
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
File: HXJckcDUci80AIjRN03S2vN9gxI.mft (raw, json)
Hash identifier: fvglJet+2Um4iYQrBbzEzfl5qQEwHeWMSgqmNBELaok=
Subject key identifier: B9:09:F5:E7:43:B1:84:B6:59:A1:17:79:A4:76:AE:FB:A0:7A:AC:95
Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
Certificate issuer: /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Certificate serial: 06C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
Manifest number: 0695
Signing time: Sun 22 Mar 2026 22:04:22 +0000
Manifest this update: Sun 22 Mar 2026 22:04:22 +0000
Manifest next update: Sun 29 Mar 2026 22:04:22 +0000
Files and hashes: 1: HXJckcDUci80AIjRN03S2vN9gxI.crl (hash: iu2S2IYwN06KVymO1wY/DElmmOND7wxsiIfpQQ+7zd0=)
2: 6DD1144AACC311EBA28FAD5FC4F9AE02.roa (hash: zlHp90z6YflX6Zoion059ib8bnfEmetsjV8gpqhjGfE=)
3: 6D407F66ACC311EBA28FAD5FC4F9AE02.roa (hash: JyfcUr1tWyuOITJhrtk9V3F9eH5PW2R7X5x70HXGjr4=)
4: 6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa (hash: p/TVTKAt5KdzhUbxLMpy828VFw5LwqckZkSH14Ik/o8=)
5: 6E9FF116ACC311EBA28FAD5FC4F9AE02.roa (hash: 2BUIUgxvcNc8FKQNTEn2iBIeuclNjrnmHDRM3YAQDcg=)
6: 6BEA61CCACC311EBA28FAD5FC4F9AE02.roa (hash: v/foeEKordGhb9+twDBbACvfymVczEIMIF+8PlsYKI8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl
rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 29 Mar 2026 22:04:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1730 (0x6c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119508, serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Validity
Not Before: Mar 22 22:04:22 2026 GMT
Not After : Mar 29 22:04:22 2026 GMT
Subject: CN=69c06766-446b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:37:19:81:44:7e:29:3c:12:14:28:7c:e5:03:
ed:e3:fe:f9:82:d0:01:30:bd:e0:e9:ed:1a:3f:4e:
ee:cf:26:e7:88:09:92:21:23:27:cd:1d:71:50:0b:
b1:b3:d8:9f:c1:80:54:60:96:0c:85:41:f9:b2:6e:
4a:ef:54:cd:70:22:8c:e0:bd:6f:7d:5a:35:b8:7e:
da:43:53:26:69:03:75:96:e8:76:28:a2:92:59:03:
04:49:1b:f6:c8:72:52:ea:34:9b:0a:07:08:81:66:
05:9e:3e:78:37:24:f9:41:db:78:39:45:63:2e:19:
8c:38:01:6d:d5:04:88:fe:d0:c6:14:97:e5:24:89:
2a:1e:fa:01:21:7a:7a:55:b1:0b:25:67:58:ce:12:
f0:7e:a5:6c:9a:3b:9d:b7:dc:56:12:45:14:93:6a:
1e:ff:35:71:ff:08:e4:02:8e:8f:3c:9d:34:41:d7:
6d:3c:77:31:96:47:29:fe:fc:05:e5:26:90:9e:2d:
55:51:b2:4c:62:61:df:d8:09:8d:25:a6:4d:39:20:
94:8a:6e:00:b9:c5:a4:bf:47:17:2e:1f:23:e3:1c:
4b:15:3c:f8:e9:97:3d:64:5d:d9:4a:9c:b4:d5:8f:
15:85:8f:e0:43:7c:ef:c3:9d:d5:6b:f7:bd:96:a5:
ef:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:09:F5:E7:43:B1:84:B6:59:A1:17:79:A4:76:AE:FB:A0:7A:AC:95
X509v3 Authority Key Identifier:
keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:e9:1a:80:91:b0:f8:36:e2:af:d5:e2:a0:d1:c4:0d:cf:74:
31:b4:11:58:73:17:18:61:92:93:9c:49:78:20:df:df:5a:ca:
4e:73:23:d7:d9:0e:b5:0f:79:3e:5b:fb:5e:69:10:6e:39:5d:
6a:aa:45:71:a7:38:2a:fc:c9:e7:39:5e:f7:f4:97:ea:3c:ee:
94:ad:71:bb:67:1e:bd:60:c4:0d:18:dc:cb:60:b0:30:89:b7:
61:d2:a9:e5:85:5a:75:09:c7:c3:54:53:b3:81:16:08:e5:e8:
a7:96:bb:71:c0:e1:25:e3:19:28:f3:a5:23:27:7e:a9:b9:83:
14:37:44:25:92:be:1b:28:40:cd:37:81:65:c9:4f:8e:7c:6c:
ee:51:6c:88:60:8f:e9:28:95:86:46:71:b8:ce:78:90:67:59:
a4:38:ed:f5:b5:5f:8b:4e:3a:cf:2d:92:23:6f:f8:3d:ea:3d:
26:8b:71:8d:43:9b:c9:2f:21:7d:ce:f1:5b:79:dd:11:bb:19:
62:db:ae:93:89:66:55:a0:db:11:e4:78:15:61:b5:51:82:13:
2e:07:5c:7a:6a:06:7e:c9:b9:f1:21:00:56:7d:04:e7:63:e9:
9b:df:65:73:c6:ad:ae:b8:e5:46:89:5a:d2:cc:37:de:15:ba:
7b:ca:5f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 02:50:36 2026 by rpki-client