
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
File: HXJckcDUci80AIjRN03S2vN9gxI.mft (raw, json)
Hash identifier: Gl12bN4V0INdjziDcz0N6yKe446dk+AOEhylob3+5Bo=
Subject key identifier: 88:FD:0F:26:3D:72:A5:61:42:28:FA:6F:81:18:DD:2F:E4:5A:3C:70
Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
Certificate issuer: /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Certificate serial: 06B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
Manifest number: 068A
Signing time: Mon 02 Mar 2026 02:25:33 +0000
Manifest this update: Mon 02 Mar 2026 02:25:31 +0000
Manifest next update: Mon 09 Mar 2026 02:25:31 +0000
Files and hashes: 1: HXJckcDUci80AIjRN03S2vN9gxI.crl (hash: iJwcz9h9grHqXC+3JCdZZbJvq8QL4wEd/ImD0sVt+X8=)
2: 6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa (hash: p/TVTKAt5KdzhUbxLMpy828VFw5LwqckZkSH14Ik/o8=)
3: 6E9FF116ACC311EBA28FAD5FC4F9AE02.roa (hash: 2BUIUgxvcNc8FKQNTEn2iBIeuclNjrnmHDRM3YAQDcg=)
4: 6DD1144AACC311EBA28FAD5FC4F9AE02.roa (hash: zlHp90z6YflX6Zoion059ib8bnfEmetsjV8gpqhjGfE=)
5: 6D407F66ACC311EBA28FAD5FC4F9AE02.roa (hash: JyfcUr1tWyuOITJhrtk9V3F9eH5PW2R7X5x70HXGjr4=)
6: 6BEA61CCACC311EBA28FAD5FC4F9AE02.roa (hash: v/foeEKordGhb9+twDBbACvfymVczEIMIF+8PlsYKI8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl
rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:14:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1719 (0x6b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119508, serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Validity
Not Before: Mar 2 02:25:31 2026 GMT
Not After : Mar 9 02:25:31 2026 GMT
Subject: CN=69a4f51c-66aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:37:13:0d:52:13:fe:31:e1:ed:5b:aa:b1:66:
11:24:f1:0e:06:72:49:c4:88:4d:a3:80:5d:31:b9:
55:1e:aa:5c:cc:0b:25:3d:1b:1a:51:42:37:cb:f8:
b9:46:96:96:9d:dd:d0:1e:43:9f:26:d7:85:c6:82:
96:c5:56:66:5e:b3:b6:af:9e:8e:9f:e2:b6:02:22:
4e:ae:23:e6:2c:6b:f7:d8:6f:91:33:51:bd:a4:1a:
a1:db:57:62:82:79:f6:8f:f6:b9:75:99:cf:ce:d4:
1c:85:e3:53:44:be:73:8f:ce:e2:7a:6c:40:0d:6b:
bc:02:18:7b:f3:c5:bb:a5:15:21:39:e1:c6:2f:ee:
0d:d1:c9:77:5e:24:10:bf:4d:0d:ad:09:ab:bc:1b:
5a:9f:1f:59:d0:97:51:00:db:66:26:9c:33:67:48:
4a:a2:a1:7d:20:25:fb:93:4c:6f:f2:e9:77:ce:4a:
89:92:a4:b9:da:31:9b:0d:7d:26:c1:1a:7b:b0:ac:
f6:53:31:f3:d9:53:1c:8f:be:8a:7f:b0:3a:2d:0b:
97:ad:d5:1a:4a:ad:25:a8:9a:ec:e1:d9:1a:8e:f3:
1b:5b:42:22:0b:3b:42:42:14:dd:c1:58:d1:34:ae:
61:02:4d:2f:9d:f7:75:60:97:e9:61:ec:62:4a:33:
e6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:FD:0F:26:3D:72:A5:61:42:28:FA:6F:81:18:DD:2F:E4:5A:3C:70
