
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft
File: HxGmFtcy5BY7RP62KF7-7lh8bdI.mft (raw, json)
Hash identifier: jbRRzpXI2LQAng2nWaJ/mJAyx1FX11bYElWgKO9dBHc=
Subject key identifier: 10:69:AB:EF:CA:3D:02:F0:3C:BE:CE:A9:DD:CB:4D:02:02:A4:00:E1
Authority key identifier: 1F:11:A6:16:D7:32:E4:16:3B:44:FE:B6:28:5E:FE:EE:58:7C:6D:D2
Certificate issuer: /CN=A91C113B/serialNumber=1F11A616D732E4163B44FEB6285EFEEE587C6DD2
Certificate serial: 04CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft
Manifest number: 04C0
Signing time: Thu 12 Mar 2026 23:28:27 +0000
Manifest this update: Thu 12 Mar 2026 23:28:26 +0000
Manifest next update: Thu 19 Mar 2026 23:28:26 +0000
Files and hashes: 1: HxGmFtcy5BY7RP62KF7-7lh8bdI.crl (hash: V+9OSN+rP6HexOSfpz3Zmn72Gae/7KNUop/1IqQnurc=)
2: F45C79E262F711EC8184F344C4F9AE02.roa (hash: 31ILuWSDcxMEoCJtg/DemIqgF6JDQtA4+Gr57AYJDnI=)
3: 30E0A83C62F511ECA1FC5A6CC4F9AE02.roa (hash: 2RxAlS/oLuf7Y3VMI5wk5JfPIc2P4lPgJltprUhrclU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.crl
rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 23:28:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1230 (0x4ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C113B, serialNumber=1F11A616D732E4163B44FEB6285EFEEE587C6DD2
Validity
Not Before: Mar 12 23:28:26 2026 GMT
Not After : Mar 19 23:28:26 2026 GMT
Subject: CN=69b34c1a-94f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bd:a6:68:c9:b4:26:2d:d1:e8:c5:83:13:14:
8d:81:b3:97:f4:5a:e0:f4:41:ce:9b:5d:ba:02:d2:
58:d1:3b:27:36:b5:aa:68:33:e3:1e:1d:d6:2c:4c:
76:fa:24:ad:75:3c:09:76:6e:20:40:9f:78:7c:ca:
68:46:c6:01:4a:51:6f:1b:fe:f3:0d:2d:ec:fa:f1:
cc:08:b7:6d:0b:95:85:17:86:a1:66:7e:a8:5f:3e:
26:9e:99:b5:95:fd:83:37:1d:d1:0f:6c:91:bc:57:
5c:ce:94:b9:9c:0a:cc:52:79:be:6e:cb:45:29:c0:
23:ee:14:e5:a2:24:05:e0:52:8b:cb:64:3c:61:29:
35:61:ff:37:55:f7:7d:f6:e8:aa:3a:cd:08:9f:c4:
0f:39:24:9d:f7:e1:f7:7c:a8:b2:57:50:4f:00:8d:
8f:ef:d6:88:fc:3d:6d:b4:a2:a1:ee:24:c0:f4:d9:
99:fd:69:f4:e1:98:e0:1c:1c:0a:18:69:d0:47:37:
27:48:21:2f:a4:f2:d6:87:eb:7e:15:18:86:e7:04:
23:8f:ca:50:a3:8a:37:c5:79:d0:3a:bd:01:41:f5:
dc:6e:75:2d:a3:c7:83:64:e9:aa:cc:47:3a:9a:ae:
e2:b2:75:c9:ae:29:21:e8:61:17:a5:64:c8:a0:74:
23:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:69:AB:EF:CA:3D:02:F0:3C:BE:CE:A9:DD:CB:4D:02:02:A4:00:E1
X509v3 Authority Key Identifier:
keyid:1F:11:A6:16:D7:32:E4:16:3B:44:FE:B6:28:5E:FE:EE:58:7C:6D:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:da:f2:e4:05:d6:8f:05:a1:53:90:57:a5:86:d8:a2:bf:fe:
15:ac:69:1c:cc:a6:01:86:0e:53:d2:c1:f8:b9:ca:73:2c:52:
3b:29:bd:d8:b8:31:56:ff:d3:3b:38:eb:4c:07:23:54:5e:b4:
e8:96:02:96:06:33:7f:11:97:42:b3:56:de:c4:98:57:b6:c4:
c9:de:f0:1f:98:48:ed:0c:12:11:0b:27:03:87:bf:5d:77:f6:
01:91:e4:b7:8e:73:b1:8a:59:1f:86:07:bb:c0:49:fc:88:38:
c5:17:02:ef:27:15:3a:77:a9:6f:10:bf:c4:7d:5b:53:01:ee:
33:63:03:ae:b5:98:7e:d5:d5:1f:b1:30:c5:7e:30:10:df:0d:
bd:f9:be:c0:df:9f:1b:a1:75:d5:51:35:b9:e1:7d:55:41:b6:
11:93:b2:46:d4:af:3b:1f:28:56:7a:95:d9:38:0a:28:ee:96:
fb:a8:7c:dd:ea:a4:76:b9:31:40:2b:af:53:2e:68:82:67:34:
cc:db:4d:51:d9:8f:f9:19:3f:e4:0d:56:ce:f4:23:01:da:a5:
3d:7b:8e:71:0e:15:9d:9b:2f:d3:13:10:db:7d:5d:f6:4a:10:
df:8d:eb:38:10:f2:4e:a3:8d:20:8e:28:3a:8f:7a:df:cc:1a:
75:1f:16:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 02:49:15 2026 by rpki-client