
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915FB34/3DBD181099A011F1A4ECD2AD6D11F970/HZLjY_mpuyTeeFZHHuhB8dyNyQM.mft
File: HZLjY_mpuyTeeFZHHuhB8dyNyQM.mft (raw, json)
Hash identifier: 6FFqe/aXp9lv81pIC3rXvd0C7Q3vrNZBdkOPLgNSvgo=
Subject key identifier: 29:EC:C4:E6:1A:C6:B6:02:86:43:07:C0:D5:13:A5:84:1D:4D:2B:9A
Authority key identifier: 1D:92:E3:63:F9:A9:BB:24:DE:78:56:47:1E:E8:41:F1:DC:8D:C9:03
Certificate issuer: /CN=A915FB34/serialNumber=1D92E363F9A9BB24DE7856471EE841F1DC8DC903
Certificate serial: 27
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HZLjY_mpuyTeeFZHHuhB8dyNyQM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FB34/3DBD181099A011F1A4ECD2AD6D11F970/HZLjY_mpuyTeeFZHHuhB8dyNyQM.mft
Manifest number: 26
Signing time: Tue 27 Oct 2026 09:06:29 +0000
Manifest this update: Tue 27 Oct 2026 09:06:28 +0000
Manifest next update: Tue 03 Nov 2026 09:06:28 +0000
Files and hashes: 1: HZLjY_mpuyTeeFZHHuhB8dyNyQM.crl (hash: TGgGerJyqngooAOvXhwly4zImIIWHJQAGhm0FRgqWrc=)
2: E5D570A699A011F191D9C4ED6E11F970.roa (hash: 8Y+XAwfwrJgI3QCe0larDwfJRotuGixvON+EExk7AV4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915FB34/3DBD181099A011F1A4ECD2AD6D11F970/HZLjY_mpuyTeeFZHHuhB8dyNyQM.crl
rsync://rpki.apnic.net/member_repository/A915FB34/3DBD181099A011F1A4ECD2AD6D11F970/HZLjY_mpuyTeeFZHHuhB8dyNyQM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HZLjY_mpuyTeeFZHHuhB8dyNyQM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 09:06:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39 (0x27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FB34, serialNumber=1D92E363F9A9BB24DE7856471EE841F1DC8DC903
Validity
Not Before: Oct 27 09:06:28 2026 GMT
Not After : Nov 3 09:06:28 2026 GMT
Subject: CN=6ae06995-be31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:89:70:ff:46:cb:8e:44:9f:85:0a:60:10:a3:
fc:b2:d2:24:ec:a7:92:d4:44:15:5d:40:90:4f:cb:
30:45:f9:92:15:96:42:0d:79:ac:b0:b1:04:8a:af:
6d:71:86:d9:23:2c:79:9c:f2:60:51:e2:fd:02:ae:
7b:52:0d:b1:2b:5e:04:0d:41:16:b7:38:2d:9d:2f:
70:89:ee:21:e6:0f:63:88:23:14:38:0b:df:3c:e8:
20:06:eb:7d:c7:8b:8c:bd:ec:29:71:2a:c9:96:31:
cd:db:1f:99:7d:9d:37:27:7e:14:d0:73:00:32:a1:
c9:91:fc:98:cf:03:5a:bc:98:ad:f9:bf:bf:10:d2:
7b:21:b7:8b:7a:ff:86:f5:ea:fb:09:37:f8:70:6e:
f8:cf:25:a7:5c:c2:58:8a:de:42:e3:f6:6b:36:80:
e1:30:5e:cf:51:6d:e9:69:25:a9:8f:8a:01:2c:07:
cd:ee:17:3c:49:85:a3:b9:82:b4:90:74:33:52:9b:
b0:04:d3:25:d2:a8:ac:4f:6e:c4:93:92:72:61:61:
32:02:48:4d:48:8f:85:96:b6:5b:f7:e4:0c:ed:93:
e2:c0:d5:d0:09:78:55:45:13:8c:7c:1d:e7:cb:39:
cf:7d:94:8c:93:cc:97:8f:3d:fd:84:81:c4:dc:a0:
80:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:EC:C4:E6:1A:C6:B6:02:86:43:07:C0:D5:13:A5:84:1D:4D:2B:9A
X509v3 Authority Key Identifier:
keyid:1D:92:E3:63:F9:A9:BB:24:DE:78:56:47:1E:E8:41:F1:DC:8D:C9:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FB34/3DBD181099A011F1A4ECD2AD6D11F970/HZLjY_mpuyTeeFZHHuhB8dyNyQM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HZLjY_mpuyTeeFZHHuhB8dyNyQM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FB34/3DBD181099A011F1A4ECD2AD6D11F970/HZLjY_mpuyTeeFZHHuhB8dyNyQM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:3a:93:2d:ad:08:43:03:31:46:cc:f7:1a:f4:5f:70:5d:f7:
48:14:d2:b0:d7:cc:ef:ce:c6:d7:b7:48:db:03:22:b6:e4:e3:
e9:25:b3:78:0a:0f:98:c1:8d:45:d4:51:98:b5:25:ec:80:f9:
7f:6f:42:45:37:6e:b1:27:bd:f8:04:42:c7:5e:e1:c8:27:7a:
c7:a5:00:d4:b1:22:fa:64:a3:20:a9:82:91:42:82:bb:fc:a2:
0e:4a:e7:f0:db:a0:23:27:24:90:89:66:29:15:f9:08:c1:e3:
86:a8:74:a1:1b:a9:01:7b:2f:ef:40:4f:f6:0f:3b:cd:92:81:
79:e7:93:1d:7e:d8:15:16:1e:a1:30:98:5a:8b:04:d2:42:db:
3a:08:42:44:a5:9b:f1:3a:ca:28:af:8b:19:79:f5:15:d5:60:
2a:af:fc:30:ee:f1:21:22:0a:c2:8b:b9:6b:1d:74:fc:df:1e:
2e:cb:c3:8a:6a:a9:a3:9a:8b:d4:4e:9f:94:b1:a3:9a:90:76:
39:c8:04:9b:8b:5c:6e:87:2a:9d:8e:f7:72:97:10:d3:1a:bd:
85:28:8c:b8:64:bb:89:57:72:77:79:a0:c7:47:00:3f:e1:77:
1b:b5:41:44:35:34:1c:a2:f6:2c:56:d9:5c:30:1d:ed:4f:a5:
f3:3a:df:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 21:39:06 2026 by rpki-client