
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft
File: Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft (raw, json)
Hash identifier: F40YEYREkEIhoOJ5w1WHhzkkmFzUAHLP4I5WNSoXTgI=
Subject key identifier: DF:BE:FE:A6:4A:62:DC:8B:CA:D2:D1:03:A4:FC:57:CF:EF:1A:81:B9
Authority key identifier: 1E:B9:AE:8B:F5:95:9F:E8:BF:2E:B8:2B:92:3B:71:7E:FF:31:06:C5
Certificate issuer: /CN=A9190D72/serialNumber=1EB9AE8BF5959FE8BF2EB82B923B717EFF3106C5
Certificate serial: 0210
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft
Manifest number: 01F7
Signing time: Thu 03 Sep 2026 03:45:07 +0000
Manifest this update: Thu 03 Sep 2026 03:45:07 +0000
Manifest next update: Thu 10 Sep 2026 03:45:07 +0000
Files and hashes: 1: Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl (hash: 3ZT9IfSTvydPxAM5GLkXPNYUTArfjuhgH9OrQ+SMPKA=)
2: 536D7D82E23311F080CB84306D6F56BC.roa (hash: FQMiKZ+saBep4mWBLea3jnerRyivW4npVo8kPrO6T0E=)
3: 355D028E4AB511EF87AB161BC4F9AE02.roa (hash: RdgPtAfTR/y0hqHYAT3akOyD2G6kofmapVY9ItRIJyo=)
4: 3AB77B58E23311F0B92C3AF56C6F56BC.roa (hash: tq6t304k8TDiLS/O4Tcaui/U1Dh+ilPjOVnXesRwrRM=)
5: 486F76B812BF11F0BA15A929C4F9AE02.roa (hash: MsRfFP9S72fysIEBNUSAs/fCHLGyyvO8Y3S8iIzMN8Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl
rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 03:45:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 528 (0x210)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190D72, serialNumber=1EB9AE8BF5959FE8BF2EB82B923B717EFF3106C5
Validity
Not Before: Sep 3 03:45:07 2026 GMT
Not After : Sep 10 03:45:07 2026 GMT
Subject: CN=6a98ed43-7833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:16:57:d8:da:4c:69:fb:d9:91:60:4e:ca:64:
b9:10:af:66:61:32:2e:28:74:c4:4d:eb:e0:61:93:
e2:52:96:66:34:9a:ca:f7:18:06:ea:f7:f7:9e:e1:
e5:cf:35:fe:ba:f5:39:b1:92:2a:48:61:ac:dc:3c:
9b:c8:e7:ef:1d:a6:80:f9:ef:ea:d8:ab:62:70:d5:
4b:66:86:41:e8:2b:7e:1d:7f:33:5a:ed:3d:cc:cb:
62:0d:a9:83:f5:a0:5a:97:8c:ad:aa:ce:2f:84:c5:
b7:88:00:df:63:30:aa:1e:29:d6:01:65:8e:4a:6d:
cc:00:8c:f7:5c:c9:02:e9:8b:6e:21:c1:99:bc:b8:
f3:63:a8:06:a3:36:f1:86:58:fa:6c:21:a1:0f:fa:
df:e1:c6:39:07:c3:b9:d0:ba:07:33:cc:70:e2:23:
0e:2f:dd:2a:87:1e:1e:b1:ba:60:3c:dd:4f:e2:de:
db:68:6d:3a:a3:4e:54:70:e5:b2:f9:60:c6:20:b8:
5d:53:5e:be:5f:f1:bf:b7:c7:7a:06:33:56:b7:eb:
0c:0c:cf:df:d6:9f:2d:cb:1f:0a:84:7d:27:f1:5e:
15:86:ad:7a:04:a0:2b:70:4b:a1:13:ef:d6:04:77:
c4:80:cb:9c:06:bd:49:4d:db:a5:1c:8b:70:56:1f:
0e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:BE:FE:A6:4A:62:DC:8B:CA:D2:D1:03:A4:FC:57:CF:EF:1A:81:B9
X509v3 Authority Key Identifier:
keyid:1E:B9:AE:8B:F5:95:9F:E8:BF:2E:B8:2B:92:3B:71:7E:FF:31:06:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:39:3c:d6:fa:d2:a1:13:71:0c:09:2b:c8:42:54:50:93:cb:
d9:5d:08:0f:94:0c:55:59:54:1d:95:49:20:4b:f9:7a:f3:37:
6d:6e:e2:b1:31:88:eb:8c:c7:e1:e9:61:fe:89:8b:73:42:88:
4c:51:0a:2d:51:f2:3e:7e:15:18:b7:b1:e2:f3:ea:cd:23:85:
84:c3:03:8e:7f:30:b9:be:ca:16:a6:f1:2f:71:6c:71:81:5d:
cc:03:44:40:06:69:ce:00:ee:ea:26:0b:a0:12:dd:a2:6a:10:
7f:14:27:64:7a:1f:18:05:58:87:cb:aa:0f:3b:c8:14:b6:1b:
0c:6f:37:77:ef:7f:f5:c0:02:93:94:6f:a6:45:ce:bf:bf:96:
b9:4d:6b:ad:8f:f0:cb:fb:1e:38:77:3a:aa:22:20:fc:e5:a6:
c8:49:2b:3f:bf:7b:d3:62:19:96:20:33:e1:41:17:35:37:e9:
7f:b3:95:04:19:08:9c:2e:d7:3e:29:92:54:37:b6:6e:a9:40:
06:33:72:8f:ee:a2:5c:b0:1e:74:ca:c6:1d:84:1f:55:ef:bc:
e6:13:26:2c:a8:12:8c:06:7b:4e:35:43:6f:21:7d:95:95:bb:
88:26:14:73:c8:3e:4c:30:ae:3b:b0:6e:5e:a2:57:65:64:17:
4a:42:7f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:18:49 2026 by rpki-client