
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
File: HXJckcDUci80AIjRN03S2vN9gxI.mft (raw, json)
Hash identifier: feS0Na9EEq0m7mQ06pIocR19pjAO3FxEeRJvbLUYYFA=
Subject key identifier: C7:D8:F5:69:40:CE:71:7B:F0:A9:84:F5:7D:1C:99:D0:B7:56:56:D2
Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
Certificate issuer: /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Certificate serial: 0734
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
Manifest number: 0702
Signing time: Sun 18 Oct 2026 22:17:23 +0000
Manifest this update: Sun 18 Oct 2026 22:17:23 +0000
Manifest next update: Sun 25 Oct 2026 22:17:23 +0000
Files and hashes: 1: HXJckcDUci80AIjRN03S2vN9gxI.crl (hash: FwusFiN8b28WeytNte1qFyEb4dKNNa3vPb6zhR12lCc=)
2: 6E9FF116ACC311EBA28FAD5FC4F9AE02.roa (hash: EQASLtuoR6EsjHdG53Md+z8IqytyzdxiEBxgg98uaVo=)
3: 6BEA61CCACC311EBA28FAD5FC4F9AE02.roa (hash: gmiznf/rB7enYpTf/YzP3CAZPFsBXf6xe87sGWeVl4c=)
4: 6D407F66ACC311EBA28FAD5FC4F9AE02.roa (hash: xknjJ13gwZ9xl2TQQYccPkk8b/iDjk0MZUEtEXEv1tA=)
5: 6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa (hash: o/XwhsB+XVooPsmWzQGDETGh7dBjz+5eR8mUlPI8cLs=)
6: 6DD1144AACC311EBA28FAD5FC4F9AE02.roa (hash: O6E2zr3QVTkio/pvxmFA+1SqKB5lb53jqEw26yPfilY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl
rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Oct 2026 22:17:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1844 (0x734)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119508, serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Validity
Not Before: Oct 18 22:17:23 2026 GMT
Not After : Oct 25 22:17:23 2026 GMT
Subject: CN=6ad54573-4d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8d:ef:84:7f:44:af:3d:63:74:e7:05:76:b3:
ef:d7:24:f6:07:04:af:e9:3d:ef:fa:fc:07:97:3c:
ad:33:c4:54:82:87:8a:af:8a:dd:41:9b:2d:71:77:
fb:2a:d6:45:bd:db:8d:8d:3f:b2:ed:e3:0f:7a:2f:
b1:65:9d:d9:b5:f7:01:49:a3:dc:61:8f:0a:a9:5e:
b0:f2:cb:01:d4:72:32:16:f4:fd:11:e7:3d:eb:5b:
72:bb:5b:e9:e6:e8:fc:40:29:54:c2:ec:7f:41:30:
f1:c5:49:5d:72:84:e0:d8:36:34:c3:f1:bc:8e:5b:
9c:cd:72:e3:e9:53:39:8c:50:a2:a0:03:78:b1:07:
32:64:42:f6:96:21:f1:1b:4e:b4:73:dd:a7:c7:4e:
c1:63:3a:45:3a:a5:e3:61:c9:68:28:e8:ec:a9:80:
e1:fa:7f:6b:ad:3e:55:44:aa:aa:a7:17:5c:07:1c:
d0:1a:a4:6a:e0:f9:61:e6:05:5c:3a:e6:c8:79:1e:
cd:a7:58:b9:d4:60:62:40:04:a4:f5:ee:06:52:e7:
00:3e:ee:e8:14:f1:36:8d:9c:75:c1:a2:fe:59:33:
b8:38:af:df:40:27:f8:67:52:6f:2e:cc:ef:1f:ad:
1b:16:c2:12:5d:a9:1b:66:04:36:06:0d:72:20:21:
93:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D8:F5:69:40:CE:71:7B:F0:A9:84:F5:7D:1C:99:D0:B7:56:56:D2
X509v3 Authority Key Identifier:
keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:e8:bf:b8:5d:7b:bd:4e:c4:fa:ee:20:2f:ef:aa:5f:44:c9:
f3:d3:8a:84:79:fc:a5:3c:90:c3:20:37:76:6e:af:9d:4a:bf:
c3:9b:71:7f:8c:7e:c3:1f:06:86:08:8f:93:e9:be:5e:a6:44:
fa:ad:18:ca:a5:96:ce:d0:c4:ba:45:65:d0:4b:cf:b8:87:ad:
b4:41:47:b9:e9:f2:af:6d:e9:95:99:89:ef:1b:fb:bb:f3:c3:
2c:4b:7f:0e:ee:72:a7:3c:65:a7:3d:fb:29:67:b4:93:f0:5a:
f6:36:14:1d:a8:41:be:c7:d0:5c:a9:1b:c0:2b:c2:94:20:5e:
11:39:a4:dd:1a:32:bb:24:4a:7b:e8:0b:0b:9b:6d:03:85:67:
22:49:71:e3:a2:68:9f:a6:80:a3:b3:aa:44:34:7e:3c:aa:17:
a3:fa:db:a2:a1:9f:f1:63:de:0f:e8:cc:5d:82:6c:0d:56:34:
e2:d7:1a:9d:0c:4d:4b:5d:27:5a:df:a9:92:7c:b3:8b:eb:d1:
4b:e1:b1:72:f4:84:fd:e3:12:58:c8:a0:9f:fc:0a:8d:60:97:
d2:bd:57:d9:24:c2:d9:68:9b:30:7a:19:54:b6:09:e9:04:87:
af:d1:a3:94:09:14:34:17:84:d8:30:d2:4c:28:f6:93:a0:f9:
af:0a:b6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 12:27:15 2026 by rpki-client