
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.mft
File: hkxROVpl1d5w7NMKrSemn0ubIrw.mft (raw, json)
Hash identifier: E2iQ8++cnS0e8mTMCIndb2UnGU4xnePGBowJfkO4I10=
Subject key identifier: C5:94:75:8D:73:BE:11:77:32:0C:FC:98:13:62:C3:65:A3:4B:91:13
Authority key identifier: 86:4C:51:39:5A:65:D5:DE:70:EC:D3:0A:AD:27:A6:9F:4B:9B:22:BC
Certificate issuer: /CN=A9125E1B/serialNumber=864C51395A65D5DE70ECD30AAD27A69F4B9B22BC
Certificate serial: 0220
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkxROVpl1d5w7NMKrSemn0ubIrw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.mft
Manifest number: 0214
Signing time: Sat 05 Sep 2026 02:47:21 +0000
Manifest this update: Sat 05 Sep 2026 02:47:21 +0000
Manifest next update: Sat 12 Sep 2026 02:47:21 +0000
Files and hashes: 1: hkxROVpl1d5w7NMKrSemn0ubIrw.crl (hash: 57ZROYdVWbhNsXY8wt618ttquWf3xH4pXVx/YYhmc94=)
2: B9CAD7A47D2311EEA3696814C4F9AE02.roa (hash: n/+iSZ/XdamVp91QYBtpJ28J2tmDpxBk4yTTzrUUrg0=)
3: BA3E92207D2311EEA3696814C4F9AE02.roa (hash: JeqqccV0moh9xl5LOsL93SB6Ep+iaPUP/pq2BF+emVw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.crl
rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkxROVpl1d5w7NMKrSemn0ubIrw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 02:47:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 544 (0x220)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125E1B, serialNumber=864C51395A65D5DE70ECD30AAD27A69F4B9B22BC
Validity
Not Before: Sep 5 02:47:21 2026 GMT
Not After : Sep 12 02:47:21 2026 GMT
Subject: CN=6a9b82b9-3701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0f:46:69:54:53:75:b3:35:2b:97:49:28:63:
0f:67:87:f2:8c:b3:31:03:1a:83:e0:c1:1b:48:8d:
bd:cb:23:bd:3f:1e:6c:03:32:b6:8a:78:4a:0b:c8:
bc:70:7b:d4:ea:3f:81:12:31:85:aa:83:93:3e:0f:
c3:92:3a:18:35:3f:22:67:f0:59:00:b4:a4:e4:1f:
04:c7:90:0a:2f:cb:bd:01:a1:d6:b5:02:63:57:a7:
af:0f:56:ec:f6:bc:ed:0c:e8:38:f4:b3:38:e2:7c:
b4:1d:3b:9a:11:83:57:ad:3f:e4:c0:33:85:d1:91:
7a:0e:a5:3a:3d:ae:46:5a:e2:9e:6b:05:83:c6:94:
f4:f7:64:96:a3:03:7c:02:93:10:c5:d0:15:52:07:
3e:d1:37:46:1a:49:75:ff:0d:d4:0a:a3:64:d4:a8:
b7:e2:70:58:60:5a:58:3a:54:02:99:aa:dc:5c:07:
d5:59:d0:58:56:10:1f:ae:d2:7a:5c:0e:54:47:b8:
c4:6f:fa:59:37:75:b4:28:8f:fd:6b:1e:02:d6:0e:
9e:a0:0e:14:67:12:4a:2c:ce:9a:43:f4:e2:7b:31:
cb:65:eb:b7:e8:ba:3f:14:18:86:b6:90:c5:16:81:
36:14:68:0a:3c:c1:2d:ff:b3:18:aa:44:b0:c9:fe:
03:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:94:75:8D:73:BE:11:77:32:0C:FC:98:13:62:C3:65:A3:4B:91:13
X509v3 Authority Key Identifier:
keyid:86:4C:51:39:5A:65:D5:DE:70:EC:D3:0A:AD:27:A6:9F:4B:9B:22:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkxROVpl1d5w7NMKrSemn0ubIrw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:d0:d5:9f:a3:bc:12:82:6b:b3:77:a0:5c:13:e5:8a:99:ff:
4d:19:dd:85:79:c3:b4:66:12:68:2c:a2:c1:13:81:00:d9:16:
d1:9e:06:ce:ac:67:18:d1:d5:b4:a9:5e:f9:72:ad:51:6d:f8:
1e:c9:39:09:18:99:d7:d8:ab:39:1c:ba:1e:ae:e1:79:0e:c6:
5a:ea:d0:10:74:c0:59:5f:7f:d0:19:7d:2b:c0:4f:71:6d:9d:
92:10:81:49:d6:e7:51:9d:ca:b4:a8:20:55:07:2a:fa:b5:05:
43:36:69:d8:e3:bf:06:b0:41:78:66:33:ec:67:07:58:ca:a8:
94:17:f8:49:2e:d7:ec:73:a3:ae:cd:e4:d3:1e:e7:4e:39:42:
23:b1:cb:ca:4d:48:3c:30:44:92:ce:6d:4c:1e:1f:32:bc:d5:
cf:12:72:b1:b8:90:30:6f:67:a7:79:9f:ad:b3:05:b9:cf:90:
2f:1b:ce:be:22:00:84:84:ef:70:ac:7c:5b:cf:6e:cc:58:00:
f6:66:5b:26:ab:e8:9b:12:22:28:51:0a:a6:3d:06:2c:0e:38:
60:1d:f4:94:04:60:6c:e1:b2:12:52:f8:b8:da:f5:eb:dc:f8:
11:04:aa:2c:ac:1c:30:7e:a2:a1:3c:5e:ba:21:25:29:87:81:
ee:bb:c2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 14:21:32 2026 by rpki-client