zb9CqywMYECQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMckMLx5
xJyfLL0iUpezTJDNPwAsMB8GA1UdIwQYMBaAFB1yXJHA1HIvNACI0TdN0trzfYMS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTUwOC8wMDAyMDI3MkFD
QzIxMUVCQUJFMTk1NUVDNEY5QUUwMi9IWEpja2NEVWNpODBBSWpSTjAzUzJ2Tjln
eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hYSmNrY0RVY2k4MEFJalJOMDNTMnZOOWd4SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
OTUwOC8wMDAyMDI3MkFDQzIxMUVCQUJFMTk1NUVDNEY5QUUwMi9IWEpja2NEVWNp
ODBBSWpSTjAzUzJ2TjlneEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBvO3d8XaYs9L56/TeDC3EPKKhZ+AJKptcfhqGxrdXdUGwOYhmZvg5m
7gsp4SvWF3XFTWhrwC50tncFLkVegK+QMigSe3kA4j1Z9aUmu6YewBJUvtO+La0x
QYxsBEqh7+/a5sCDBG6dK94voJoXmTdGVUpWdC052PSI2TILfzgkeWQ4L74OcqGP
MyTU5llMRencZzJd15Qm8kWYQUmlF7DXf6Gy3clx7jBFqi4Cc/dSfJxsKROZgyOf
ynqa0fEaqv86/9zoJC1sEbpUjn2LzPvx5v+U5nVykUQ3qy1vQADLVs/wRNX7BO+m
4VMjbhyCIH8sSlWowMZbcxueZeZZ1jpH
-----END CERTIFICATE-----
Generated at Thu Nov 13 02:12:33 2025 by rpki-client