
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/HUW1iuOmlSERtAmFTag5MXvugjM.mft
File: HUW1iuOmlSERtAmFTag5MXvugjM.mft (raw, json)
Hash identifier: LDVpKhn4h5ffghgxVB/EqFsYQLXo/2N9MSMc0sRAiKs=
Subject key identifier: BC:10:9F:A9:BE:BC:9A:90:62:5A:5A:90:83:28:B2:3D:E5:32:CC:D0
Authority key identifier: 1D:45:B5:8A:E3:A6:95:21:11:B4:09:85:4D:A8:39:31:7B:EE:82:33
Certificate issuer: /CN=A9120119/serialNumber=1D45B58AE3A6952111B409854DA839317BEE8233
Certificate serial: 11E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUW1iuOmlSERtAmFTag5MXvugjM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/HUW1iuOmlSERtAmFTag5MXvugjM.mft
Manifest number: 1AA9
Signing time: Tue 28 Jul 2026 17:15:32 +0000
Manifest this update: Tue 28 Jul 2026 17:15:31 +0000
Manifest next update: Tue 04 Aug 2026 17:15:31 +0000
Files and hashes: 1: HUW1iuOmlSERtAmFTag5MXvugjM.crl (hash: RdNwSMj+yB6sXKnkeijLWvgAt0PjHFrzEdiokwDf6dE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/HUW1iuOmlSERtAmFTag5MXvugjM.crl
rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/HUW1iuOmlSERtAmFTag5MXvugjM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUW1iuOmlSERtAmFTag5MXvugjM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 17:15:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4582 (0x11e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120119, serialNumber=1D45B58AE3A6952111B409854DA839317BEE8233
Validity
Not Before: Jul 28 17:15:31 2026 GMT
Not After : Aug 4 17:15:31 2026 GMT
Subject: CN=6a68e3b3-e19c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5d:8b:c6:f3:64:a4:12:4f:3f:54:84:5b:ac:
48:a5:74:fb:b9:cb:11:f6:2e:54:7f:ac:56:f5:e7:
8c:5a:92:f9:a5:fa:aa:aa:02:30:84:f8:dd:a2:a8:
d6:a5:ab:93:fa:f2:09:15:7d:af:83:5c:1d:a4:48:
e9:48:60:67:0b:40:54:5b:36:e8:f1:ad:c2:4e:33:
81:9c:f5:3c:68:e2:0a:1a:34:fc:c1:13:98:2b:24:
16:62:1e:32:69:de:fe:92:ce:fe:33:be:ae:c5:d6:
61:50:30:bd:a3:8d:f9:f2:65:80:44:a5:63:3b:fe:
8f:cd:0a:fe:01:e5:ab:3b:1d:15:b6:e1:f5:a0:13:
94:a6:c9:88:78:f6:11:f0:8e:14:68:16:9a:c6:16:
96:44:4e:78:58:52:bf:c7:4f:cb:f4:18:66:85:65:
3d:92:45:bf:3b:bd:1e:49:db:c7:76:c6:d3:bb:66:
43:f4:0a:bf:e3:2f:9f:2d:2b:ec:45:99:33:48:df:
ab:24:32:f2:8a:ec:c5:d5:d6:74:0f:fe:09:f1:23:
5f:25:00:f9:5e:c0:91:28:91:7a:f8:d9:2a:ab:24:
95:73:21:73:57:a6:e7:a6:fb:84:42:93:dc:c4:98:
6c:21:52:4f:73:91:34:ed:68:10:a9:a4:68:32:d3:
4d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:10:9F:A9:BE:BC:9A:90:62:5A:5A:90:83:28:B2:3D:E5:32:CC:D0
X509v3 Authority Key Identifier:
