
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.mft
File: hqZPKtLd4rfZYk5pInrQmxd4xsE.mft (raw, json)
Hash identifier: cHCxZhz5ElwdLLr7Ly9ldqnpkChappDGTCS09bQnAec=
Subject key identifier: BB:2B:8F:4C:D7:3B:ED:26:1B:7F:BE:19:6A:DF:00:58:6E:49:46:E8
Authority key identifier: 86:A6:4F:2A:D2:DD:E2:B7:D9:62:4E:69:22:7A:D0:9B:17:78:C6:C1
Certificate issuer: /CN=A9169A3F/serialNumber=86A64F2AD2DDE2B7D9624E69227AD09B1778C6C1
Certificate serial: 0169
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hqZPKtLd4rfZYk5pInrQmxd4xsE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.mft
Manifest number: 0169
Signing time: Mon 19 Oct 2026 05:33:20 +0000
Manifest this update: Mon 19 Oct 2026 05:33:19 +0000
Manifest next update: Mon 26 Oct 2026 05:33:19 +0000
Files and hashes: 1: hqZPKtLd4rfZYk5pInrQmxd4xsE.crl (hash: VQELHB9cA4Naj3eTMEZN03ZMP5MkkbjfcxRFA0z7v4M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.crl
rsync://rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hqZPKtLd4rfZYk5pInrQmxd4xsE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 05:33:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 361 (0x169)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169A3F, serialNumber=86A64F2AD2DDE2B7D9624E69227AD09B1778C6C1
Validity
Not Before: Oct 19 05:33:19 2026 GMT
Not After : Oct 26 05:33:19 2026 GMT
Subject: CN=6ad5aba0-d15e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:23:a9:1d:f9:01:02:1c:6b:8a:78:14:33:42:
12:71:80:11:b9:eb:c4:92:17:51:c7:36:34:c1:55:
c0:69:4c:9e:64:98:79:ff:d8:4a:da:ab:00:73:c7:
25:b5:c9:e5:62:0c:3e:be:bb:02:4c:6f:75:f0:50:
55:d4:d8:3f:c0:74:0f:31:fc:d2:7b:46:6c:0b:dd:
53:18:09:3d:29:9c:e6:ad:e1:62:66:de:df:75:1e:
c5:73:15:d2:a2:a3:17:63:4d:c6:b4:c4:58:2b:07:
c7:86:2b:8f:d6:80:e3:00:28:6e:c8:06:04:56:aa:
bc:f9:dc:00:51:2a:95:c5:33:c6:29:74:1c:2d:fd:
05:cb:14:d5:43:53:ed:64:9a:3c:ef:c2:23:20:b7:
e6:37:4e:68:8a:73:10:15:51:ae:c4:53:16:68:83:
07:ff:95:e2:05:3d:4a:26:ce:48:92:90:d2:92:f5:
f7:2d:56:3a:67:90:47:5c:e0:0d:da:9f:f9:aa:07:
55:3b:c5:d1:3c:07:8f:2e:34:4a:59:67:87:6c:02:
fe:4e:99:a4:41:ca:f5:79:23:47:69:28:85:f3:42:
07:e2:d1:d8:f9:6c:98:2d:16:6c:5f:2e:ee:a8:8e:
58:c6:aa:7e:12:c3:18:be:37:ee:ca:99:28:6a:19:
40:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:2B:8F:4C:D7:3B:ED:26:1B:7F:BE:19:6A:DF:00:58:6E:49:46:E8
X509v3 Authority Key Identifier:
keyid:86:A6:4F:2A:D2:DD:E2:B7:D9:62:4E:69:22:7A:D0:9B:17:78:C6:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hqZPKtLd4rfZYk5pInrQmxd4xsE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:6a:22:1a:69:39:73:ff:ef:8c:5b:a3:1f:80:af:9b:b4:66:
b0:43:f4:92:3c:69:bc:49:9c:f4:fd:de:0b:9a:20:0a:74:0b:
e2:e7:bc:03:00:d0:b8:bc:ca:e6:85:d0:16:23:1a:42:57:cf:
04:35:51:10:c8:26:cc:c3:44:e9:4a:b6:64:93:ea:83:53:32:
06:2d:81:76:43:80:fa:f3:c1:06:f8:a9:37:3e:f1:b6:42:6f:
d5:47:bf:bb:4f:59:5a:86:83:c0:7b:6d:c2:c0:22:30:5f:e3:
e5:40:29:13:4a:e0:b5:2d:b0:74:7c:c2:4d:41:37:4f:e2:b5:
8b:f2:50:a6:a9:0a:4b:f1:7c:35:76:76:43:55:b9:88:6e:2e:
7e:7e:53:85:fb:49:bf:7a:b8:51:22:81:63:88:1d:24:af:1e:
6b:e6:6b:37:db:cd:4b:c8:b9:c8:d2:94:3c:ae:7d:32:0f:91:
77:3a:de:28:8b:7e:8b:a8:89:81:a2:9a:3d:f4:3e:da:11:94:
d4:38:46:41:30:35:98:36:2b:b1:a8:b3:fc:f9:84:9b:89:8e:
ef:89:3a:b5:b9:c5:d4:97:6f:1d:d9:86:7a:34:6c:3b:1d:7e:
20:9e:57:bf:50:fd:16:7a:1a:f6:66:24:3a:98:ea:31:f8:5f:
62:56:6c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 04:17:29 2026 by rpki-client