
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
File: HXJckcDUci80AIjRN03S2vN9gxI.mft (raw, json)
Hash identifier: vbiBMD0aZOP3TFf86awsdVcCpwxi18mPXWwM3eipqsk=
Subject key identifier: 48:55:B3:87:22:4B:B5:15:B7:28:C6:DD:98:E5:2F:27:47:FC:5D:0D
Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
Certificate issuer: /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Certificate serial: 06CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
Manifest number: 069F
Signing time: Fri 10 Apr 2026 22:29:47 +0000
Manifest this update: Fri 10 Apr 2026 22:29:46 +0000
Manifest next update: Fri 17 Apr 2026 22:29:46 +0000
Files and hashes: 1: HXJckcDUci80AIjRN03S2vN9gxI.crl (hash: BilyACH+dJmvvaJTJ2EEvMIN3rooY3xV7L8npB2OiLo=)
2: 6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa (hash: p/TVTKAt5KdzhUbxLMpy828VFw5LwqckZkSH14Ik/o8=)
3: 6E9FF116ACC311EBA28FAD5FC4F9AE02.roa (hash: 2BUIUgxvcNc8FKQNTEn2iBIeuclNjrnmHDRM3YAQDcg=)
4: 6BEA61CCACC311EBA28FAD5FC4F9AE02.roa (hash: v/foeEKordGhb9+twDBbACvfymVczEIMIF+8PlsYKI8=)
5: 6D407F66ACC311EBA28FAD5FC4F9AE02.roa (hash: JyfcUr1tWyuOITJhrtk9V3F9eH5PW2R7X5x70HXGjr4=)
6: 6DD1144AACC311EBA28FAD5FC4F9AE02.roa (hash: zlHp90z6YflX6Zoion059ib8bnfEmetsjV8gpqhjGfE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl
rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 22:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1740 (0x6cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119508, serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Validity
Not Before: Apr 10 22:29:46 2026 GMT
Not After : Apr 17 22:29:46 2026 GMT
Subject: CN=69d979da-8b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a3:4d:26:83:e2:bb:9e:f5:4b:7b:57:1f:87:
74:54:4d:c9:7c:7c:b3:4b:b0:6a:94:d1:d4:1c:57:
a8:fe:c8:bb:45:81:b3:66:0c:40:c4:0f:8b:a9:f1:
d9:26:bd:c6:37:8e:2c:71:88:58:3b:c0:dd:a0:e9:
a4:66:a0:7f:4d:61:fb:04:e7:87:d6:2f:7e:75:02:
5c:15:3b:ff:82:e5:49:33:fa:ad:93:b3:0f:5b:86:
5d:c3:e7:1c:0b:e6:81:d5:12:fd:b1:7f:69:f3:5f:
f1:f8:e9:9f:fa:d9:a7:b2:01:d4:ea:95:e0:2f:68:
a0:d9:71:f8:da:f5:0e:27:47:29:a2:78:30:1b:a2:
91:a8:ac:65:40:51:b1:4d:2e:c4:b7:41:7f:af:c9:
09:bc:d8:f5:42:b2:55:75:43:18:46:bf:08:0b:49:
31:01:6a:cc:25:a2:e5:a0:68:c1:75:8c:7c:da:78:
c4:bd:c8:f8:71:0f:17:d2:d9:19:89:f8:61:ac:27:
a9:a5:b5:09:56:96:22:dd:04:8c:c4:7a:57:94:92:
7b:14:ef:9d:9b:66:26:60:20:45:85:ae:95:d2:e5:
c5:2f:9d:51:45:f3:b5:55:7e:c0:54:b8:d8:e3:6c:
f9:51:4d:9a:c5:e8:0a:68:53:86:74:5b:b6:cc:87:
61:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:55:B3:87:22:4B:B5:15:B7:28:C6:DD:98:E5:2F:27:47:FC:5D:0D
X509v3 Authority Key Identifier:
keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:69:51:75:c0:1f:52:65:bf:0f:84:1e:fb:0f:aa:d0:a5:d8:
e6:07:71:fb:ce:a4:63:45:6e:80:10:67:4f:a4:16:b6:e7:b6:
ae:5b:ac:d6:52:62:61:29:4a:a2:71:19:8f:fb:3a:ac:c5:c6:
9e:0f:ad:19:fd:87:82:ad:2b:f7:9b:e7:2d:c2:e2:67:96:fc:
c6:49:46:f0:8f:1d:84:a4:35:7a:cf:41:8e:03:01:09:04:c3:
67:fa:61:5f:c4:09:af:85:e0:43:35:5f:9d:a8:8d:8d:95:19:
67:ae:ea:66:d3:e6:be:61:7c:15:7d:aa:43:ae:0b:d9:12:89:
e1:ec:da:99:e8:66:e2:12:8b:4a:e5:15:0e:c5:00:0a:52:b1:
ac:d6:c5:30:23:62:03:6b:7f:cd:6c:01:9a:5e:0d:de:a0:12:
32:9a:56:22:2e:63:b4:8f:a2:b0:28:bc:1c:44:aa:17:f5:f7:
18:a9:84:ec:c2:e2:75:83:e3:5c:7d:0e:9b:65:47:f8:d3:cf:
94:57:fa:27:59:0d:11:75:54:2f:10:1e:8d:6e:82:7c:af:86:
7d:92:f9:79:a6:0d:5b:5b:c6:c2:94:97:30:b2:2c:33:4f:eb:
be:e1:9e:24:71:4c:b8:f3:fc:fc:09:e6:47:22:e3:75:0f:71:
d2:cf:f3:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 12 03:30:54 2026 by rpki-client