
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.mft
File: Hr-HiCR2Rfmq8BbQIPTPwuITwpY.mft (raw, json)
Hash identifier: uz46MPkkIKq1d42jLc8oegQQiwGowf6M3kK4vR2IS6c=
Subject key identifier: 32:B0:79:8C:DE:6F:36:B4:7F:35:EA:67:7D:D9:5D:AA:83:D5:3B:A6
Authority key identifier: 1E:BF:87:88:24:76:45:F9:AA:F0:16:D0:20:F4:CF:C2:E2:13:C2:96
Certificate issuer: /CN=A912C770/serialNumber=1EBF8788247645F9AAF016D020F4CFC2E213C296
Certificate serial: 3C
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.mft
Manifest number: 39
Signing time: Fri 05 Jun 2026 09:00:47 +0000
Manifest this update: Fri 05 Jun 2026 09:00:47 +0000
Manifest next update: Fri 12 Jun 2026 09:00:47 +0000
Files and hashes: 1: Hr-HiCR2Rfmq8BbQIPTPwuITwpY.crl (hash: SMv7bNyZXALonUYnOij8hzYYcGLuRCUtMaTm2Np2jXE=)
2: C7FCC7D210DE11F18FBC6D5B083D8C67.roa (hash: ZJ2mGof4d8TGjIUSjiSJIxX88gLNKzRhctZ8YiDrvqI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.crl
rsync://rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 09:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60 (0x3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C770, serialNumber=1EBF8788247645F9AAF016D020F4CFC2E213C296
Validity
Not Before: Jun 5 09:00:47 2026 GMT
Not After : Jun 12 09:00:47 2026 GMT
Subject: CN=6a22903f-984b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8b:b7:44:34:78:a4:62:2b:e8:ae:10:d6:e5:
92:23:57:e3:d3:2d:ac:59:df:fa:fb:d6:e0:94:47:
4d:24:62:bd:7b:f8:83:68:d0:7a:29:c0:3c:3a:4a:
43:c3:12:15:90:4e:26:75:66:70:55:60:b2:45:c5:
85:c8:19:a5:16:3b:22:98:d0:0e:0c:5f:02:e8:8b:
dd:90:5f:75:69:eb:79:aa:7c:38:e0:3c:39:b6:3b:
3e:4d:e0:5e:2b:d1:b7:b1:98:88:9f:25:96:c0:6f:
ea:ca:fa:07:d4:27:24:e6:8f:da:30:15:e3:48:cb:
9e:06:8e:7e:dc:ec:2b:a4:d8:48:f0:d3:15:1b:72:
59:d1:70:2b:24:6a:17:72:1a:b9:c5:e0:f4:b3:71:
56:83:e2:02:76:15:66:ed:1a:95:55:52:4f:be:0e:
f8:71:4a:90:16:a0:a3:31:62:1e:71:95:33:82:54:
6b:57:03:22:d4:e6:c5:36:48:bc:19:40:9d:59:1d:
b7:f3:c8:ca:4a:91:36:2e:3c:f5:0b:b2:45:23:1a:
e6:39:2c:39:98:0e:12:86:88:1c:01:59:01:ba:ce:
07:c7:0b:f9:4c:1f:cc:52:3b:d9:c3:77:f5:a7:b2:
4e:33:59:cd:14:19:9e:b8:7e:80:b2:78:17:01:17:
a6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B0:79:8C:DE:6F:36:B4:7F:35:EA:67:7D:D9:5D:AA:83:D5:3B:A6
X509v3 Authority Key Identifier:
keyid:1E:BF:87:88:24:76:45:F9:AA:F0:16:D0:20:F4:CF:C2:E2:13:C2:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e1:37:e7:ed:81:f8:00:d5:c9:44:0f:5f:f1:d5:dd:62:68:
