
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.mft
File: HgeR690MlMNWujc9fg8BYQPUC5I.mft (raw, json)
Hash identifier: KCTV+92bzoRWv5lMBrqyuIfNRLj6AjuMFUNyFfsfA3U=
Subject key identifier: ED:6A:42:92:20:7A:0E:24:6B:9C:5E:04:00:AE:EC:29:9D:08:D6:2E
Authority key identifier: 1E:07:91:EB:DD:0C:94:C3:56:BA:37:3D:7E:0F:01:61:03:D4:0B:92
Certificate issuer: /CN=A916D07E/serialNumber=1E0791EBDD0C94C356BA373D7E0F016103D40B92
Certificate serial: 011C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgeR690MlMNWujc9fg8BYQPUC5I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.mft
Manifest number: 0118
Signing time: Sat 03 Oct 2026 06:38:23 +0000
Manifest this update: Sat 03 Oct 2026 06:38:23 +0000
Manifest next update: Sat 10 Oct 2026 06:38:23 +0000
Files and hashes: 1: HgeR690MlMNWujc9fg8BYQPUC5I.crl (hash: kw73fP2Ze8ZZZPOORXQv0Ql3ItZu/J/S4K16NKyACfg=)
2: 6014E88A257E11F08DB64644C4F9AE02.roa (hash: F8P/YIAmPajfOLRCSw3O/MamJ0JWaY6aJY2xYJin4yE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.crl
rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgeR690MlMNWujc9fg8BYQPUC5I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 06:38:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 284 (0x11c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D07E, serialNumber=1E0791EBDD0C94C356BA373D7E0F016103D40B92
Validity
Not Before: Oct 3 06:38:23 2026 GMT
Not After : Oct 10 06:38:23 2026 GMT
Subject: CN=6ac0a2df-c6ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:76:cc:9d:3a:be:42:8a:82:73:8a:15:15:d9:
b5:b4:1c:2b:b1:23:d4:62:6e:cb:2a:58:11:0b:8c:
59:a7:b9:d4:68:31:ee:a2:47:7c:93:63:21:08:37:
30:23:09:4d:98:79:17:be:29:e0:6c:a6:88:f8:75:
5d:29:ae:a0:8f:dd:33:58:0a:d8:46:7b:f5:84:59:
ff:12:51:f0:92:ed:cd:f6:73:11:67:f7:de:2a:a3:
f6:6f:3f:0e:81:b8:71:da:24:f8:a9:cc:f4:b6:33:
0b:7d:77:26:1b:c4:a9:dc:54:d3:eb:88:ac:91:9c:
17:be:f4:b4:a7:82:fd:d8:70:54:26:00:aa:29:9a:
ac:b5:d3:af:4f:d5:4d:d7:2f:24:3f:81:c2:55:22:
b8:f2:33:e5:c7:0a:df:1e:19:57:d3:5d:9b:31:97:
ac:10:8a:f2:98:e2:f5:e3:7e:df:53:31:4e:08:8a:
f8:32:2c:57:da:58:a4:23:83:60:01:b5:2b:4e:88:
c4:2c:73:57:c5:7e:d1:54:4d:b4:f7:ac:99:f4:a0:
66:1c:a5:aa:4d:25:60:4d:50:9e:19:ac:c4:1e:19:
5e:cb:f6:0f:d8:8f:f3:4b:e4:f5:48:64:55:09:3a:
b1:e1:f5:0b:61:ad:b1:13:e8:b7:b3:2f:ab:ea:89:
60:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:6A:42:92:20:7A:0E:24:6B:9C:5E:04:00:AE:EC:29:9D:08:D6:2E
X509v3 Authority Key Identifier:
keyid:1E:07:91:EB:DD:0C:94:C3:56:BA:37:3D:7E:0F:01:61:03:D4:0B:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgeR690MlMNWujc9fg8BYQPUC5I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:70:1a:6e:71:9c:05:3c:50:db:4c:ca:57:c3:83:0e:b0:94:
90:9a:09:18:42:e4:63:37:33:e1:5d:b0:bb:18:3a:ad:ff:f6:
6a:1c:30:53:51:0e:77:2f:29:66:23:ef:dd:51:f3:46:46:20:
57:d0:22:b4:46:3c:73:13:33:0d:9f:ce:cc:c0:54:bc:46:9b:
ef:f5:1d:ff:f0:e9:a9:e5:c9:7e:9e:12:0d:59:2e:f3:40:27:
71:59:23:01:b8:84:81:c0:fe:2e:ad:af:bd:83:ff:76:10:47:
52:5e:a5:09:bb:3e:73:5f:30:e5:b3:ff:94:16:44:5c:9e:d9:
25:9d:54:f3:02:35:25:b6:f3:0a:6e:14:43:da:a6:e7:dd:07:
45:c5:35:d6:40:77:9f:1a:0d:c2:75:dd:a0:f5:d3:a2:ec:ed:
f0:90:9d:0a:26:be:cf:40:f0:e4:5e:f0:4d:5c:ea:65:8f:ab:
d7:53:8a:62:46:4f:0b:c9:06:f8:c0:51:87:2d:b5:cc:75:59:
41:b7:f6:07:56:7f:ac:32:89:46:2a:b0:95:76:62:e6:f9:81:
a3:83:4e:52:2c:a8:d8:5e:1a:75:1e:81:18:29:30:7a:36:59:
5e:f2:40:1c:20:a2:8f:0a:9e:02:60:70:5a:b9:9a:c6:52:db:
2e:3e:aa:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 02:42:26 2026 by rpki-client