
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
File: HXJckcDUci80AIjRN03S2vN9gxI.mft (raw, json)
Hash identifier: xYNSU6bFDBrchWMGmr+NXGAUOqe3F0UZsl9o1h3pJF0=
Subject key identifier: 1A:62:BC:C8:B1:E4:95:CF:48:EE:E6:1D:73:81:B2:23:8F:74:79:7D
Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
Certificate issuer: /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Certificate serial: 06AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
Manifest number: 0688
Signing time: Sat 28 Feb 2026 23:01:13 +0000
Manifest this update: Sat 28 Feb 2026 23:01:12 +0000
Manifest next update: Sat 07 Mar 2026 23:01:12 +0000
Files and hashes: 1: HXJckcDUci80AIjRN03S2vN9gxI.crl (hash: TZjt0Mr2fKxO1FV7CO00wVTxJ/fQPpC3SgWdBrNc5Nc=)
2: 6E9FF116ACC311EBA28FAD5FC4F9AE02.roa (hash: +Kdj0gKuBf0PY5h283LzyQmY9m+afZnjRv+cn+9Qh6s=)
3: 6D407F66ACC311EBA28FAD5FC4F9AE02.roa (hash: knpLwXQdC9MTp1jnTgeGf5Z4M6oM8mDDcMnK1p/I7B0=)
4: 6DD1144AACC311EBA28FAD5FC4F9AE02.roa (hash: WmyJmw5Mihv9A2JQO2xOhy7URLFfnvxzxKThl7eGoxs=)
5: 6BEA61CCACC311EBA28FAD5FC4F9AE02.roa (hash: NFCDhwk26+PLfvWvLWF4LR17BmkncUJCTi9+94vSI6k=)
6: 6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa (hash: bx+K75Qji7U/L3EOHI9zaUJ5yAV9kmoLl7pZd625FIc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl
rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 23:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1707 (0x6ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119508, serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Validity
Not Before: Feb 28 23:01:12 2026 GMT
Not After : Mar 7 23:01:12 2026 GMT
Subject: CN=69a373b9-1828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d0:35:eb:e4:29:c7:18:a9:0a:d2:d9:d2:ce:
4c:e8:31:25:a4:db:f0:1c:5d:95:d6:1b:be:24:47:
39:a3:8f:59:61:47:c6:eb:66:33:99:6d:42:46:81:
c6:74:87:b9:f2:bf:fa:fe:5e:e6:bf:79:87:c6:e6:
7b:43:be:5c:27:e7:82:a2:f1:d1:2a:44:79:1c:1c:
f5:1c:9d:d4:12:80:a2:2d:7b:8e:6e:94:a8:83:0c:
4b:a8:79:36:b3:91:25:85:8a:f4:7f:eb:47:cd:76:
f6:80:83:35:95:20:73:51:b8:45:26:95:ed:1f:b8:
1e:a0:4b:6c:1a:0c:72:8a:4b:90:fe:c3:1d:6b:d3:
1c:c5:db:45:bf:a4:a2:14:c5:3a:f2:87:f9:d6:bb:
59:3e:75:6b:a4:ef:70:46:03:a0:2d:c7:34:12:ce:
64:04:97:64:e3:81:0c:9b:40:b9:7c:41:52:ba:48:
7e:0b:2a:bd:b2:28:ed:e6:f9:b2:0f:64:2c:23:31:
5f:13:cf:03:20:91:f9:c4:93:55:63:5e:d3:8a:64:
8e:73:91:d1:f9:10:32:cd:e0:d1:2f:8b:d5:17:dd:
df:d1:3c:88:d2:dd:77:b6:7d:ae:76:20:44:6b:57:
4c:bb:47:0f:a9:b8:6f:d1:72:93:df:1f:99:db:0c:
2a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:62:BC:C8:B1:E4:95:CF:48:EE:E6:1D:73:81:B2:23:8F:74:79:7D
X509v3 Authority Key Identifier:
keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:d9:bf:da:df:2f:d3:b5:91:4f:7b:3d:ce:32:d1:84:42:10:
39:5f:0f:63:a5:75:c0:80:9e:d1:53:f5:8d:35:b9:fe:4b:4b:
f2:d5:74:ac:b6:4f:b4:e6:43:7d:be:e6:fe:76:39:7e:0a:f1:
f4:31:68:25:cf:27:04:1f:be:c4:0e:6f:be:d0:54:44:42:b3:
bd:09:e8:5f:11:1d:94:c6:3d:4d:f6:24:b1:70:e7:65:d7:e0:
63:f5:bb:01:8c:b9:ce:3e:3b:f0:eb:69:05:5a:02:55:79:a1:
37:99:fa:93:9c:24:a0:98:66:ae:0c:42:db:18:4e:76:c2:bb:
48:3e:03:95:4b:cb:85:5e:f9:3d:0d:f0:1a:0f:93:ab:00:3b:
c7:dc:73:54:50:95:47:0d:48:e7:33:c7:6b:23:eb:c0:09:16:
19:bb:87:48:eb:1f:32:fb:fc:47:99:0c:53:3b:72:a0:94:7f:
e5:24:2e:b7:7c:c7:b4:e5:78:21:44:27:31:23:71:02:61:e7:
3f:1a:c9:2f:70:af:02:b8:69:fe:6c:0c:71:b6:83:e1:6f:ff:
37:eb:02:b7:07:9e:60:73:55:7e:2c:98:1a:14:a8:ba:11:c5:
4c:ec:7b:9c:2a:b1:b4:40:69:27:e8:31:ab:dc:23:30:c9:b7:
ed:67:1b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:38:01 2026 by rpki-client