keyid:1D:45:B5:8A:E3:A6:95:21:11:B4:09:85:4D:A8:39:31:7B:EE:82:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/HUW1iuOmlSERtAmFTag5MXvugjM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUW1iuOmlSERtAmFTag5MXvugjM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/HUW1iuOmlSERtAmFTag5MXvugjM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:5e:85:a2:58:6a:41:65:3b:5c:dd:0b:05:95:f9:05:09:63:
79:36:f1:eb:22:06:0b:ea:29:51:e2:62:dd:86:b6:66:db:5b:
18:80:40:06:ab:83:fd:86:b2:72:6e:84:cc:61:53:11:f3:d0:
f4:ba:2f:da:cd:34:d0:13:40:99:e7:44:58:d8:53:12:8a:db:
2d:45:7c:b7:e0:26:ab:a8:b2:02:bb:d0:25:4e:c5:be:9b:f5:
0a:81:cb:1e:61:73:9a:8a:f1:31:e5:81:a7:a3:70:59:07:fa:
53:f5:dd:08:1c:cf:51:d4:a0:9a:20:37:f2:cb:d9:cf:19:20:
50:5a:61:5a:cc:63:cf:8a:79:db:da:96:56:e1:f8:f8:0c:5e:
0f:1d:87:ad:fe:76:8f:cd:12:da:87:29:f1:e1:2c:fe:85:3c:
dc:ed:70:a1:92:b9:1c:ae:cb:41:8f:df:94:52:ec:c2:80:10:
05:d2:c2:18:65:61:46:cd:be:f6:5b:01:67:3b:88:a3:bf:a3:
3f:2a:da:10:c1:16:0f:50:50:97:9e:a5:12:90:47:ce:3a:f5:
71:4b:64:0e:53:13:16:68:35:d7:23:df:a1:b9:a8:00:3b:a7:
a1:c1:ad:eb:5a:c1:60:f0:31:1f:22:00:64:e8:e7:c6:62:c3:
26:88:1f:63
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjAxMTkxMTAvBgNVBAUTKDFENDVCNThBRTNBNjk1MjExMUI0MDk4NTREQTgzOTMx
N0JFRTgyMzMwHhcNMjYwNzI4MTcxNTMxWhcNMjYwODA0MTcxNTMxWjAYMRYwFAYD
VQQDEw02YTY4ZTNiMy1lMTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyF2LxvNkpBJPP1SEW6xIpXT7ucsR9i5Uf6xW9eeMWpL5pfqqqgIwhPjdoqjW
pauT+vIJFX2vg1wdpEjpSGBnC0BUWzbo8a3CTjOBnPU8aOIKGjT8wROYKyQWYh4y
ad7+ks7+M76uxdZhUDC9o4358mWARKVjO/6PzQr+AeWrOx0VtuH1oBOUpsmIePYR
8I4UaBaaxhaWRE54WFK/x0/L9BhmhWU9kkW/O70eSdvHdsbTu2ZD9Aq/4y+fLSvs
RZkzSN+rJDLyiuzF1dZ0D/4J8SNfJQD5XsCRKJF6+NkqqySVcyFzV6bnpvuEQpPc
xJhsIVJPc5E07WgQqaRoMtNN/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLwQn6m+
vJqQYlpakIMosj3lMszQMB8GA1UdIwQYMBaAFB1FtYrjppUhEbQJhU2oOTF77oIz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDExOS9FRUI3MUJFMjEz
RjMxMUU5ODgyRjlCNjdDNEY5QUUwMi9IVVcxaXVPbWxTRVJ0QW1GVGFnNU1YdnVn
ak0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hVVzFpdU9tbFNFUnRBbUZUYWc1TVh2dWdqTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MDExOS9FRUI3MUJFMjEzRjMxMUU5ODgyRjlCNjdDNEY5QUUwMi9IVVcxaXVPbWxT
RVJ0QW1GVGFnNU1YdnVnak0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANF6FolhqQWU7XN0LBZX5BQljeTbx6yIGC+opUeJi3Ya2ZttbGIBABquD/Yay
cm6EzGFTEfPQ9Lov2s000BNAmedEWNhTEorbLUV8t+Amq6iyArvQJU7Fvpv1CoHL
HmFzmorxMeWBp6NwWQf6U/XdCBzPUdSgmiA38svZzxkgUFphWsxjz4p529qWVuH4
+AxeDx2Hrf52j80S2ocp8eEs/oU83O1woZK5HK7LQY/flFLswoAQBdLCGGVhRs2+
9lsBZzuIo7+jPyraEMEWD1BQl56lEpBHzjr1cUtkDlMTFmg11yPfobmoADunocGt
61rBYPAxHyIAZOjnxmLDJogfYw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:11:12 2026 by rpki-client