
$ rpki-client -vvf rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft
File: hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft (raw, json)
Hash identifier: X/OQP9sWjZABUDu8FiigYK5mS0Juk1gkvCee5sYaMkQ=
Subject key identifier: 3E:7B:6D:55:CE:16:E2:63:4F:D1:64:AF:B2:DE:2D:C0:D4:05:9C:32
Authority key identifier: 87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56
Certificate issuer: /CN=A91982EF/serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656
Certificate serial: 0122
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft
Manifest number: 0102
Signing time: Sun 29 Mar 2026 05:57:59 +0000
Manifest this update: Sun 29 Mar 2026 05:57:59 +0000
Manifest next update: Sun 05 Apr 2026 05:57:59 +0000
Files and hashes: 1: hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl (hash: fmrAjaTbnZWc+kwsHVeGSRclf7HDugV/AzQsPefPQzo=)
2: 98AEAB84B72111EF8A087D30C4F9AE02.roa (hash: j2Hz+mynGpqLJnmZlqehevWYxoqbcW99ZISJiOfwTiY=)
3: 3A8C7518B72111EFA9A92F26C4F9AE02.roa (hash: wy1fO8emrrb11LIF29YjzsQF2VR/akidMRTHMxAcTfI=)
4: F33309A2B72011EFB3A5D772C4F9AE02.roa (hash: HYHec9orOca+00gsDqMx8Gss9C7gqHvPJgzKMMmNDKk=)
5: 1A3A1E2C287D11F18C83C945A7833773.roa (hash: Tw9tkubBBNCNa0WzdkiGoAB9GeB7p8eEnqNQk5A660Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl
rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 05:57:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 290 (0x122)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91982EF, serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656
Validity
Not Before: Mar 29 05:57:59 2026 GMT
Not After : Apr 5 05:57:59 2026 GMT
Subject: CN=69c8bf67-9157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:72:3c:cd:d9:b5:c7:47:db:02:83:9e:04:02:
07:59:95:a4:81:92:c0:d7:18:98:f5:41:a7:e5:e7:
b6:19:91:e3:66:ce:d1:66:e3:50:f4:6a:75:c6:0b:
e8:f8:19:1c:67:92:79:1f:33:91:16:d1:0e:3b:3d:
ab:91:87:8a:ce:ed:bf:b6:d4:bf:64:5a:9e:5c:dc:
b6:30:90:e3:7d:ac:a8:f3:f6:b5:a8:53:15:f2:57:
4e:65:d5:69:8a:ed:25:4f:2e:f4:dd:cc:6b:3c:51:
d4:8e:52:09:7c:b1:3a:dd:97:0e:ca:a1:b7:d6:05:
e9:8f:9d:c4:69:36:08:11:69:7a:b6:7b:46:b4:b9:
62:2f:c8:48:6b:9f:6a:3c:25:6a:e3:90:08:cd:09:
66:7a:bb:43:5c:69:7b:d0:3d:0e:b3:9d:d3:2a:04:
a8:48:ec:e9:4f:e4:87:92:46:4f:97:cf:a0:09:6b:
23:7d:c6:bf:da:6a:03:fd:e3:36:a8:15:3e:74:6e:
04:9b:32:17:25:bb:c0:6b:0c:7a:bc:e8:17:ba:45:
32:7c:99:dd:29:c2:8d:ca:8b:0b:a8:2a:92:12:7d:
50:7f:37:9b:2a:90:7c:fd:9c:9b:cb:c2:ea:13:64:
a5:6e:aa:ab:ba:ed:9e:ba:62:0e:d5:46:e8:50:e3:
bd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:7B:6D:55:CE:16:E2:63:4F:D1:64:AF:B2:DE:2D:C0:D4:05:9C:32
X509v3 Authority Key Identifier:
keyid:87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:f5:e1:d5:eb:a6:62:e8:6a:3f:cf:fd:c6:68:a5:0f:ba:03:
65:00:03:ab:cf:e2:7b:cc:8c:67:f9:22:80:75:2b:6b:57:df:
a2:e7:99:24:d2:63:f7:cc:fe:5b:f3:b4:5f:87:78:a3:58:06:
ee:91:89:ac:17:c8:29:9d:69:28:d0:9a:e2:47:45:c6:4e:bd:
5c:bb:31:a7:75:0d:36:10:10:c1:e3:be:bb:d1:b6:70:6e:90:
cb:fc:db:e1:10:99:03:f0:cc:8f:c9:62:44:bb:a9:64:ec:c6:
2e:a3:c6:5c:14:67:eb:4f:7a:02:5f:43:03:0e:0e:39:6d:ea:
16:3a:ed:84:ac:42:31:33:f2:51:27:62:1f:d2:4e:ad:1f:44:
cf:18:2a:f3:7f:61:64:68:30:c3:6a:c1:44:dd:a9:70:18:b6:
b8:e1:c2:19:c9:c5:eb:a7:28:97:64:77:e9:97:f2:7d:39:2f:
cf:75:21:a3:51:e3:89:a0:29:cf:22:c2:ba:8e:df:a8:72:2f:
17:ca:78:a1:5c:e4:ac:4f:a5:32:31:01:39:88:bf:80:72:da:
5c:d2:b8:ab:e4:bf:cd:39:33:78:62:f1:8c:84:b4:0e:2b:60:
31:74:07:60:03:41:da:c7:66:0b:4e:2c:0f:bd:c7:97:e8:ce:
ae:37:32:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:30:56 2026 by rpki-client