
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.mft
File: hseUaUaypXsFbwKyeTQNMMLOSbQ.mft (raw, json)
Hash identifier: NOtn8szU8Iv67++8DtX+2LZWC+IMWrse7DUBcJP/e2U=
Subject key identifier: C8:7B:22:3F:BB:17:35:33:DA:BA:D0:EE:92:1A:E6:71:55:62:C3:44
Authority key identifier: 86:C7:94:69:46:B2:A5:7B:05:6F:02:B2:79:34:0D:30:C2:CE:49:B4
Certificate issuer: /CN=A9120B99/serialNumber=86C7946946B2A57B056F02B279340D30C2CE49B4
Certificate serial: 360F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.mft
Manifest number: 35D1
Signing time: Tue 28 Jul 2026 14:23:53 +0000
Manifest this update: Tue 28 Jul 2026 14:23:53 +0000
Manifest next update: Tue 04 Aug 2026 14:23:53 +0000
Files and hashes: 1: hseUaUaypXsFbwKyeTQNMMLOSbQ.crl (hash: qQT4DipF7aBeCCPsOOC4QRRweSmPiZTGNKzbzoJJtf8=)
2: 8E3D04582E6111F1B6525AEF9C833773.roa (hash: vj80xxBZZ47KcJ0pnAomU1A+ji7M1/hFg9BFpv3vEYM=)
3: 2BB9C0962D3511F1BEC8C490BD833773.roa (hash: M2/DOJue81Ta3Rj5Fa3xRuzMgODRNGvnffODxr3mNPw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.crl
rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 14:23:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13839 (0x360f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120B99, serialNumber=86C7946946B2A57B056F02B279340D30C2CE49B4
Validity
Not Before: Jul 28 14:23:53 2026 GMT
Not After : Aug 4 14:23:53 2026 GMT
Subject: CN=6a68bb79-0525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:04:97:e1:73:6b:0f:ea:29:a4:ea:32:ac:45:
23:42:0b:fe:f5:87:dc:08:fc:f5:0c:41:6d:3c:15:
c0:25:be:e3:c5:ff:28:09:a9:63:a0:34:c5:9e:1a:
d3:d3:d7:95:0a:68:33:7a:12:fc:50:b9:8b:a1:1e:
24:ed:b5:40:ff:d1:c7:d6:fa:34:aa:92:4e:23:3c:
01:67:ef:85:9d:ef:b7:8b:fc:dc:e3:ed:ec:10:69:
74:42:4a:18:69:88:1c:c9:f3:09:ef:bb:28:58:11:
06:8c:5a:13:04:0c:8d:67:0f:77:b9:2a:e4:78:55:
52:7f:2b:31:3a:3b:3d:8e:78:cf:1d:9a:68:2b:1e:
3f:52:d6:e6:4e:93:b8:e1:1d:2b:5c:35:97:4d:6b:
66:a1:43:ae:7f:1e:2b:7f:a5:7e:f1:52:f4:ed:6e:
ab:b1:ab:6d:d6:8f:2f:47:c1:be:57:5a:40:a1:17:
e7:68:35:29:8a:79:f4:88:c4:62:05:fb:73:70:35:
29:40:5d:6e:8f:2d:c4:d2:ad:8b:f0:d6:07:76:69:
ca:d4:1e:cf:f5:ac:0e:9b:44:0a:e5:d8:d8:60:19:
50:26:d7:5e:24:e8:7d:70:3b:9d:9d:ef:f6:e3:44:
6a:f9:bc:4a:39:88:81:4a:1b:20:33:af:c4:de:bd:
98:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:7B:22:3F:BB:17:35:33:DA:BA:D0:EE:92:1A:E6:71:55:62:C3:44
X509v3 Authority Key Identifier:
keyid:86:C7:94:69:46:B2:A5:7B:05:6F:02:B2:79:34:0D:30:C2:CE:49:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:11:ae:9b:66:39:88:7c:f9:b3:ca:6d:ab:95:a5:45:f3:58:
15:90:45:85:0d:65:60:0e:bb:43:be:dd:bf:98:11:f5:69:b4:
90:a1:e7:25:1c:ba:d0:12:53:88:c4:b7:f5:06:58:83:cb:55:
18:76:1d:47:b3:01:25:d7:7b:41:8c:60:43:d7:37:0a:7d:9d:
04:8b:66:cd:8c:f0:49:39:ab:b4:ad:68:e4:5b:54:5b:f9:07:
84:36:67:29:1a:bf:90:90:47:5a:d3:63:15:0d:e1:cb:7a:d8:
d9:2e:79:03:95:c8:b4:83:73:40:e3:03:76:39:5e:99:76:63:
72:2e:36:93:3d:4a:bb:3c:4b:eb:09:2a:70:17:9b:8e:d4:52:
8a:ce:4b:4e:82:a5:8c:8f:39:0f:f6:96:df:91:09:08:06:18:
dc:1a:07:a8:9e:8e:9e:fc:6f:36:f2:21:f0:f9:1f:94:9f:28:
67:7d:8e:36:80:16:95:0b:18:17:d8:01:13:01:5d:f9:3b:bd:
88:ae:dc:74:74:d4:85:02:62:7a:f8:f9:9f:78:cf:c2:45:82:
69:f5:28:b6:5b:a5:8c:97:ec:12:ed:b4:7e:f5:a8:55:fb:c8:
50:f1:36:73:16:8b:58:9f:95:e0:5b:b7:7d:5a:c0:2d:64:af:
29:92:a9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:14:34 2026 by rpki-client