
$ rpki-client -vvf rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft
File: HmeMaiF9cVsw2csi1fiE0XxWmbY.mft (raw, json)
Hash identifier: vNUxkKcCH+UgokOatiSrhcGRQjEw7BQQdI+i5mMJaKU=
Subject key identifier: 57:39:2D:80:A5:A5:B7:5F:64:9B:49:0F:F7:F3:9A:FB:91:D9:80:06
Authority key identifier: 1E:67:8C:6A:21:7D:71:5B:30:D9:CB:22:D5:F8:84:D1:7C:56:99:B6
Certificate issuer: /CN=A9133953/serialNumber=1E678C6A217D715B30D9CB22D5F884D17C5699B6
Certificate serial: 1933
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft
Manifest number: 1907
Signing time: Sat 28 Mar 2026 16:23:39 +0000
Manifest this update: Sat 28 Mar 2026 16:23:39 +0000
Manifest next update: Sat 04 Apr 2026 16:23:39 +0000
Files and hashes: 1: HmeMaiF9cVsw2csi1fiE0XxWmbY.crl (hash: AzINey3RPfOABqwt/dVzNQUYWMLh61Tg0zd3OC9mPwE=)
2: A2BE54D2228B11F09A2FAA12C4F9AE02.roa (hash: 3eZlHcsbneHOE1MVSFtkIXyL5kgfcrV5bb38+q+WXH4=)
3: 3DC507001C8F11E9990F665CC4F9AE02.roa (hash: KNHL/L5tyBmlAfdw55D3rrTekY6agqcXrKB3/U0Q+x8=)
4: A55682E0821A11EE9104BB68C4F9AE02.roa (hash: uds8VZP/Cnzq4ik9TsZtEgZFHT8utwL0NugztHyo5wA=)
5: D34372461C8D11E9B21BD858C4F9AE02.roa (hash: 0aZHDcufdZQ7dDzrjinBuGWb3k3ed9FsQLE77AphBaA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.crl
rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 04 Apr 2026 16:23:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6451 (0x1933)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133953, serialNumber=1E678C6A217D715B30D9CB22D5F884D17C5699B6
Validity
Not Before: Mar 28 16:23:39 2026 GMT
Not After : Apr 4 16:23:39 2026 GMT
Subject: CN=69c8008b-7c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4e:77:a6:c3:79:48:c4:ca:cb:ff:51:98:f4:
4b:b3:29:a4:71:37:b6:e8:14:24:79:93:5b:3d:5e:
2d:06:ca:24:88:c1:d4:4e:b6:71:b0:72:11:39:bc:
76:28:cf:7e:4d:ff:68:67:ae:99:df:89:b7:b7:dd:
e9:94:f9:64:c8:fd:8d:bb:a8:26:66:ff:56:b4:29:
42:95:a2:67:24:43:d0:63:be:ef:1d:45:3c:a9:4e:
7e:38:96:49:aa:1e:3b:fb:b7:e6:84:9b:ea:82:e8:
85:7c:c6:e0:15:d2:23:bf:68:d8:87:0a:84:db:21:
61:7b:5b:40:21:9d:7d:e1:4a:37:47:83:b1:6e:5c:
12:95:9d:99:40:5c:47:52:29:fc:4e:16:26:2b:22:
5a:47:1a:2a:36:c1:77:66:b1:9b:53:e4:34:9d:16:
c6:6f:b2:22:92:e2:80:45:3b:2a:7f:bc:76:7b:b0:
8b:84:a6:36:ae:ba:1d:3f:b1:cd:53:3b:6b:53:ec:
d3:0c:52:dd:0a:4c:41:ce:3f:63:f0:3e:fb:69:1b:
3f:73:43:4f:f1:77:f6:1d:71:70:ee:02:15:8f:c9:
8d:e4:9a:4a:a7:8c:b3:72:63:8d:0d:97:54:1b:bc:
a8:c1:48:cb:1a:4b:20:eb:bc:0f:72:c6:41:98:bb:
c5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:39:2D:80:A5:A5:B7:5F:64:9B:49:0F:F7:F3:9A:FB:91:D9:80:06
X509v3 Authority Key Identifier:
keyid:1E:67:8C:6A:21:7D:71:5B:30:D9:CB:22:D5:F8:84:D1:7C:56:99:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:bb:c0:b8:c1:8c:41:f8:55:78:f4:f5:20:b4:97:24:ab:ee:
88:81:65:9b:e8:dd:1f:bf:ce:c6:67:15:48:f6:13:3d:32:3e:
d7:3f:a8:98:14:3f:32:2e:39:8d:4e:20:d9:02:1b:5d:7a:9d:
60:4c:97:32:b7:8b:ac:40:26:b0:5e:1a:25:63:14:f5:dc:5b:
92:e4:81:00:78:2a:43:77:70:c4:92:37:74:56:e9:f6:de:cd:
7a:21:f6:a3:e7:2e:cf:52:8e:5f:c2:7d:4e:30:d5:69:d3:69:
8b:18:9a:48:91:12:81:82:0b:3e:00:cf:82:ce:b9:21:6d:88:
28:20:58:d4:a7:bc:b0:44:35:cc:99:64:2a:37:82:ac:af:21:
d6:02:ba:ec:b0:f9:b7:99:1c:c5:6d:5a:5c:c8:d9:92:03:4e:
27:29:cc:6a:30:f8:07:d7:ec:96:d4:7f:63:12:40:53:d3:ac:
55:ed:42:d8:00:5b:49:8a:c0:c1:c0:4d:9c:ff:34:d2:e2:e0:
6f:bd:a6:5d:3a:a5:94:68:f1:26:36:a2:41:1b:43:91:74:90:
78:0b:31:bf:04:4e:74:8f:35:38:4f:b8:22:2f:d0:6d:84:91:
35:74:6e:15:d7:d3:1d:b8:47:cb:4e:8d:9f:1d:45:ef:39:49:
59:09:a3:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 22:39:52 2026 by rpki-client