
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft
File: hobJK4fdXdLuKrtA7HPxePYEWjQ.mft (raw, json)
Hash identifier: X5brAta3Y9NByA6+NeeVOH/Bib+r7VIq2dsrZRtYnaQ=
Subject key identifier: 54:64:6A:0C:72:3E:3A:41:95:23:20:FF:18:EC:82:7E:37:84:E7:17
Authority key identifier: 86:86:C9:2B:87:DD:5D:D2:EE:2A:BB:40:EC:73:F1:78:F6:04:5A:34
Certificate issuer: /CN=A9165DB1/serialNumber=8686C92B87DD5DD2EE2ABB40EC73F178F6045A34
Certificate serial: 031D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft
Manifest number: 0315
Signing time: Sun 05 Apr 2026 00:55:34 +0000
Manifest this update: Sun 05 Apr 2026 00:55:34 +0000
Manifest next update: Sun 12 Apr 2026 00:55:34 +0000
Files and hashes: 1: hobJK4fdXdLuKrtA7HPxePYEWjQ.crl (hash: rTW4RiLBaYHt6VDHhnOa9RfGHVRNF4duQrHOoFph5RE=)
2: 7D164B822A2811F0819D8C13C4F9AE02.roa (hash: U0yLO5Ev3zOcE/jWxDek+PewuFrsGyucjJ2jYS/L358=)
3: 7CA593102A2811F0819D8C13C4F9AE02.roa (hash: dd0CGQKg2qsZFHW0r2NsR/ySJbalRdUFAJqYcFNJaEc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.crl
rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 00:55:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 797 (0x31d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165DB1, serialNumber=8686C92B87DD5DD2EE2ABB40EC73F178F6045A34
Validity
Not Before: Apr 5 00:55:34 2026 GMT
Not After : Apr 12 00:55:34 2026 GMT
Subject: CN=69d1b306-e3f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ab:fd:0a:fd:8a:cd:4d:bd:64:87:eb:e7:48:
7d:05:4d:c9:94:98:93:e6:db:f2:81:f9:8a:d7:0b:
5d:18:d0:e6:10:48:e2:3e:00:8e:2f:9c:28:b7:4b:
d7:fb:24:f0:4b:be:d5:39:47:c8:05:d8:9d:d1:52:
63:21:45:d1:1c:d7:ce:72:ad:09:40:83:ba:f9:2b:
40:cf:b5:2f:e3:4b:88:cf:67:fb:57:94:99:c7:9d:
ca:48:26:70:ef:12:de:7f:ad:24:5b:18:7f:05:48:
55:4b:22:80:31:22:03:fb:12:d9:23:b0:f8:80:58:
e0:39:1d:f8:bf:24:9c:7f:a5:c2:c4:ee:1f:93:2d:
9e:af:15:28:7d:3e:02:a8:d6:fd:a9:7f:a6:0c:4d:
a1:99:87:b9:36:17:b3:99:47:04:a5:d3:ef:51:cf:
88:93:4f:55:38:68:2f:95:67:11:c1:d3:8b:88:9c:
5c:03:89:27:30:5e:1a:bb:de:a1:85:e1:bf:80:c8:
97:20:74:6d:6e:45:9f:23:5d:a0:4f:e6:5c:30:b5:
d9:4a:50:2f:75:23:a4:9a:d1:5e:ba:d1:bb:af:f8:
23:97:61:9b:5e:e5:3a:bf:09:28:68:5f:06:f7:e7:
c5:72:36:c4:5a:18:d0:45:c8:a1:12:58:54:a3:4f:
f2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:64:6A:0C:72:3E:3A:41:95:23:20:FF:18:EC:82:7E:37:84:E7:17
X509v3 Authority Key Identifier:
keyid:86:86:C9:2B:87:DD:5D:D2:EE:2A:BB:40:EC:73:F1:78:F6:04:5A:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:d0:3c:22:d7:e2:bc:4f:1b:7a:24:7b:d7:b7:79:62:42:9d:
c0:68:6c:26:f5:20:25:7d:05:99:44:56:46:bc:bc:1b:5d:b5:
94:f3:1f:ab:52:0f:dd:9c:df:45:3a:10:15:04:b2:43:fc:23:
40:04:b2:b1:7a:76:96:f2:2c:73:67:df:79:d9:95:e1:8a:5a:
26:7f:c8:a0:e4:dd:eb:8c:d9:cd:41:d0:e9:5a:bb:44:f6:d6:
06:b7:3f:40:06:eb:03:20:0c:8b:6e:26:5a:a4:3a:c8:ff:64:
a9:5f:89:d4:d2:c9:44:0c:06:cd:f0:f0:78:c5:ff:6a:c3:59:
d1:34:dd:88:9d:53:03:5b:2a:06:35:d6:1b:ba:c3:63:ba:ad:
77:46:3b:88:5d:bb:5d:b7:13:b7:f6:59:03:00:ef:19:b3:69:
b2:ed:8b:66:bc:ce:65:21:cb:dc:f4:df:8b:1f:a4:0b:f3:8e:
d5:e3:38:90:1b:52:bd:42:5e:d3:56:30:8c:e7:d8:b6:bc:0b:
43:ac:27:6a:47:05:71:ee:37:ff:37:9f:8a:56:56:0b:2e:3d:
0b:a3:c4:bd:06:97:ca:15:7d:b5:4f:77:31:17:10:70:a7:03:
32:be:39:e2:81:96:5d:bc:de:c2:50:d1:51:ca:71:e7:4e:14:
36:dd:c1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:02:46 2026 by rpki-client