
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.mft
File: hdbxhJPYoIzHKxsJHUr1T48KKLM.mft (raw, json)
Hash identifier: BMe36xvfEz8Bjtr6VV9oBIU/Fqv0swbn/GG3HE8M28w=
Subject key identifier: 95:5B:30:B6:17:9D:67:14:7C:EF:E8:AD:4F:66:A7:13:30:C6:0D:C6
Authority key identifier: 85:D6:F1:84:93:D8:A0:8C:C7:2B:1B:09:1D:4A:F5:4F:8F:0A:28:B3
Certificate issuer: /CN=A9125225/serialNumber=85D6F18493D8A08CC72B1B091D4AF54F8F0A28B3
Certificate serial: 074B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hdbxhJPYoIzHKxsJHUr1T48KKLM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.mft
Manifest number: 073E
Signing time: Tue 18 Aug 2026 22:14:57 +0000
Manifest this update: Tue 18 Aug 2026 22:14:57 +0000
Manifest next update: Tue 25 Aug 2026 22:14:57 +0000
Files and hashes: 1: hdbxhJPYoIzHKxsJHUr1T48KKLM.crl (hash: SyQohVxlETb01viiI+Fv2VEdO3sY5KYxb52LnPScEvg=)
2: F66F50628A9C11EB9B2E044BC4F9AE02.roa (hash: ViFrg5wOh95Ixt6WgSbJ0P48D8DiHVTNhf0f6qrl96I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.crl
rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hdbxhJPYoIzHKxsJHUr1T48KKLM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 22:14:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1867 (0x74b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125225, serialNumber=85D6F18493D8A08CC72B1B091D4AF54F8F0A28B3
Validity
Not Before: Aug 18 22:14:57 2026 GMT
Not After : Aug 25 22:14:57 2026 GMT
Subject: CN=6a84d961-1f15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7a:63:e1:6a:26:40:5f:9a:d5:bd:72:72:65:
0c:2e:f4:33:9c:25:e0:65:0a:e8:27:19:20:0d:d7:
a5:96:7c:9f:83:4f:85:cd:af:b6:54:14:c5:85:f0:
fc:98:cd:52:78:f6:c9:f6:d0:64:6c:26:08:8e:8f:
17:a3:c5:b5:97:7f:c6:d1:39:f1:51:90:67:a7:96:
bb:85:d3:45:c0:aa:d2:5e:d3:e2:3c:91:66:5c:d6:
7b:9c:da:57:16:18:62:ee:6f:95:95:49:c0:53:07:
fa:7d:f1:82:ae:91:13:3c:45:14:5d:e4:2f:46:2a:
dc:57:3d:b2:2e:ea:8f:1f:b6:e2:bf:e8:a6:f3:13:
41:7b:88:0a:f8:58:79:2d:31:c2:e1:aa:01:7f:f0:
67:7a:0f:4a:49:c0:e1:97:ea:c8:82:27:41:0b:41:
ad:10:22:c3:9d:e6:02:33:ce:21:ff:ae:8c:c2:cb:
70:c0:f5:3e:c4:80:83:40:9e:1f:40:a7:fd:b2:74:
4b:5f:de:3b:df:83:66:91:7f:ba:ae:c4:bf:4d:8b:
89:85:ee:6b:84:92:17:86:87:01:10:d8:d7:e3:3b:
72:fc:9a:d3:a6:6e:22:ee:4d:b7:9b:02:d0:de:5f:
41:09:49:bf:bd:ed:e9:08:4a:48:23:5c:42:79:6f:
8a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:5B:30:B6:17:9D:67:14:7C:EF:E8:AD:4F:66:A7:13:30:C6:0D:C6
X509v3 Authority Key Identifier:
keyid:85:D6:F1:84:93:D8:A0:8C:C7:2B:1B:09:1D:4A:F5:4F:8F:0A:28:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hdbxhJPYoIzHKxsJHUr1T48KKLM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:69:3f:f0:3a:e1:52:0f:3c:59:64:03:31:75:d9:03:22:73:
10:0f:c1:5e:d6:d6:de:36:92:7a:e7:49:78:4b:ea:60:01:59:
6d:4d:bf:f4:ce:48:f3:9a:1d:97:bd:72:85:2a:17:1b:ea:40:
96:1d:3d:c0:bb:26:82:30:71:1d:a9:12:c4:c0:2f:aa:e6:73:
ff:14:e4:60:22:71:14:6c:3d:9e:89:4a:0e:31:9a:75:63:04:
d2:ee:82:eb:6d:c9:c8:23:5b:80:52:39:3d:7f:79:3b:8c:6a:
30:0b:1b:50:91:2f:95:84:c3:19:ec:75:94:30:06:c3:a3:01:
4d:cc:2e:67:21:e8:18:9d:ae:0e:7a:8e:f7:d2:ed:f6:bb:09:
92:42:13:6d:2d:62:1f:0c:ae:66:89:f4:33:18:21:fc:21:ef:
71:95:94:cc:5d:09:fe:b5:ed:04:91:00:50:53:f6:c5:c9:1d:
57:b8:80:52:8b:45:ee:04:14:8b:57:30:cb:e9:49:74:a5:4d:
95:79:9c:ad:bd:45:6b:69:63:5a:59:e6:85:ee:cd:44:15:38:
e1:da:c9:1a:b8:50:b7:dc:74:9e:e8:a7:77:d1:fb:87:b4:8b:
b1:8b:5a:62:e5:8a:38:16:27:d9:14:95:4c:92:37:4a:03:88:
b9:f9:7a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:12 2026 by rpki-client