
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
File: HXJckcDUci80AIjRN03S2vN9gxI.mft (raw, json)
Hash identifier: 4qynUfT62B1roS5Zhkh0STG94nE3Q5bJeDa5yKVphRk=
Subject key identifier: 4D:00:9F:87:13:7F:B1:E1:8E:7A:C2:90:E9:77:8D:A6:5A:82:92:94
Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
Certificate issuer: /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Certificate serial: 06F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
Manifest number: 06CA
Signing time: Sat 04 Jul 2026 22:35:21 +0000
Manifest this update: Sat 04 Jul 2026 22:35:20 +0000
Manifest next update: Sat 11 Jul 2026 22:35:20 +0000
Files and hashes: 1: HXJckcDUci80AIjRN03S2vN9gxI.crl (hash: Hkxam0uGmyKIlCWZ4dVnRDI4gX7P+71+vqCI8mekKKw=)
2: 6BEA61CCACC311EBA28FAD5FC4F9AE02.roa (hash: v/foeEKordGhb9+twDBbACvfymVczEIMIF+8PlsYKI8=)
3: 6DD1144AACC311EBA28FAD5FC4F9AE02.roa (hash: zlHp90z6YflX6Zoion059ib8bnfEmetsjV8gpqhjGfE=)
4: 6D407F66ACC311EBA28FAD5FC4F9AE02.roa (hash: JyfcUr1tWyuOITJhrtk9V3F9eH5PW2R7X5x70HXGjr4=)
5: 6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa (hash: p/TVTKAt5KdzhUbxLMpy828VFw5LwqckZkSH14Ik/o8=)
6: 6E9FF116ACC311EBA28FAD5FC4F9AE02.roa (hash: 2BUIUgxvcNc8FKQNTEn2iBIeuclNjrnmHDRM3YAQDcg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl
rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Jul 2026 22:35:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1783 (0x6f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119508, serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Validity
Not Before: Jul 4 22:35:20 2026 GMT
Not After : Jul 11 22:35:20 2026 GMT
Subject: CN=6a498aa9-9516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9f:4f:6a:ec:a9:85:d2:c4:1a:b1:9b:58:47:
88:03:03:60:7c:f3:8e:4b:c4:62:0c:82:ed:d0:4e:
1f:18:e5:17:f2:a4:6b:52:1c:76:d8:fe:29:a4:cf:
df:8f:55:54:36:77:58:b5:28:2a:0a:39:c2:4d:7e:
63:19:b9:8e:31:12:7e:f8:44:71:0f:4a:5f:55:92:
c9:fd:67:3b:6d:7c:03:c9:9d:ad:f8:5b:aa:3b:cf:
75:3e:5f:58:cd:46:04:46:42:ff:0b:56:29:0d:2c:
a4:cb:1b:58:82:e6:c2:47:b4:d0:9b:35:83:73:88:
cc:28:ec:d9:20:d5:43:a2:ec:b4:19:54:95:db:04:
94:d5:3e:da:a5:1c:ae:54:ba:c2:76:41:c5:47:7b:
8a:9f:03:16:14:cc:7a:da:89:72:13:6f:4f:1a:32:
8b:7a:e6:5d:65:4d:be:b1:90:bd:a7:c2:a7:41:3e:
85:6b:79:08:cb:ed:bb:78:a1:55:eb:41:b1:6a:ea:
e9:9a:3e:42:97:8d:00:5b:78:35:37:6d:ca:c7:a0:
f9:a1:84:00:42:b3:f4:c5:30:ba:35:3c:57:e9:6f:
67:e1:9f:8f:80:ee:71:66:94:f6:6d:ed:80:8d:6d:
ae:1e:38:33:a3:8a:bd:0b:de:42:8c:f3:ef:da:b2:
b4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:00:9F:87:13:7F:B1:E1:8E:7A:C2:90:E9:77:8D:A6:5A:82:92:94
