
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
File: HXJckcDUci80AIjRN03S2vN9gxI.mft (raw, json)
Hash identifier: xL7N/ONXAiuFcz6QUueOBDgEy5NcVRCrGkk14InkJ7k=
Subject key identifier: FD:55:79:37:E6:81:67:BA:29:90:13:34:88:E2:CB:99:96:2F:5D:D0
Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
Certificate issuer: /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Certificate serial: 06CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
Manifest number: 069E
Signing time: Wed 08 Apr 2026 22:17:20 +0000
Manifest this update: Wed 08 Apr 2026 22:17:20 +0000
Manifest next update: Wed 15 Apr 2026 22:17:20 +0000
Files and hashes: 1: HXJckcDUci80AIjRN03S2vN9gxI.crl (hash: KykIcnZfGqHCO/lMIu0yiEXTGOS4Y1yb6P6jBUrLx3s=)
2: 6DD1144AACC311EBA28FAD5FC4F9AE02.roa (hash: zlHp90z6YflX6Zoion059ib8bnfEmetsjV8gpqhjGfE=)
3: 6D407F66ACC311EBA28FAD5FC4F9AE02.roa (hash: JyfcUr1tWyuOITJhrtk9V3F9eH5PW2R7X5x70HXGjr4=)
4: 6BEA61CCACC311EBA28FAD5FC4F9AE02.roa (hash: v/foeEKordGhb9+twDBbACvfymVczEIMIF+8PlsYKI8=)
5: 6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa (hash: p/TVTKAt5KdzhUbxLMpy828VFw5LwqckZkSH14Ik/o8=)
6: 6E9FF116ACC311EBA28FAD5FC4F9AE02.roa (hash: 2BUIUgxvcNc8FKQNTEn2iBIeuclNjrnmHDRM3YAQDcg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl
rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Apr 2026 22:17:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1739 (0x6cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119508, serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Validity
Not Before: Apr 8 22:17:20 2026 GMT
Not After : Apr 15 22:17:20 2026 GMT
Subject: CN=69d6d3f0-c3c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b2:6d:3d:c6:4a:be:cd:d6:84:93:a7:7f:12:
a5:31:b7:ea:d9:e7:17:8c:f4:d3:7e:6f:b0:19:61:
86:7e:22:f2:c4:8b:06:91:36:03:0b:8f:e6:8f:4e:
b5:84:47:d2:86:85:99:64:f1:ec:25:85:ce:d9:10:
70:97:78:d5:f0:2e:13:6f:5d:7c:04:88:f4:3f:19:
2a:8f:ef:5e:e7:80:0d:94:16:f9:9d:7d:75:ab:f2:
6d:bb:27:98:aa:98:95:00:c8:ea:38:45:4a:fa:64:
6b:c8:3b:43:29:8b:e4:04:d0:b2:fc:27:3f:99:56:
d7:b8:73:49:4e:0e:da:41:c1:6a:4e:c3:10:12:5d:
da:1f:4b:df:d8:21:74:c2:c2:d6:59:8c:ff:01:a3:
26:e3:f6:7e:d2:a1:df:7e:3d:d2:83:bd:24:50:9d:
e9:35:40:34:1e:8b:bd:55:ea:e2:eb:49:bc:16:dc:
f7:c6:45:95:ce:01:c9:0d:8f:8a:10:f3:2a:49:20:
fd:bf:a7:5e:8e:47:f8:96:a0:d2:d1:10:aa:10:f5:
c7:af:23:53:8b:b7:b0:68:66:cb:7b:29:98:f3:3a:
1e:45:30:10:45:a2:fa:33:be:89:e4:0b:3f:b9:4a:
4f:96:a0:cc:04:de:73:11:66:67:f8:db:3f:71:76:
7c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:55:79:37:E6:81:67:BA:29:90:13:34:88:E2:CB:99:96:2F:5D:D0
X509v3 Authority Key Identifier:
keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:03:09:70:d6:06:6f:41:2e:99:a9:f8:d2:2a:35:7a:01:4d:
29:ea:c4:79:5a:c9:eb:9a:db:23:91:5b:bb:ea:76:e2:14:e3:
de:7e:b4:b5:8f:ea:e4:1b:93:15:85:80:f7:e3:65:2e:cd:09:
b8:c3:53:b2:af:26:ec:31:00:38:2a:91:48:2b:4c:8d:48:a6:
ed:65:2d:3c:9f:8a:87:70:02:dc:fd:b8:ec:ee:e9:59:74:e6:
5e:91:e7:3c:70:ab:7e:08:bb:b1:4c:49:c1:77:c0:d1:93:69:
3d:4a:20:6f:0d:25:8e:6a:16:7d:42:3f:64:26:91:b7:fd:21:
0c:42:28:54:3c:34:93:24:f8:8f:de:ed:18:4d:12:e4:3d:04:
23:bb:24:28:62:49:e4:d2:47:30:a0:f7:b2:55:62:2b:44:75:
3f:b9:07:e6:d2:bc:8a:bd:b4:7c:b9:d8:a8:67:2d:d1:50:cd:
41:de:e2:3c:08:6d:38:5d:08:c0:4f:ae:fe:48:d7:26:df:ed:
2d:a0:81:85:38:e7:7e:88:14:97:7e:48:d8:a9:28:29:42:24:
ed:3b:c1:2c:dc:6e:af:6c:80:49:9e:8e:e7:52:7a:4b:19:56:
5c:d6:52:89:92:79:6b:3d:aa:10:ad:62:b5:1c:8d:dc:83:ee:
d7:a2:42:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 03:26:08 2026 by rpki-client