
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
File: HXJckcDUci80AIjRN03S2vN9gxI.mft (raw, json)
Hash identifier: BqbvkzGixC1EhqmgB3qS019kchvwICOjGZk9+hP0Gzk=
Subject key identifier: 4B:35:6A:71:BF:41:54:D4:99:BA:C8:6C:20:66:A4:3A:A4:1A:20:ED
Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
Certificate issuer: /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Certificate serial: 06DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
Manifest number: 06B1
Signing time: Sat 16 May 2026 22:24:45 +0000
Manifest this update: Sat 16 May 2026 22:24:44 +0000
Manifest next update: Sat 23 May 2026 22:24:44 +0000
Files and hashes: 1: HXJckcDUci80AIjRN03S2vN9gxI.crl (hash: gMOdtsRLhUDxrqOfMW8MuaO9cJEZqaiXU56VV/T8xPg=)
2: 6BEA61CCACC311EBA28FAD5FC4F9AE02.roa (hash: v/foeEKordGhb9+twDBbACvfymVczEIMIF+8PlsYKI8=)
3: 6E9FF116ACC311EBA28FAD5FC4F9AE02.roa (hash: 2BUIUgxvcNc8FKQNTEn2iBIeuclNjrnmHDRM3YAQDcg=)
4: 6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa (hash: p/TVTKAt5KdzhUbxLMpy828VFw5LwqckZkSH14Ik/o8=)
5: 6D407F66ACC311EBA28FAD5FC4F9AE02.roa (hash: JyfcUr1tWyuOITJhrtk9V3F9eH5PW2R7X5x70HXGjr4=)
6: 6DD1144AACC311EBA28FAD5FC4F9AE02.roa (hash: zlHp90z6YflX6Zoion059ib8bnfEmetsjV8gpqhjGfE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl
rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 23 May 2026 22:24:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1758 (0x6de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119508, serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Validity
Not Before: May 16 22:24:44 2026 GMT
Not After : May 23 22:24:44 2026 GMT
Subject: CN=6a08eead-c44b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:23:c3:7d:3d:82:a8:d7:35:5c:c0:9d:5a:23:
34:9b:33:e9:87:ec:64:34:c5:89:a3:22:d0:a9:ff:
0a:df:36:18:72:cc:1f:36:87:ed:77:34:3d:2e:3c:
5a:8f:60:a7:aa:33:33:25:5e:eb:ea:7a:00:a6:b5:
24:55:2d:87:72:15:26:72:9c:5e:5e:59:67:79:ad:
67:7a:0c:4d:9c:4f:24:88:b6:5c:f9:5c:2a:54:c0:
d2:75:51:59:64:4b:60:0e:c2:26:2a:ca:d6:fa:11:
1e:7a:d0:cc:70:b6:6b:2f:5d:e7:0f:dd:12:be:ba:
b0:1c:17:b0:88:f9:c9:6a:f6:10:d4:ed:d0:c9:c9:
0c:fa:2e:30:97:59:3b:13:4a:fd:06:bd:c5:84:ba:
1a:c8:af:00:d7:89:cd:84:d7:25:84:a7:53:f0:b2:
e0:13:63:53:3a:a1:04:6d:63:b8:73:bb:fe:cd:04:
15:fa:c2:af:e0:a7:ae:c8:b6:70:0a:3d:9f:87:21:
6f:c7:bf:67:13:c2:d5:e4:a7:a3:f1:e1:77:00:44:
6e:ca:e5:16:90:b7:2e:e2:f8:10:be:1e:14:9d:cc:
11:0e:b1:88:a9:c1:8c:3c:3a:75:c5:3a:3e:a5:d7:
ec:5b:e4:c3:79:7c:ef:83:1f:7c:f8:07:51:c6:c6:
f1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:35:6A:71:BF:41:54:D4:99:BA:C8:6C:20:66:A4:3A:A4:1A:20:ED
X509v3 Authority Key Identifier:
keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:e0:4b:bb:0e:23:c6:62:a6:ed:1f:b2:14:4f:52:97:37:d1:
8e:ba:64:4e:ba:e8:ee:64:aa:cd:11:de:87:8a:d8:0b:d3:e1:
31:37:4a:c9:8d:dc:d2:d8:77:b4:33:c2:d7:cd:e9:6e:f7:2e:
69:b2:80:e7:7b:8c:b5:3b:5e:50:4d:13:70:e6:c4:b0:6b:8c:
6d:cf:b8:bc:86:09:9d:5d:e0:9f:82:e0:63:3f:8d:c8:f8:77:
52:84:bd:7f:78:1d:95:6e:5f:3b:05:a8:a5:0c:9e:01:75:81:
19:9e:4e:18:81:f9:8d:b7:c6:16:ee:e8:e4:de:6a:85:2d:71:
60:f1:8d:e1:14:f7:22:03:49:30:66:36:ba:b9:48:72:ea:24:
41:c6:91:4f:fe:d1:54:77:4d:c7:fe:c7:67:f5:9d:e5:88:40:
86:3a:52:e9:b7:2e:68:c1:8e:8c:b6:ce:be:c0:59:6b:ba:8f:
c4:56:96:ad:18:7b:3c:5a:c9:04:b3:9f:56:01:39:82:6c:e2:
e6:ec:3f:0a:ba:d7:c0:26:29:2d:ea:56:29:8c:a4:7c:0d:90:
11:81:c5:d9:90:b6:cc:48:f4:f6:90:25:6e:51:18:4f:48:42:
1b:a1:49:ab:7a:b0:c0:b0:86:a5:3f:46:81:99:f4:a6:5d:93:
59:46:3e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 18 02:28:54 2026 by rpki-client