X509v3 Authority Key Identifier:
keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c4:da:13:f1:66:33:05:e0:da:f8:7f:e1:a6:08:08:34:06:7b:
65:fa:8e:be:eb:5a:9e:b9:fa:d0:19:d4:8b:8c:5b:bb:84:ba:
54:f8:ee:a1:76:5e:6b:f1:06:f0:85:c1:7b:19:52:a6:ee:9b:
4e:d1:af:0b:f2:1e:dd:42:87:7d:f4:96:91:ed:56:c8:20:e9:
32:a5:9d:54:5e:df:c4:63:01:bc:90:59:84:84:6c:82:80:74:
fa:b1:df:1f:da:cc:79:39:c4:7a:7b:c7:f1:ec:3b:6f:97:2d:
fe:39:79:d8:22:7f:e6:14:1c:b6:0f:f5:72:8a:f0:7c:d5:ca:
77:97:f4:64:f8:fb:78:93:f1:10:38:c3:f2:1e:b0:db:2e:f8:
20:5b:5a:14:52:6f:85:23:41:30:61:74:95:2e:66:6f:b4:c8:
04:0b:d9:07:8c:5d:7c:bc:1d:c5:b6:fb:45:c2:65:04:51:db:
ba:21:51:53:67:15:a1:2a:e2:63:3b:46:de:46:a0:da:05:f0:
30:41:1c:c8:6c:d6:ed:9e:1b:2b:ea:8f:a6:96:d4:29:35:0b:
28:df:08:f4:91:ef:3a:81:4e:c7:3c:56:20:e3:67:3a:08:60:
e2:b3:da:58:4e:2c:35:9a:e8:f6:31:ee:02:e5:aa:2d:ed:32:
31:19:1a:91
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBvcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTk1MDgxMTAvBgNVBAUTKDFENzI1QzkxQzBENDcyMkYzNDAwODhEMTM3NEREMkRB
RjM3RDgzMTIwHhcNMjYwNzA0MjIzNTIwWhcNMjYwNzExMjIzNTIwWjAYMRYwFAYD
VQQDEw02YTQ5OGFhOS05NTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtZ9PauyphdLEGrGbWEeIAwNgfPOOS8RiDILt0E4fGOUX8qRrUhx22P4ppM/f
j1VUNndYtSgqCjnCTX5jGbmOMRJ++ERxD0pfVZLJ/Wc7bXwDyZ2t+FuqO891Pl9Y
zUYERkL/C1YpDSykyxtYgubCR7TQmzWDc4jMKOzZINVDouy0GVSV2wSU1T7apRyu
VLrCdkHFR3uKnwMWFMx62olyE29PGjKLeuZdZU2+sZC9p8KnQT6Fa3kIy+27eKFV
60Gxaurpmj5Cl40AW3g1N23Kx6D5oYQAQrP0xTC6NTxX6W9n4Z+PgO5xZpT2be2A
jW2uHjgzo4q9C95CjPPv2rK01wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE0An4cT
f7HhjnrCkOl3jaZagpKUMB8GA1UdIwQYMBaAFB1yXJHA1HIvNACI0TdN0trzfYMS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTUwOC8wMDAyMDI3MkFD
QzIxMUVCQUJFMTk1NUVDNEY5QUUwMi9IWEpja2NEVWNpODBBSWpSTjAzUzJ2Tjln
eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hYSmNrY0RVY2k4MEFJalJOMDNTMnZOOWd4SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
OTUwOC8wMDAyMDI3MkFDQzIxMUVCQUJFMTk1NUVDNEY5QUUwMi9IWEpja2NEVWNp
ODBBSWpSTjAzUzJ2TjlneEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAxNoT8WYzBeDa+H/hpggINAZ7ZfqOvutanrn60BnUi4xbu4S6VPjuoXZea/EG
8IXBexlSpu6bTtGvC/Ie3UKHffSWke1WyCDpMqWdVF7fxGMBvJBZhIRsgoB0+rHf
H9rMeTnEenvH8ew7b5ct/jl52CJ/5hQctg/1corwfNXKd5f0ZPj7eJPxEDjD8h6w
2y74IFtaFFJvhSNBMGF0lS5mb7TIBAvZB4xdfLwdxbb7RcJlBFHbuiFRU2cVoSri
YztG3kag2gXwMEEcyGzW7Z4bK+qPppbUKTULKN8I9JHvOoFOxzxWIONnOghg4rPa
WE4sNZro9jHuAuWqLe0yMRkakQ==
-----END CERTIFICATE-----
Generated at Mon Jul 6 12:01:58 2026 by rpki-client