
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.mft
File: hitzuc41BLC6JB0U_awOxLTkrcI.mft (raw, json)
Hash identifier: yEoKtdmhz/Smb2A55vMOF2m5pNkcSSjF/RGdS2ft63A=
Subject key identifier: 73:36:29:26:EC:05:EF:3B:3F:0B:58:FD:37:2D:DB:9B:67:4D:66:6F
Authority key identifier: 86:2B:73:B9:CE:35:04:B0:BA:24:1D:14:FD:AC:0E:C4:B4:E4:AD:C2
Certificate issuer: /CN=A915CCEA/serialNumber=862B73B9CE3504B0BA241D14FDAC0EC4B4E4ADC2
Certificate serial: 0A4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hitzuc41BLC6JB0U_awOxLTkrcI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.mft
Manifest number: 0A30
Signing time: Tue 08 Sep 2026 19:50:43 +0000
Manifest this update: Tue 08 Sep 2026 19:50:43 +0000
Manifest next update: Tue 15 Sep 2026 19:50:43 +0000
Files and hashes: 1: hitzuc41BLC6JB0U_awOxLTkrcI.crl (hash: TM8JnAsMQl/m2YuAYa3GjxOew9LxT1g2Ea+7HHos028=)
2: 4D0CE5E2707011F1821CCDE576A30FBC.roa (hash: cKfuTAXWipJneptfP/7QaX9LGxrS5QrCTC8BKJ1ip5c=)
3: FA57B70A706F11F1A66ABD9E76A30FBC.roa (hash: qhtPC4c3/ihK8zHDitlN/gJrE0SBwNrrJJaKSbliufY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.crl
rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hitzuc41BLC6JB0U_awOxLTkrcI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Sep 2026 19:50:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2637 (0xa4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915CCEA, serialNumber=862B73B9CE3504B0BA241D14FDAC0EC4B4E4ADC2
Validity
Not Before: Sep 8 19:50:43 2026 GMT
Not After : Sep 15 19:50:43 2026 GMT
Subject: CN=6aa06713-b3d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:8d:92:3b:e9:84:3d:00:be:ea:c2:34:8e:02:
e8:a5:ad:3a:ea:70:18:ea:c7:e3:2e:2d:84:1a:07:
53:40:6a:9f:a7:2e:a1:bf:3c:39:02:46:f5:4d:9e:
63:13:9a:69:ac:62:06:d4:b8:3c:2f:ac:6f:9b:5b:
13:54:fa:71:46:87:b7:a7:59:08:ac:b3:ec:72:e0:
f3:e3:bb:98:e8:35:2e:c3:a5:68:41:f7:25:4a:22:
09:a0:2d:88:aa:db:67:2d:74:7f:2f:e7:b8:91:b8:
82:ec:a3:46:c2:c8:4f:83:88:72:de:58:7f:f7:7d:
33:08:88:c2:62:39:05:98:97:e0:bc:d8:2b:68:f5:
9a:74:ed:9a:31:3b:62:7f:7c:a9:a9:91:40:cf:c2:
9f:82:e0:c4:43:0f:59:9e:fb:56:18:58:45:94:94:
78:95:1c:c8:ad:d2:56:34:01:3c:ca:58:01:ec:57:
79:f7:f1:63:49:3f:5f:2a:62:ef:6d:7d:5e:d0:99:
b5:2e:75:dc:b9:48:af:62:b4:60:2c:53:b1:1a:fd:
d7:a9:1c:cc:be:84:4a:15:f6:68:6f:05:bb:6a:3b:
3f:c1:e3:96:24:fc:7e:a6:01:ca:8c:2b:90:af:f7:
be:19:93:3a:ff:ca:f0:22:80:dc:a8:6f:ef:00:23:
7b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:36:29:26:EC:05:EF:3B:3F:0B:58:FD:37:2D:DB:9B:67:4D:66:6F
X509v3 Authority Key Identifier:
keyid:86:2B:73:B9:CE:35:04:B0:BA:24:1D:14:FD:AC:0E:C4:B4:E4:AD:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hitzuc41BLC6JB0U_awOxLTkrcI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:95:a7:ff:60:54:94:a7:58:2b:34:87:5e:59:26:a2:c6:2a:
81:52:ef:f3:0c:a4:e3:84:18:28:f3:a7:a5:c5:f4:92:11:fa:
c7:a7:18:c1:a2:57:09:5b:5c:3c:0b:6d:f0:dd:79:d7:90:ed:
d4:d6:cd:51:5f:a1:41:2e:e3:ad:70:8b:eb:0d:91:c8:bc:69:
87:55:8b:45:4d:54:3c:7a:21:32:1c:c3:07:9c:73:c3:87:fc:
07:24:3c:a8:3f:e1:9a:60:fe:66:e3:ba:3d:de:b5:73:a8:3a:
6a:86:d2:3c:a0:e7:27:d1:10:82:2b:8f:2e:d4:f6:52:f6:8c:
5c:f3:a3:c7:f2:25:a6:89:97:7f:83:44:4d:28:b7:7c:9e:6c:
b9:ca:c6:5b:cd:0e:df:58:a6:b3:a0:da:39:f1:c5:87:4f:03:
4c:d1:41:54:6d:2d:31:84:ea:81:7f:a8:73:22:ae:3e:b2:5c:
0d:5c:38:71:23:5b:0a:d6:1b:10:92:a8:e8:ec:67:22:2b:c8:
ad:76:91:d9:0d:82:5a:03:53:49:da:80:b4:a4:6d:36:69:82:
78:14:64:68:32:1f:9e:b3:07:58:a1:62:b0:c7:53:47:96:be:
50:26:9c:60:48:6c:7f:31:3e:6a:f7:36:0b:25:b6:29:04:85:
c7:b1:28:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:50:26 2026 by rpki-client