
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft
File: HHswV26xhQjvJ3nE71u1ckkt0pk.mft (raw, json)
Hash identifier: NeIDninifv77/i8BPlJfBebYGmiPo8hFSSiGiX8UJSc=
Subject key identifier: 8F:F8:6D:83:EB:67:7B:12:58:68:82:73:EB:22:80:F7:FC:55:3E:BC
Authority key identifier: 1C:7B:30:57:6E:B1:85:08:EF:27:79:C4:EF:5B:B5:72:49:2D:D2:99
Certificate issuer: /CN=A911F5CA/serialNumber=1C7B30576EB18508EF2779C4EF5BB572492DD299
Certificate serial: 0185
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHswV26xhQjvJ3nE71u1ckkt0pk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft
Manifest number: 0177
Signing time: Sun 05 Apr 2026 04:38:32 +0000
Manifest this update: Sun 05 Apr 2026 04:38:31 +0000
Manifest next update: Sun 12 Apr 2026 04:38:31 +0000
Files and hashes: 1: HHswV26xhQjvJ3nE71u1ckkt0pk.crl (hash: 3xP99+abRzaHEgmpziP6vjH9wblFk/F+TzYlYBe6vEY=)
2: 7E933D0427B711EF8867AA49C4F9AE02.roa (hash: GCQF0mtb8Gekl6O8/+EeLV+4PjQyO396ilHkXd+2kuw=)
3: E3A9EC4C025011EFB3CEFA09C4F9AE02.roa (hash: 1zV+/1R8NXTU00HPSWjbCXmTRWs8S22JUS1CXgvAzR4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.crl
rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHswV26xhQjvJ3nE71u1ckkt0pk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 04:38:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 389 (0x185)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F5CA, serialNumber=1C7B30576EB18508EF2779C4EF5BB572492DD299
Validity
Not Before: Apr 5 04:38:31 2026 GMT
Not After : Apr 12 04:38:31 2026 GMT
Subject: CN=69d1e748-a21d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0c:eb:dc:d6:04:d9:c9:92:e5:bf:ae:88:31:
ff:48:32:14:ee:2c:a3:77:87:2d:b3:4f:b1:db:ce:
57:99:41:de:3b:e8:bb:39:1a:eb:06:5a:24:1f:2e:
47:c1:46:cd:84:02:4f:21:5f:84:be:d7:02:1f:8e:
90:96:e2:d1:3f:c8:a9:f6:8a:e2:20:75:89:30:3c:
f9:94:e4:7a:f2:42:59:a9:7b:c5:73:08:b1:5f:10:
1b:62:0a:83:73:21:27:63:5e:c1:a0:b9:95:27:7f:
b7:8b:0e:4e:a0:2d:c0:79:2b:4d:59:cf:bb:c2:9c:
1f:49:1f:61:15:2d:c4:e5:af:06:8e:e9:44:64:f7:
6f:bc:5b:b2:c7:f8:46:0e:6b:8e:ab:b1:e2:9d:fa:
a4:a8:ad:14:b8:e3:1c:52:cf:78:1d:e6:c0:21:27:
f8:ea:9b:c7:9e:2c:cb:bb:31:98:12:08:36:fa:fe:
5f:1d:3e:99:c6:3f:76:a0:2d:9c:d9:85:82:74:2a:
53:ea:8f:77:af:ce:91:48:f4:87:ae:43:98:be:b9:
1b:a7:70:a7:da:7b:82:b1:97:d0:be:1b:dd:43:3c:
3d:8c:58:fa:d7:42:e1:b2:5f:97:be:68:54:56:b5:
60:2d:7b:9f:47:7a:7a:6e:d3:18:ec:c0:2a:59:a3:
5b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F8:6D:83:EB:67:7B:12:58:68:82:73:EB:22:80:F7:FC:55:3E:BC
X509v3 Authority Key Identifier:
keyid:1C:7B:30:57:6E:B1:85:08:EF:27:79:C4:EF:5B:B5:72:49:2D:D2:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHswV26xhQjvJ3nE71u1ckkt0pk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:1a:05:56:7a:7a:df:19:6f:23:02:2b:09:a2:a8:85:1a:8a:
ef:21:5c:f5:75:ad:58:b2:46:26:6b:c7:ab:8a:de:20:27:3c:
bf:fc:8c:ac:ba:1f:b4:b3:a1:7c:af:1f:e7:19:f5:18:77:0d:
9c:19:ed:e5:32:fc:4f:78:c1:01:f0:a7:4e:42:e2:74:8b:19:
ee:4b:62:f7:ed:26:df:9d:7e:d1:86:83:50:a9:35:eb:db:cb:
44:c0:29:7a:5f:e8:11:53:79:36:d7:b9:39:df:56:f9:e9:42:
81:26:e6:0f:ce:c5:7f:68:e6:33:62:82:23:92:21:2f:69:91:
e1:d1:d0:56:6b:12:c3:8c:c8:04:48:6c:86:d3:06:37:ce:17:
61:ef:e0:ae:11:67:3d:7b:5e:a5:75:5e:b4:0a:28:db:22:0f:
9a:ca:f0:96:ad:05:13:57:d9:b8:5c:c9:65:9d:ad:6b:b3:87:
03:4d:c8:00:63:cf:99:1b:98:da:41:d8:33:cb:80:4b:55:e8:
59:c4:fc:d1:f7:12:7e:50:69:fb:aa:c3:38:b6:5a:65:8a:fa:
cb:ef:e1:d1:34:be:63:96:6e:b8:46:1e:6c:b8:8b:12:fc:cd:
1f:47:80:97:84:97:3e:7a:11:da:a9:8f:16:48:85:11:f3:ef:
d1:d4:40:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:40:50 2026 by rpki-client