
$ rpki-client -vvf rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft
File: HmeMaiF9cVsw2csi1fiE0XxWmbY.mft (raw, json)
Hash identifier: KrpueGf5AXopRYvmOlyvRNhq6vHUFUDvfe5f5mMle7w=
Subject key identifier: 12:49:BA:6F:FD:87:51:5E:64:89:00:9D:D8:55:30:22:03:50:91:DC
Authority key identifier: 1E:67:8C:6A:21:7D:71:5B:30:D9:CB:22:D5:F8:84:D1:7C:56:99:B6
Certificate issuer: /CN=A9133953/serialNumber=1E678C6A217D715B30D9CB22D5F884D17C5699B6
Certificate serial: 194E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft
Manifest number: 1922
Signing time: Wed 20 May 2026 16:26:11 +0000
Manifest this update: Wed 20 May 2026 16:26:11 +0000
Manifest next update: Wed 27 May 2026 16:26:11 +0000
Files and hashes: 1: HmeMaiF9cVsw2csi1fiE0XxWmbY.crl (hash: 6vHUcCfBJyboDsmZKcCn0ViOiLqfYZaUqToqfTogxO8=)
2: D34372461C8D11E9B21BD858C4F9AE02.roa (hash: 0aZHDcufdZQ7dDzrjinBuGWb3k3ed9FsQLE77AphBaA=)
3: 3DC507001C8F11E9990F665CC4F9AE02.roa (hash: KNHL/L5tyBmlAfdw55D3rrTekY6agqcXrKB3/U0Q+x8=)
4: A55682E0821A11EE9104BB68C4F9AE02.roa (hash: uds8VZP/Cnzq4ik9TsZtEgZFHT8utwL0NugztHyo5wA=)
5: A2BE54D2228B11F09A2FAA12C4F9AE02.roa (hash: 3eZlHcsbneHOE1MVSFtkIXyL5kgfcrV5bb38+q+WXH4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.crl
rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 16:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6478 (0x194e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133953, serialNumber=1E678C6A217D715B30D9CB22D5F884D17C5699B6
Validity
Not Before: May 20 16:26:11 2026 GMT
Not After : May 27 16:26:11 2026 GMT
Subject: CN=6a0de0a3-2ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f2:de:af:8e:65:10:5f:d9:65:55:b5:12:16:
65:db:24:d0:e3:57:da:13:a7:a5:04:42:86:3a:30:
6b:cf:57:8d:71:f5:a3:d9:31:2a:ed:0e:a2:db:11:
26:da:1b:e8:fb:1b:c5:57:30:9d:23:37:19:cc:4c:
ff:ca:f5:5a:f8:78:0f:e5:43:63:8d:38:62:4f:11:
59:7a:ab:6c:23:cb:d9:5c:f0:5c:2c:2c:ad:99:82:
f6:0e:61:f6:fc:71:ac:f4:b5:fa:28:29:20:29:eb:
94:ef:1f:e0:04:61:5e:ba:6d:40:b7:87:38:05:af:
dd:18:68:f4:39:60:2b:a4:32:9a:fd:3f:61:88:1d:
37:09:1c:09:ce:ff:ed:cd:f4:92:6d:9d:b9:ac:b3:
52:41:95:e1:eb:45:70:63:18:ca:62:ae:48:9d:90:
15:e6:42:36:37:5d:8b:40:50:7d:8a:30:30:03:95:
1c:ef:62:32:5b:dd:36:d2:43:4b:ac:e7:8e:b1:21:
85:bc:ee:91:09:f7:28:d2:09:3e:7e:36:33:95:b4:
9c:47:d2:ab:af:30:ea:77:cb:09:66:dc:e1:ed:a1:
22:be:c2:0d:31:4c:2c:af:b7:e0:17:8d:44:6d:b1:
0a:9e:1f:e2:50:7e:b5:a7:66:a9:1a:8d:80:4f:f2:
a1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:49:BA:6F:FD:87:51:5E:64:89:00:9D:D8:55:30:22:03:50:91:DC
X509v3 Authority Key Identifier:
keyid:1E:67:8C:6A:21:7D:71:5B:30:D9:CB:22:D5:F8:84:D1:7C:56:99:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:ab:dc:f5:c9:8f:8f:42:3e:1b:08:05:60:4c:15:01:b0:50:
66:c5:d4:6c:3e:b8:9b:e1:b9:73:82:87:b6:f3:09:d5:1e:e5:
3b:08:13:ed:72:2f:97:92:b2:32:b7:1e:79:6f:a6:32:03:3c:
ce:81:82:e0:49:f5:80:76:1f:e4:ba:c3:c0:57:c7:0e:f1:ca:
f4:e6:74:78:4f:53:c5:a2:e1:2c:5a:af:69:63:21:11:ca:8a:
85:88:30:57:57:e5:07:a4:8c:39:02:28:e8:96:35:02:d2:41:
d0:2c:a1:68:0f:04:ab:67:1a:0e:68:89:89:dd:38:fd:69:ac:
55:d0:e5:c8:c9:71:7d:4f:34:df:5b:71:b7:c6:95:92:e3:d3:
82:ad:b3:46:5f:80:a3:f1:25:6b:0a:8d:e6:9d:64:d1:45:ac:
70:c4:9d:d6:bb:14:45:41:6b:12:34:bf:34:71:aa:4c:5b:6f:
d1:aa:57:94:27:3b:16:3a:09:a2:d0:c6:f9:19:75:4e:00:3a:
ff:36:6e:10:0a:41:35:eb:a4:d8:63:7b:16:ac:8c:09:95:b3:
5b:de:59:c1:cb:6d:01:b0:bb:f4:50:96:71:b0:b3:b0:68:ee:
be:b0:8d:d3:5e:9c:5f:5b:34:c7:ea:b2:9f:0b:26:6d:1e:b6:
38:f1:e5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 12:36:31 2026 by rpki-client