X509v3 Authority Key Identifier:
keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:dd:aa:dd:7b:1f:d8:76:e8:07:ed:e6:f1:58:11:f1:31:53:
df:30:bd:c0:bc:16:6a:da:7c:d6:6f:9d:2c:f4:ae:4c:92:b3:
b0:71:6c:8b:66:25:8f:98:74:03:43:5b:7a:15:de:60:b0:f8:
eb:7d:67:70:c6:06:79:5b:a4:aa:21:30:43:d6:b9:c0:71:76:
92:5c:c0:37:7b:23:23:33:1f:42:58:5a:29:70:a8:8c:a5:3f:
03:d7:20:8e:ae:62:12:18:05:be:3d:9e:bd:59:75:9e:5e:7c:
dd:4e:ea:fc:83:c5:40:74:b5:74:d4:e7:96:d4:b2:9d:4c:f7:
3d:a3:b6:14:6c:f8:93:3e:3f:78:bc:c4:29:98:5e:cb:d4:b8:
2b:65:4a:ea:13:6c:ef:bd:38:03:7c:a0:51:d0:23:1e:d9:d2:
6d:7a:d2:4a:8a:fa:68:88:f9:77:59:76:68:ba:bf:a7:b2:49:
79:7b:f9:6c:cb:f1:5e:32:69:42:d4:65:39:f7:49:e7:c8:d6:
3a:8f:e1:ec:31:50:3a:7d:0c:ee:7e:45:fa:f5:3a:32:0e:dd:
8f:d7:e6:5d:f8:ad:e7:1d:06:b1:ab:94:8d:fa:a5:07:e9:49:
00:3a:ca:b6:0d:bf:90:ea:2a:00:e4:22:39:e7:72:32:43:ef:
34:53:a8:1a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBrcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTk1MDgxMTAvBgNVBAUTKDFENzI1QzkxQzBENDcyMkYzNDAwODhEMTM3NEREMkRB
RjM3RDgzMTIwHhcNMjYwMzAyMDIyNTMxWhcNMjYwMzA5MDIyNTMxWjAYMRYwFAYD
VQQDEw02OWE0ZjUxYy02NmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1zcTDVIT/jHh7VuqsWYRJPEOBnJJxIhNo4BdMblVHqpczAslPRsaUUI3y/i5
RpaWnd3QHkOfJteFxoKWxVZmXrO2r56On+K2AiJOriPmLGv32G+RM1G9pBqh21di
gnn2j/a5dZnPztQcheNTRL5zj87iemxADWu8Ahh788W7pRUhOeHGL+4N0cl3XiQQ
v00NrQmrvBtanx9Z0JdRANtmJpwzZ0hKoqF9ICX7k0xv8ul3zkqJkqS52jGbDX0m
wRp7sKz2UzHz2VMcj76Kf7A6LQuXrdUaSq0lqJrs4dkajvMbW0IiCztCQhTdwVjR
NK5hAk0vnfd1YJfpYexiSjPmowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIj9DyY9
cqVhQij6b4EY3S/kWjxwMB8GA1UdIwQYMBaAFB1yXJHA1HIvNACI0TdN0trzfYMS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTUwOC8wMDAyMDI3MkFD
QzIxMUVCQUJFMTk1NUVDNEY5QUUwMi9IWEpja2NEVWNpODBBSWpSTjAzUzJ2Tjln
eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hYSmNrY0RVY2k4MEFJalJOMDNTMnZOOWd4SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
OTUwOC8wMDAyMDI3MkFDQzIxMUVCQUJFMTk1NUVDNEY5QUUwMi9IWEpja2NEVWNp
ODBBSWpSTjAzUzJ2TjlneEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPN2q3Xsf2HboB+3m8VgR8TFT3zC9wLwWatp81m+dLPSuTJKzsHFsi2Ylj5h0
A0NbehXeYLD4631ncMYGeVukqiEwQ9a5wHF2klzAN3sjIzMfQlhaKXCojKU/A9cg
jq5iEhgFvj2evVl1nl583U7q/IPFQHS1dNTnltSynUz3PaO2FGz4kz4/eLzEKZhe
y9S4K2VK6hNs7704A3ygUdAjHtnSbXrSSor6aIj5d1l2aLq/p7JJeXv5bMvxXjJp
QtRlOfdJ58jWOo/h7DFQOn0M7n5F+vU6Mg7dj9fmXfit5x0GsauUjfqlB+lJADrK
tg2/kOoqAOQiOedyMkPvNFOoGg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:08:47 2026 by rpki-client