
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft
File: Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft (raw, json)
Hash identifier: GTyL6gqMgaJMh3ZqR6P/o9LEfMHJBCZ6Q4tsfWX0dV8=
Subject key identifier: A7:71:08:7C:5A:A3:B6:A8:58:6E:32:A2:33:0F:5D:C9:AA:B6:9C:EC
Authority key identifier: 1E:B9:AE:8B:F5:95:9F:E8:BF:2E:B8:2B:92:3B:71:7E:FF:31:06:C5
Certificate issuer: /CN=A9190D72/serialNumber=1EB9AE8BF5959FE8BF2EB82B923B717EFF3106C5
Certificate serial: 01E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft
Manifest number: 01C8
Signing time: Mon 01 Jun 2026 04:51:34 +0000
Manifest this update: Mon 01 Jun 2026 04:51:33 +0000
Manifest next update: Mon 08 Jun 2026 04:51:33 +0000
Files and hashes: 1: Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl (hash: 4jxrMuIRLojT2qj4csWTUQaxb1wAC5qyZxD7Sv1Gpd4=)
2: 486F76B812BF11F0BA15A929C4F9AE02.roa (hash: MsRfFP9S72fysIEBNUSAs/fCHLGyyvO8Y3S8iIzMN8Y=)
3: 3AB77B58E23311F0B92C3AF56C6F56BC.roa (hash: tq6t304k8TDiLS/O4Tcaui/U1Dh+ilPjOVnXesRwrRM=)
4: 355D028E4AB511EF87AB161BC4F9AE02.roa (hash: RdgPtAfTR/y0hqHYAT3akOyD2G6kofmapVY9ItRIJyo=)
5: 536D7D82E23311F080CB84306D6F56BC.roa (hash: FQMiKZ+saBep4mWBLea3jnerRyivW4npVo8kPrO6T0E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl
rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 04:51:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 481 (0x1e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190D72, serialNumber=1EB9AE8BF5959FE8BF2EB82B923B717EFF3106C5
Validity
Not Before: Jun 1 04:51:33 2026 GMT
Not After : Jun 8 04:51:33 2026 GMT
Subject: CN=6a1d0fd6-29fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:27:da:01:b2:81:f0:de:d7:5a:36:17:fb:2d:
bd:90:99:b2:15:4f:4e:65:83:e9:30:12:4a:28:d1:
7c:39:1c:4d:c9:ed:ad:91:fd:49:bf:6e:00:83:e8:
a6:c3:b9:1b:71:a4:03:ec:b4:92:c0:83:03:22:92:
8c:2d:69:c8:50:2a:e0:b3:6a:f5:a0:b0:33:0a:fa:
da:7c:fd:af:df:ab:eb:df:5f:c3:12:f1:c8:78:d8:
e9:c9:20:7a:53:a0:4f:bd:9f:d2:8d:a5:e5:b8:28:
2d:8e:38:41:79:34:9b:b4:23:85:5c:1e:69:4e:60:
74:6b:fd:12:74:51:d9:a0:ba:14:11:8d:10:01:32:
b9:d9:64:87:cc:ae:16:5f:76:28:4b:be:d9:85:4e:
b4:09:63:a2:19:5a:99:ac:c7:b1:ba:55:a0:b1:b3:
e6:e6:7d:66:5b:a7:0f:9d:58:18:69:90:f0:1d:94:
22:9a:5f:02:19:69:d4:3f:9e:19:2d:a4:64:ae:3f:
4e:89:d1:e6:8c:b4:94:dc:98:89:5c:17:83:76:b6:
fd:5e:14:aa:40:3c:f1:e2:ce:f9:d8:ef:79:35:28:
fe:3c:8c:c3:2c:8c:eb:2c:88:b5:e9:44:51:df:bf:
df:cf:2e:32:11:8f:25:d9:ef:4d:93:d3:d5:39:44:
3e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:71:08:7C:5A:A3:B6:A8:58:6E:32:A2:33:0F:5D:C9:AA:B6:9C:EC
X509v3 Authority Key Identifier:
keyid:1E:B9:AE:8B:F5:95:9F:E8:BF:2E:B8:2B:92:3B:71:7E:FF:31:06:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:aa:c4:9b:c4:a1:e8:56:18:75:a0:97:25:fa:ca:ed:7d:ff:
89:28:da:c0:27:42:18:f3:66:40:a6:33:8c:6a:45:76:fd:18:
f8:5f:c7:4d:40:b4:8e:e7:60:04:6c:0f:db:7b:e6:dc:58:ec:
21:1d:1e:c1:00:a7:62:1e:9c:3b:4c:7e:aa:4e:2f:0b:58:09:
63:87:bf:46:59:06:7e:48:2a:82:8e:d7:c4:20:07:c8:a3:cb:
4c:f3:04:93:ad:d9:bf:3f:dd:5e:da:b5:34:80:8a:56:96:5e:
16:76:75:6c:26:2c:15:59:e9:3e:d5:d3:cc:d5:66:67:f0:a7:
64:72:64:6e:8f:64:48:30:d2:60:17:87:56:d1:ca:68:53:f3:
f2:be:c4:94:de:d8:f1:33:56:0a:4a:09:c0:23:eb:6d:ff:b5:
a0:eb:85:da:f9:44:6c:20:93:fd:10:8c:59:c0:1d:58:72:4c:
b2:24:12:8c:2d:aa:04:9f:56:eb:58:f8:67:83:ea:11:15:83:
35:21:ac:fe:fc:7c:d4:c3:cb:e5:a6:72:c3:04:2a:44:e6:07:
58:6a:c5:ed:a6:26:b2:7b:2a:f7:8b:71:1d:10:1e:6a:2d:79:
96:26:e3:a5:d9:28:83:e5:fd:51:6d:7f:51:9e:2d:1e:26:d7:
94:d0:f5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:06:41 2026 by rpki-client