
$ rpki-client -vvf rpki.apnic.net/member_repository/A913A0F3/4171B70404A811E8B23A9A18C4F9AE02/hNKQTEi_9V2argiHuCwzDxubKaw.mft
File: hNKQTEi_9V2argiHuCwzDxubKaw.mft (raw, json)
Hash identifier: lwDat6qdXwnqnmp4iweqOkFQhV7tzHOut/4xkL7yPpY=
Subject key identifier: 8D:84:C4:66:B0:B1:D5:05:B3:EC:7C:DC:F1:D3:5F:4E:9F:AA:79:7F
Authority key identifier: 84:D2:90:4C:48:BF:F5:5D:9A:AE:08:87:B8:2C:33:0F:1B:9B:29:AC
Certificate issuer: /CN=A913A0F3/serialNumber=84D2904C48BFF55D9AAE0887B82C330F1B9B29AC
Certificate serial: 173E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNKQTEi_9V2argiHuCwzDxubKaw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913A0F3/4171B70404A811E8B23A9A18C4F9AE02/hNKQTEi_9V2argiHuCwzDxubKaw.mft
Manifest number: 1732
Signing time: Wed 20 May 2026 16:37:01 +0000
Manifest this update: Wed 20 May 2026 16:37:01 +0000
Manifest next update: Wed 27 May 2026 16:37:01 +0000
Files and hashes: 1: hNKQTEi_9V2argiHuCwzDxubKaw.crl (hash: +d74c/PeDpQf9Gr701ZCwW4TAIk3bF1lQZYcpI+5L9E=)
2: 0682A6A03DC411EBBFE0EA13C4F9AE02.roa (hash: efogen/tC+/AdiBRhX2upxGF7tJEq1IHdI05AOF10sQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913A0F3/4171B70404A811E8B23A9A18C4F9AE02/hNKQTEi_9V2argiHuCwzDxubKaw.crl
rsync://rpki.apnic.net/member_repository/A913A0F3/4171B70404A811E8B23A9A18C4F9AE02/hNKQTEi_9V2argiHuCwzDxubKaw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNKQTEi_9V2argiHuCwzDxubKaw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 16:37:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5950 (0x173e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913A0F3, serialNumber=84D2904C48BFF55D9AAE0887B82C330F1B9B29AC
Validity
Not Before: May 20 16:37:01 2026 GMT
Not After : May 27 16:37:01 2026 GMT
Subject: CN=6a0de32d-4d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b7:00:59:09:c2:80:0a:28:57:80:7c:42:5a:
99:e5:02:b1:d5:45:a1:f7:60:5b:25:10:e0:9f:67:
47:fe:3a:ad:ae:5f:da:da:7c:17:10:90:70:87:43:
81:2a:6e:f1:de:bb:33:21:ed:92:a3:6f:70:ef:53:
8c:75:c2:b5:3c:a3:2b:f6:b3:b7:58:d0:4f:48:39:
71:b3:92:36:3d:bf:a1:5c:71:1d:05:cc:c1:6d:8f:
cf:89:87:2b:8c:50:6d:c8:d1:7c:62:d4:45:f5:4c:
40:fb:b6:5f:bf:9a:7e:fe:2c:c8:31:d5:53:17:7a:
78:b0:23:5b:5d:a7:2f:36:80:59:83:ce:1b:7c:8d:
4e:fc:ec:50:42:0a:b3:be:2b:83:c1:e5:f2:c1:4a:
2f:4e:e4:0e:e4:26:7c:44:2f:9f:0c:a5:b8:75:89:
fd:31:b6:51:88:e3:28:45:a4:57:99:3f:23:a8:d9:
57:dc:2a:b4:6b:41:e8:ff:55:20:17:d1:14:df:44:
a5:20:6c:77:ad:73:23:e7:a4:6e:5d:66:c5:71:f1:
32:b4:4c:6f:19:2b:71:fe:7f:fd:45:54:6b:38:86:
08:03:0f:ce:dc:e8:ec:e3:cf:76:8a:1e:ec:0f:d6:
95:0f:42:15:8e:5e:ef:e7:65:16:af:82:b7:7d:d8:
a5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:84:C4:66:B0:B1:D5:05:B3:EC:7C:DC:F1:D3:5F:4E:9F:AA:79:7F
X509v3 Authority Key Identifier:
keyid:84:D2:90:4C:48:BF:F5:5D:9A:AE:08:87:B8:2C:33:0F:1B:9B:29:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913A0F3/4171B70404A811E8B23A9A18C4F9AE02/hNKQTEi_9V2argiHuCwzDxubKaw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNKQTEi_9V2argiHuCwzDxubKaw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A0F3/4171B70404A811E8B23A9A18C4F9AE02/hNKQTEi_9V2argiHuCwzDxubKaw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:cb:9a:56:b2:3f:f4:b6:ee:f2:86:cc:89:ff:8d:ac:74:02:
b4:bc:ae:14:9e:bb:7b:b3:8e:e0:93:85:96:0f:a3:74:89:9f:
72:0b:ae:9d:da:95:cf:18:96:42:e0:15:30:16:8b:e4:46:15:
42:b1:5f:32:12:00:97:09:b8:a2:92:16:7b:77:2c:63:2d:3e:
ca:93:f6:51:1c:c6:bf:91:e2:f1:98:f2:81:0f:89:ea:03:78:
3b:25:e6:2f:1e:ba:9e:e3:53:92:32:fe:7c:7f:1b:be:11:ab:
1d:3a:38:38:66:77:12:9a:be:72:c9:c5:9b:ee:ca:4f:9b:1c:
f3:37:1e:5d:be:65:14:7e:aa:fb:d0:db:90:f0:bb:e1:7f:9d:
ac:f6:99:f9:bd:f4:c6:a8:bd:ce:71:ca:cb:0d:7b:5e:35:6d:
1d:96:6b:8a:bd:1e:27:49:89:f4:31:96:a6:a5:c7:be:5c:ba:
26:75:33:ce:29:ed:26:7f:3e:57:a3:20:c4:be:4a:11:05:e7:
e4:3c:82:a7:2a:d1:5f:8f:0b:8c:58:8e:c9:7b:2a:d4:bd:10:
68:e8:f7:62:4a:96:6a:ec:27:6c:14:a9:21:18:b7:17:e5:da:
5a:9e:cf:70:48:53:7d:6e:d3:20:88:9d:7d:70:2c:51:30:f6:
a0:c7:74:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:24:49 2026 by rpki-client