
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913237D/CC99F2022CE911F1B4B6892EA4833773/HoZxK4RkFt7tWImiU22NAJ3B8i4.mft
File: HoZxK4RkFt7tWImiU22NAJ3B8i4.mft (raw, json)
Hash identifier: wlVXrLEycYsG95CQYWxsHcaxVah75by0Fomvc6O/Nl8=
Subject key identifier: 77:9C:7B:2E:64:F7:2D:5B:C9:30:A3:79:18:7C:EA:49:07:B5:48:7C
Authority key identifier: 1E:86:71:2B:84:64:16:DE:ED:58:89:A2:53:6D:8D:00:9D:C1:F2:2E
Certificate issuer: /CN=A913237D/serialNumber=1E86712B846416DEED5889A2536D8D009DC1F22E
Certificate serial: 68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HoZxK4RkFt7tWImiU22NAJ3B8i4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913237D/CC99F2022CE911F1B4B6892EA4833773/HoZxK4RkFt7tWImiU22NAJ3B8i4.mft
Manifest number: 65
Signing time: Wed 07 Oct 2026 08:39:05 +0000
Manifest this update: Wed 07 Oct 2026 08:39:04 +0000
Manifest next update: Wed 14 Oct 2026 08:39:04 +0000
Files and hashes: 1: HoZxK4RkFt7tWImiU22NAJ3B8i4.crl (hash: JvurlLWxiyK/8aA+sAta0EWZ7q/GLzWPPUJFBWadKXk=)
2: EA7000822F6911F18DA90D0DBA833773.roa (hash: l2vqASAiW/hXP7AnKD1leWCEKdnAxJCJTUCdMZ0hGYs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913237D/CC99F2022CE911F1B4B6892EA4833773/HoZxK4RkFt7tWImiU22NAJ3B8i4.crl
rsync://rpki.apnic.net/member_repository/A913237D/CC99F2022CE911F1B4B6892EA4833773/HoZxK4RkFt7tWImiU22NAJ3B8i4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HoZxK4RkFt7tWImiU22NAJ3B8i4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 08:39:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104 (0x68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913237D, serialNumber=1E86712B846416DEED5889A2536D8D009DC1F22E
Validity
Not Before: Oct 7 08:39:04 2026 GMT
Not After : Oct 14 08:39:04 2026 GMT
Subject: CN=6ac60529-d29b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:50:c0:99:78:08:21:f2:7d:55:4f:71:c9:f3:
b2:d6:04:25:92:0c:3d:04:db:15:c0:a8:3a:3a:33:
30:2b:34:24:c8:4f:50:7c:07:7f:3d:01:31:32:9f:
c5:bc:30:fd:84:7d:4c:93:76:74:fe:1d:f5:b8:bc:
f5:9a:68:40:11:32:a7:44:65:ee:08:69:97:22:3d:
6c:1a:c5:ec:fa:2c:4d:34:c4:53:f4:83:c2:fa:ae:
c3:4b:6c:6d:93:2f:05:18:cf:cd:c4:cc:e6:8d:81:
71:d9:9f:31:f0:ca:a4:4f:1f:3b:db:ca:f8:d6:12:
e0:5a:3a:9c:8a:ee:6a:f7:51:d9:da:c8:94:d9:e2:
e4:29:62:0a:f3:a8:e8:23:0a:e8:04:24:e6:2c:4a:
1b:ea:ed:43:de:06:15:bc:62:bd:e3:a0:56:06:73:
7b:74:d3:f1:50:02:ec:34:fa:79:d7:25:36:e6:df:
21:b7:af:4b:a9:a1:a0:3f:91:c7:6e:77:98:c1:db:
69:94:2d:19:f9:a6:9a:f9:b1:18:44:0e:10:17:e5:
eb:2f:d8:aa:30:6e:94:28:6c:df:02:37:21:82:f7:
fa:9e:56:4e:bb:fc:6c:ad:02:c7:c6:9b:55:85:1f:
36:be:33:3a:28:ff:cc:30:7b:ca:70:3f:e5:12:a1:
06:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:9C:7B:2E:64:F7:2D:5B:C9:30:A3:79:18:7C:EA:49:07:B5:48:7C
X509v3 Authority Key Identifier:
keyid:1E:86:71:2B:84:64:16:DE:ED:58:89:A2:53:6D:8D:00:9D:C1:F2:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913237D/CC99F2022CE911F1B4B6892EA4833773/HoZxK4RkFt7tWImiU22NAJ3B8i4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HoZxK4RkFt7tWImiU22NAJ3B8i4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913237D/CC99F2022CE911F1B4B6892EA4833773/HoZxK4RkFt7tWImiU22NAJ3B8i4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ee:7d:13:c3:8e:ff:4a:23:51:7c:28:6b:35:60:7b:36:f1:
63:04:36:39:38:e7:91:e1:02:b5:51:d7:0f:d5:2d:a1:02:d8:
0e:2d:4b:9e:b1:32:0c:4d:31:65:f2:5a:76:63:86:73:37:08:
fc:5f:cd:66:17:07:d7:47:4c:3b:ec:eb:3a:a4:69:1a:62:f9:
99:3b:1e:3a:b1:27:a0:f1:e2:49:21:8e:67:94:c0:dd:9c:37:
1c:3e:aa:83:69:6c:74:1e:d1:2d:e5:79:74:1b:c8:24:60:af:
52:22:11:e6:20:11:99:90:67:59:13:62:72:09:9b:ff:d0:b2:
4b:10:ed:74:07:bb:9c:09:03:a6:44:29:1b:c7:b0:16:18:8b:
9e:7b:a6:b0:09:ea:bf:92:1a:1e:6d:fc:b2:1e:45:15:e6:96:
4d:2d:9b:e8:81:7a:6b:e6:5c:c8:9f:67:da:6e:ee:1f:67:ea:
00:82:fc:50:0b:01:9a:85:25:de:f9:66:03:a9:bf:5a:ed:66:
5d:ff:78:58:ff:97:2a:7e:e1:be:32:ce:64:8a:74:20:57:c4:
a3:71:92:ea:57:2b:ed:f4:29:ff:cb:71:bc:8e:0d:ae:bd:bb:
a0:ee:cc:53:e1:e0:cf:b6:4a:99:a5:14:52:38:8d:b8:ba:4e:
98:fd:e2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 19:49:11 2026 by rpki-client