1c:68:6e:13:fd:01:9d:af:62:08:4f:cc:44:3c:96:7d:d6:4a:
2c:55:d5:f6:48:d5:7a:86:93:34:44:a6:7d:3a:6b:63:68:ad:
c1:c4:d8:68:ed:2f:23:3f:9e:a7:48:73:48:54:b5:53:b5:33:
da:ca:65:ad:e7:c6:cb:f8:09:6f:fa:f0:cf:74:c7:17:d5:9a:
da:58:d1:37:2b:6d:9c:f7:1c:12:07:70:bb:04:40:c2:ea:a1:
25:b7:64:06:90:32:f8:89:86:9d:da:05:73:3e:6c:d0:09:00:
aa:b9:74:dc:6e:79:b8:90:bf:2f:12:b4:21:0e:eb:93:49:fa:
90:45:af:c5:46:fb:e0:65:e6:34:a8:9f:9c:a9:d3:34:45:1c:
84:7e:e1:6b:18:78:c1:02:68:18:4d:ad:b6:1e:b3:57:5c:a9:
c3:b6:5b:ca:c7:ac:62:e9:74:5a:a8:95:4e:c4:96:ec:18:46:
b6:13:3a:a7:ab:68:5d:b7:17:de:ac:1c:89:3c:7c:b6:1b:d9:
00:8e:2a:b9:c5:4c:37:cd:cc:e6:b2:87:1b:39:c2:42:39:17:
47:c1:c5:e3:51:e2:d8:f7:4f:1d:66:db:f6:2b:08:aa:5f:28:
04:5b:c0:36
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
Qzc3MDExMC8GA1UEBRMoMUVCRjg3ODgyNDc2NDVGOUFBRjAxNkQwMjBGNENGQzJF
MjEzQzI5NjAeFw0yNjA2MDUwOTAwNDdaFw0yNjA2MTIwOTAwNDdaMBgxFjAUBgNV
BAMTDTZhMjI5MDNmLTk4NGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCVi7dENHikYivorhDW5ZIjV+PTLaxZ3/r71uCUR00kYr17+INo0HopwDw6SkPD
EhWQTiZ1ZnBVYLJFxYXIGaUWOyKY0A4MXwLoi92QX3Vp63mqfDjgPDm2Oz5N4F4r
0bexmIifJZbAb+rK+gfUJyTmj9owFeNIy54Gjn7c7Cuk2Ejw0xUbclnRcCskahdy
GrnF4PSzcVaD4gJ2FWbtGpVVUk++DvhxSpAWoKMxYh5xlTOCVGtXAyLU5sU2SLwZ
QJ1ZHbfzyMpKkTYuPPULskUjGuY5LDmYDhKGiBwBWQG6zgfHC/lMH8xSO9nDd/Wn
sk4zWc0UGZ64foCyeBcBF6adAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUMrB5jN5v
NrR/NepnfdldqoPVO6YwHwYDVR0jBBgwFoAUHr+HiCR2Rfmq8BbQIPTPwuITwpYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJDNzcwLzRBQ0Y5NkQ2MTBE
RTExRjE4MTcxOTI1NzA4M0Q4QzY3L0hyLUhpQ1IyUmZtcThCYlFJUFRQd3VJVHdw
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvSHItSGlDUjJSZm1xOEJiUUlQVFB3dUlUd3BZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJD
NzcwLzRBQ0Y5NkQ2MTBERTExRjE4MTcxOTI1NzA4M0Q4QzY3L0hyLUhpQ1IyUmZt
cThCYlFJUFRQd3VJVHdwWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBf4Tfn7YH4ANXJRA9f8dXdYmgcaG4T/QGdr2IIT8xEPJZ91kosVdX2SNV6hpM0
RKZ9OmtjaK3BxNho7S8jP56nSHNIVLVTtTPaymWt58bL+Alv+vDPdMcX1ZraWNE3
K22c9xwSB3C7BEDC6qElt2QGkDL4iYad2gVzPmzQCQCquXTcbnm4kL8vErQhDuuT
SfqQRa/FRvvgZeY0qJ+cqdM0RRyEfuFrGHjBAmgYTa22HrNXXKnDtlvKx6xi6XRa
qJVOxJbsGEa2Ezqnq2hdtxferByJPHy2G9kAjiq5xUw3zczmsocbOcJCORdHwcXj
UeLY908dZtv2KwiqXygEW8A2
-----END CERTIFICATE-----
Generated at Sat Jun 6 12:08:01 2026 by rpki-client