
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
File: HXJckcDUci80AIjRN03S2vN9gxI.mft (raw, json)
Hash identifier: tfjieVsTE+zE7jV8zWgAwEG4RuiL25Cbw8jxiHuEMyA=
Subject key identifier: F5:BD:70:88:59:EB:32:D8:FA:C8:EE:24:CF:BC:0C:EE:C8:49:60:D0
Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
Certificate issuer: /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Certificate serial: 06C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
Manifest number: 0698
Signing time: Sat 28 Mar 2026 22:19:47 +0000
Manifest this update: Sat 28 Mar 2026 22:19:46 +0000
Manifest next update: Sat 04 Apr 2026 22:19:46 +0000
Files and hashes: 1: HXJckcDUci80AIjRN03S2vN9gxI.crl (hash: 7KMKNcbhO1CDzpEwDAUKZzrdr/qPS9BrOihWHzGBS0Q=)
2: 6BEA61CCACC311EBA28FAD5FC4F9AE02.roa (hash: v/foeEKordGhb9+twDBbACvfymVczEIMIF+8PlsYKI8=)
3: 6E9FF116ACC311EBA28FAD5FC4F9AE02.roa (hash: 2BUIUgxvcNc8FKQNTEn2iBIeuclNjrnmHDRM3YAQDcg=)
4: 6D407F66ACC311EBA28FAD5FC4F9AE02.roa (hash: JyfcUr1tWyuOITJhrtk9V3F9eH5PW2R7X5x70HXGjr4=)
5: 6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa (hash: p/TVTKAt5KdzhUbxLMpy828VFw5LwqckZkSH14Ik/o8=)
6: 6DD1144AACC311EBA28FAD5FC4F9AE02.roa (hash: zlHp90z6YflX6Zoion059ib8bnfEmetsjV8gpqhjGfE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl
rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 04 Apr 2026 22:19:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1733 (0x6c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119508, serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Validity
Not Before: Mar 28 22:19:46 2026 GMT
Not After : Apr 4 22:19:46 2026 GMT
Subject: CN=69c85402-296b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e8:7e:ae:b4:64:29:04:ec:72:f3:30:dc:2d:
42:57:6b:86:ec:56:02:b2:85:af:2b:c5:81:46:4a:
cb:c6:17:2d:32:13:26:d3:23:ed:27:4e:de:ea:a0:
d1:8b:97:94:62:e2:a1:3d:18:a4:dd:23:be:67:b2:
e7:72:dd:d7:2b:86:c6:59:9b:01:d7:f0:6b:bf:83:
da:e3:be:c1:d8:fb:34:cd:92:1c:19:db:02:39:83:
6a:34:ad:c7:ee:fc:03:50:cc:58:23:b3:60:4f:cd:
06:af:cb:23:6d:85:09:8e:3e:04:e6:2c:80:09:75:
c3:67:b2:04:9c:70:3a:7e:83:5d:45:86:f0:7f:51:
7f:e9:1a:74:7b:c6:5b:61:35:8a:af:22:88:8c:00:
d7:10:1d:9b:4e:04:2a:f1:5c:4c:26:03:23:c7:cf:
ef:54:ae:41:9e:95:b9:57:52:a3:53:2f:92:52:dd:
02:6a:61:3f:00:62:6d:36:05:2e:5b:47:7f:cf:2f:
99:6e:b2:1d:d3:b1:b8:d1:3f:a0:40:13:ca:40:1c:
94:09:5c:d0:ba:7d:e7:8f:dd:39:f4:44:7e:f3:78:
a2:41:47:c4:92:b2:b5:4b:2c:4c:50:e1:c5:3f:83:
ab:63:23:88:36:b8:59:40:8c:3b:d5:7d:73:4f:15:
c0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:BD:70:88:59:EB:32:D8:FA:C8:EE:24:CF:BC:0C:EE:C8:49:60:D0
X509v3 Authority Key Identifier:
keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:9a:00:dc:59:82:1d:9f:e5:f2:84:d2:d5:bb:63:5a:4b:89:
d0:0f:74:19:af:2f:b4:3e:47:b9:74:b6:8a:20:6e:00:fb:53:
1d:cf:e8:5f:a7:09:ec:51:67:fb:92:3f:9a:c7:cd:1d:b9:1b:
47:42:58:fe:2c:c4:6b:cb:72:fc:95:71:29:58:b7:0b:a1:95:
a4:ef:99:22:6e:96:3e:d1:a9:8d:4c:0f:fe:88:80:72:9d:15:
b8:2e:46:66:dd:c7:26:9a:8f:c4:44:5b:0c:fa:8a:4f:82:07:
92:ba:19:22:be:aa:b3:89:cc:ed:40:3b:5c:f1:ca:ae:fb:07:
a9:e6:96:4d:37:40:b1:04:89:0d:16:73:f4:f3:6f:18:eb:f9:
b6:f6:d2:1a:65:f2:ec:02:93:b4:68:8f:ca:26:cf:be:2a:43:
c7:5f:3c:00:54:76:88:30:63:83:b2:b5:d1:cd:52:37:26:e5:
a4:d8:b3:41:29:73:32:27:68:7a:7f:d1:b9:38:76:bb:2b:10:
5e:c1:2d:15:be:b5:4a:8e:77:fb:cb:79:61:5f:84:e9:bb:15:
17:56:4f:6b:e6:2a:dd:63:ea:b1:5e:c5:c5:c3:c4:c1:d6:69:
87:6e:77:ca:b2:ef:d0:bf:20:61:33:9f:57:c2:b1:9c:6b:0e:
70:be:28:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:18:43 2026 by rpki-client