
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/HUW1iuOmlSERtAmFTag5MXvugjM.mft
File: HUW1iuOmlSERtAmFTag5MXvugjM.mft (raw, json)
Hash identifier: Wpd12ImkjixwWJeIcZyIX6WkY6ytDWOBKGoNv41TjQE=
Subject key identifier: 77:A7:4B:20:17:F4:CE:69:0C:73:AF:02:F1:CD:B8:65:2E:C2:DC:D0
Authority key identifier: 1D:45:B5:8A:E3:A6:95:21:11:B4:09:85:4D:A8:39:31:7B:EE:82:33
Certificate issuer: /CN=A9120119/serialNumber=1D45B58AE3A6952111B409854DA839317BEE8233
Certificate serial: 11F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUW1iuOmlSERtAmFTag5MXvugjM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/HUW1iuOmlSERtAmFTag5MXvugjM.mft
Manifest number: 1AC2
Signing time: Tue 18 Aug 2026 17:20:57 +0000
Manifest this update: Tue 18 Aug 2026 17:20:57 +0000
Manifest next update: Tue 25 Aug 2026 17:20:57 +0000
Files and hashes: 1: HUW1iuOmlSERtAmFTag5MXvugjM.crl (hash: AmBLTTB6QFHw+PAu/4lOUoK255nTvjf+ScoL/AkTLeE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/HUW1iuOmlSERtAmFTag5MXvugjM.crl
rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/HUW1iuOmlSERtAmFTag5MXvugjM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUW1iuOmlSERtAmFTag5MXvugjM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 17:20:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4594 (0x11f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120119, serialNumber=1D45B58AE3A6952111B409854DA839317BEE8233
Validity
Not Before: Aug 18 17:20:57 2026 GMT
Not After : Aug 25 17:20:57 2026 GMT
Subject: CN=6a849479-a383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:86:3f:d3:54:91:21:a2:d7:19:e7:19:fd:c6:
dc:aa:34:f4:37:ae:a3:82:34:bb:2d:ac:01:2d:a0:
b2:5d:91:4e:24:ea:66:2b:14:48:e2:33:44:7f:a9:
14:04:e5:df:8f:e3:f3:3b:7a:64:dc:c1:bc:34:80:
81:18:1d:fb:78:81:b0:4b:f3:3e:ba:48:0b:c3:07:
e0:cc:0f:a3:d3:d7:7c:a5:cb:c8:ef:a4:5b:c1:d2:
fe:3f:8f:7f:2b:10:b7:bd:15:5a:41:07:17:b2:69:
a6:3f:c1:0e:77:9d:08:d7:09:f4:d6:0b:31:95:49:
96:65:88:cf:d3:fe:76:b7:66:f2:4c:75:fc:de:69:
7e:af:09:67:22:bd:99:10:ca:a2:3a:77:48:57:76:
a4:b6:dc:a9:46:1a:21:cf:1a:be:98:b0:eb:f1:68:
16:7b:14:2e:13:fd:a5:fb:4c:47:ea:17:63:59:c9:
f1:43:1c:68:7d:bd:05:e4:c7:6c:48:e7:62:bd:01:
d9:0a:d9:fb:df:a4:64:0d:59:41:cd:c8:37:eb:3b:
e9:83:c3:c1:75:56:24:b0:44:f6:f1:34:5b:1d:c0:
9b:13:0f:f4:7c:52:02:9c:a6:78:32:b2:05:72:0f:
45:6d:8f:bf:25:97:d9:fb:0a:c1:79:b3:1a:9e:0c:
6d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A7:4B:20:17:F4:CE:69:0C:73:AF:02:F1:CD:B8:65:2E:C2:DC:D0
X509v3 Authority Key Identifier:
keyid:1D:45:B5:8A:E3:A6:95:21:11:B4:09:85:4D:A8:39:31:7B:EE:82:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/HUW1iuOmlSERtAmFTag5MXvugjM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUW1iuOmlSERtAmFTag5MXvugjM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/HUW1iuOmlSERtAmFTag5MXvugjM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:8b:b3:36:78:9a:be:ac:e7:9e:20:18:a8:3e:01:2a:66:64:
8f:98:94:7b:8e:34:64:05:86:25:ab:7f:e5:00:91:6a:81:cb:
58:a2:f4:79:b7:a0:da:06:93:29:55:98:55:35:4d:1c:02:21:
21:6d:eb:29:71:e7:d4:ea:8a:74:27:60:92:3c:f4:71:c5:d0:
57:63:67:c2:64:e3:64:54:52:2e:db:b4:d2:67:c4:c3:96:f6:
f4:88:28:6e:1b:d3:9d:02:1e:62:03:69:fa:fb:02:1c:9e:89:
89:74:d2:ed:2c:20:58:ef:0e:8c:ce:c5:34:9a:db:62:27:58:
d2:0d:74:24:0c:c8:8f:70:51:08:91:c9:2d:17:67:0b:aa:47:
e4:1a:04:3f:4f:c6:ee:a6:84:29:e1:4a:25:12:66:16:f2:68:
d5:09:8e:d4:86:b9:fe:f5:e5:81:81:51:54:b5:95:a8:f5:a1:
30:44:ce:3a:53:34:f7:c9:8c:65:fd:3a:9e:ca:1c:80:8b:b5:
31:61:21:17:e2:cc:a9:4b:88:e9:e7:2d:ef:cf:49:4a:7c:68:
2f:b4:ae:11:c9:5c:b7:33:04:42:3b:5d:66:ec:08:a8:5b:be:
ad:5d:44:b0:c5:f6:c1:e2:ac:d6:9b:aa:c3:f3:8a:35:db:9d:
1d:d0:00:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:53:56 2026 by rpki-client