
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/HUW1iuOmlSERtAmFTag5MXvugjM.mft
File: HUW1iuOmlSERtAmFTag5MXvugjM.mft (raw, json)
Hash identifier: WrigatVMRXBltRUKJHzutlNHZs2VUuVRO5yCQ/Jtlvw=
Subject key identifier: 52:B4:96:0A:66:4A:82:3A:1E:3C:FD:DE:1B:C0:FE:17:BD:C6:07:8A
Authority key identifier: 1D:45:B5:8A:E3:A6:95:21:11:B4:09:85:4D:A8:39:31:7B:EE:82:33
Certificate issuer: /CN=A9120119/serialNumber=1D45B58AE3A6952111B409854DA839317BEE8233
Certificate serial: 120A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUW1iuOmlSERtAmFTag5MXvugjM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/HUW1iuOmlSERtAmFTag5MXvugjM.mft
Manifest number: 1AF2
Signing time: Sun 04 Oct 2026 17:10:28 +0000
Manifest this update: Sun 04 Oct 2026 17:10:27 +0000
Manifest next update: Sun 11 Oct 2026 17:10:27 +0000
Files and hashes: 1: HUW1iuOmlSERtAmFTag5MXvugjM.crl (hash: ZfCVGdSUq/VAMcb6DPf0oIVdqNa75STpfSPg1AXPabI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/HUW1iuOmlSERtAmFTag5MXvugjM.crl
rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/HUW1iuOmlSERtAmFTag5MXvugjM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUW1iuOmlSERtAmFTag5MXvugjM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 16:20:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4618 (0x120a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120119, serialNumber=1D45B58AE3A6952111B409854DA839317BEE8233
Validity
Not Before: Oct 4 17:10:27 2026 GMT
Not After : Oct 11 17:10:27 2026 GMT
Subject: CN=6ac28884-d094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:81:85:05:ea:dd:0e:f2:8b:86:0c:b0:7f:60:
88:8b:40:de:df:91:23:db:b0:b1:83:db:ad:b0:2c:
61:33:3a:04:1d:31:64:64:84:55:ef:27:2c:52:1a:
81:00:da:d2:f8:49:d9:78:77:f9:64:f8:cd:70:13:
e3:7e:7c:8d:1c:d6:21:09:26:c4:cc:7a:c3:5f:38:
2a:a5:aa:9d:76:92:e2:6e:ed:ec:ce:e9:b6:7d:aa:
a6:b1:6e:0b:d2:3e:14:83:e8:ef:76:3e:70:d4:1e:
7d:db:00:9e:2a:ee:e4:4b:2c:57:8a:32:f9:50:fa:
f9:3a:bd:6d:c1:b9:fd:95:90:98:a2:7c:d2:92:9a:
8f:b0:58:5b:52:3e:3b:6f:63:02:05:45:92:f1:13:
7e:a3:ce:e1:57:0f:13:6e:c2:53:ed:cc:68:c4:25:
aa:0c:80:18:ec:2f:fc:cf:29:81:14:9d:30:46:6d:
83:bd:48:6d:16:3b:31:f5:de:36:9b:ed:85:70:c9:
c6:a5:39:9e:3f:b6:3b:6a:1a:cf:7e:4a:9a:ec:a8:
8e:0e:14:cd:1e:14:bf:0c:a6:a0:a5:c4:8a:f4:05:
da:71:1e:64:a9:ff:db:06:05:33:44:ff:33:fb:c8:
21:cf:a5:d0:54:0a:3c:04:32:a6:bd:3c:4d:8f:0f:
92:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B4:96:0A:66:4A:82:3A:1E:3C:FD:DE:1B:C0:FE:17:BD:C6:07:8A
X509v3 Authority Key Identifier:
keyid:1D:45:B5:8A:E3:A6:95:21:11:B4:09:85:4D:A8:39:31:7B:EE:82:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/HUW1iuOmlSERtAmFTag5MXvugjM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUW1iuOmlSERtAmFTag5MXvugjM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/HUW1iuOmlSERtAmFTag5MXvugjM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:d7:d7:f8:a1:9d:9f:de:1b:83:b8:92:ce:cf:05:8a:df:2c:
43:a2:fa:35:95:2b:1c:09:6f:3c:50:0e:a4:01:d9:64:75:ec:
2a:3b:53:02:33:52:57:80:c9:73:2a:3f:5a:0c:df:d2:d0:3e:
a0:e6:9e:ea:ef:77:b6:ec:30:50:bc:1f:c4:ab:83:4f:ee:ab:
32:40:3d:13:95:88:56:c2:68:da:cf:e3:63:26:71:33:05:e4:
c2:c0:36:e1:a9:b9:15:54:59:b7:f7:59:05:ba:6a:db:fa:0e:
70:05:bc:7a:37:3c:7d:bd:ec:55:1b:10:df:d7:f1:e3:b1:b2:
5d:29:d2:ae:dd:ca:a5:fb:81:96:30:e5:e7:02:a8:b0:d4:fd:
65:bd:9b:af:cf:e2:3b:09:5e:33:d8:f3:fc:88:b8:07:b4:39:
dd:d9:c2:94:b4:57:b7:53:f6:b4:5f:97:da:8a:91:43:93:1b:
80:a3:a8:71:40:7b:9e:e0:a7:f6:8f:c5:82:37:86:32:2c:83:
55:01:49:a5:06:bc:a8:29:1c:9e:2f:d9:81:d9:c7:d4:c7:b5:
2f:0d:83:48:78:9f:dc:1d:6e:90:e0:3f:58:e3:5d:92:aa:8a:
4f:9b:33:a2:ea:a4:13:e5:05:f6:ac:96:9b:ea:60:de:6c:60:
67:f7:0d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:01:07 2026 by rpki-client