
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.mft
File: hitzuc41BLC6JB0U_awOxLTkrcI.mft (raw, json)
Hash identifier: 1CmIczgXnymOv5opC6yEzMAKt8GQlqAFuNC3QFY5JcM=
Subject key identifier: 82:C8:5A:74:F1:5D:0F:0E:BF:CC:3B:EA:78:4D:88:DD:1F:70:99:52
Authority key identifier: 86:2B:73:B9:CE:35:04:B0:BA:24:1D:14:FD:AC:0E:C4:B4:E4:AD:C2
Certificate issuer: /CN=A915CCEA/serialNumber=862B73B9CE3504B0BA241D14FDAC0EC4B4E4ADC2
Certificate serial: 0A69
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hitzuc41BLC6JB0U_awOxLTkrcI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.mft
Manifest number: 0A4A
Signing time: Mon 26 Oct 2026 19:42:44 +0000
Manifest this update: Mon 26 Oct 2026 19:42:43 +0000
Manifest next update: Mon 02 Nov 2026 19:42:43 +0000
Files and hashes: 1: hitzuc41BLC6JB0U_awOxLTkrcI.crl (hash: yMWO4Jup60D+yA9dxTRL0hWWiGnqC7r4+P90BVOcZtE=)
2: 4D0CE5E2707011F1821CCDE576A30FBC.roa (hash: k8rAQNqq8sWrzsdiI+Wr1tNTCkuJZjz1VkVrhy0zp1g=)
3: FA57B70A706F11F1A66ABD9E76A30FBC.roa (hash: 5UlaJz5G/bidOHbT2NbkpzH8+pUHMJEGRJQ4pdfZDCc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.crl
rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hitzuc41BLC6JB0U_awOxLTkrcI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 19:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2665 (0xa69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915CCEA, serialNumber=862B73B9CE3504B0BA241D14FDAC0EC4B4E4ADC2
Validity
Not Before: Oct 26 19:42:43 2026 GMT
Not After : Nov 2 19:42:43 2026 GMT
Subject: CN=6adfad33-3e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ba:ed:40:7f:cd:84:4d:87:2d:d0:a3:b2:5c:
67:08:07:6b:1b:f4:be:95:70:32:78:8a:9f:ff:67:
a3:5d:ab:8c:c8:41:dc:41:e0:f9:c5:76:f1:26:71:
dd:d9:5d:27:3f:08:3c:b1:68:76:c3:ed:b4:21:26:
05:f4:3a:c2:1e:21:5d:cf:af:11:b3:4a:57:0b:b0:
1b:a7:39:72:d0:55:1a:8c:b1:52:1c:98:80:98:f3:
3d:17:f4:ce:38:61:16:40:bf:59:2b:4f:22:42:75:
0e:8c:7a:53:c5:01:62:1b:9c:35:c9:2b:b4:2a:81:
fd:20:78:20:9a:2f:fd:e0:53:c0:e1:60:84:93:70:
84:7a:18:79:11:c6:56:be:ab:f6:6d:c4:c7:3b:8e:
96:05:36:27:79:3b:67:44:31:05:08:6e:8d:59:93:
08:88:66:df:1e:6d:58:6a:10:02:08:84:28:c3:1f:
1e:50:e4:92:65:b6:c3:9e:5f:bd:b7:4e:e9:68:45:
6f:71:f5:04:8b:e7:a9:26:72:36:99:1a:12:2a:cc:
53:1e:98:f4:05:71:61:30:27:cc:6f:84:fc:21:dc:
be:e0:b0:ae:cf:b9:35:e8:45:61:b4:a2:39:df:94:
b4:8c:b4:05:c1:9d:c4:0a:e1:25:8b:94:9d:24:ac:
d8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C8:5A:74:F1:5D:0F:0E:BF:CC:3B:EA:78:4D:88:DD:1F:70:99:52
X509v3 Authority Key Identifier:
keyid:86:2B:73:B9:CE:35:04:B0:BA:24:1D:14:FD:AC:0E:C4:B4:E4:AD:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hitzuc41BLC6JB0U_awOxLTkrcI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:9a:d2:2e:a7:67:3e:2b:fd:97:ae:77:fa:5d:e1:37:42:46:
39:5d:20:10:04:c1:47:e3:60:90:98:ee:ee:ab:ff:54:9b:0b:
f2:ea:c1:bd:3d:45:cb:25:da:37:4a:fd:df:4d:b0:49:b3:41:
7d:7f:d9:cd:d7:44:90:1d:67:bf:55:e1:b9:4a:fa:3b:0b:0a:
3d:b1:55:21:27:57:a8:54:bb:03:3b:f5:9d:a1:ee:ca:92:70:
7d:bd:53:38:d1:ad:ed:40:ac:6b:82:81:8a:e4:4c:0e:da:c4:
2c:09:30:f9:64:f5:7b:27:a7:a4:d0:a7:e1:27:5d:c0:d6:40:
18:ae:7c:2c:49:f3:92:be:91:7f:fa:a2:32:74:b8:5f:1a:15:
dc:5e:12:ac:36:33:e3:98:b1:be:1f:74:de:fd:d9:af:d3:3f:
52:08:f3:de:c6:98:6f:0a:09:96:ec:93:4c:31:81:af:d9:8a:
b1:35:2b:d0:7d:7c:e2:98:49:83:90:94:27:aa:27:1e:8d:4f:
55:d3:c6:c9:43:8c:a2:a3:98:75:2b:12:b3:4b:bc:fc:34:ec:
90:c5:94:3f:ab:d0:08:67:58:0d:8f:4f:d4:1a:b2:c5:6a:80:
1b:90:aa:b2:1f:41:02:4e:dc:08:da:a4:92:5d:e2:ff:5b:a9:
47:64:82:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:06:34 2026 by rpki-client