
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft
File: HQDCg8qhqzzENxoqOE1isc1E-6c.mft (raw, json)
Hash identifier: Na1CZfCsnNype73Tnd4YcwY5dRzectHoc5+on71P/Eo=
Subject key identifier: 01:B3:BD:D3:5A:C6:C1:CB:F6:15:7A:84:D2:D7:59:EF:5F:41:C0:0C
Authority key identifier: 1D:00:C2:83:CA:A1:AB:3C:C4:37:1A:2A:38:4D:62:B1:CD:44:FB:A7
Certificate issuer: /CN=A912F387/serialNumber=1D00C283CAA1AB3CC4371A2A384D62B1CD44FBA7
Certificate serial: 0247
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft
Manifest number: 022E
Signing time: Fri 09 Oct 2026 03:22:27 +0000
Manifest this update: Fri 09 Oct 2026 03:22:26 +0000
Manifest next update: Fri 16 Oct 2026 03:22:26 +0000
Files and hashes: 1: HQDCg8qhqzzENxoqOE1isc1E-6c.crl (hash: 942PjUCH7mzPR6IaLLaF2AiafqP84ggRSANEox0Br+4=)
2: 9556705A2E6111EF9D743040C4F9AE02.roa (hash: aK9c79sTcvK5iWtA4NQLYDiheDhiqCqKnIFb6fchAKg=)
3: FC34967C6C8611EFBF35D221C4F9AE02.roa (hash: 9vn9aNac6NN/1kMCYleAi9M7mbZTN9Jpf9hVVI22FOc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.crl
rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 03:22:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 583 (0x247)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F387, serialNumber=1D00C283CAA1AB3CC4371A2A384D62B1CD44FBA7
Validity
Not Before: Oct 9 03:22:26 2026 GMT
Not After : Oct 16 03:22:26 2026 GMT
Subject: CN=6ac85df3-3919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cf:25:35:f1:f7:fb:ba:2c:b3:e0:db:d9:39:
0c:00:5a:43:ff:6d:fe:43:7e:32:8f:fb:71:98:a6:
5f:7d:48:bf:03:4e:b1:9c:3c:f7:a9:f7:0d:42:d3:
f5:ee:f0:9d:c4:33:ed:36:6c:b0:27:50:dd:9c:e6:
b7:88:1e:8b:69:37:90:af:b5:20:e0:51:d4:f4:39:
d4:28:b5:65:63:96:45:9f:60:d6:d7:ea:90:76:50:
78:1b:b5:db:39:54:16:33:fa:b1:b1:97:7b:70:24:
2b:bb:1b:8f:15:f2:2b:98:6e:a5:87:84:d3:9c:4b:
0f:b4:d2:c7:3e:e3:00:22:d3:48:79:e1:48:40:fe:
ad:9e:45:2d:c4:08:f1:8e:a4:c6:1c:06:51:9d:49:
f0:d0:52:0c:03:15:52:b1:34:fe:70:2f:6a:06:a0:
84:d6:70:7f:70:2a:9f:55:4e:a7:60:55:59:a8:b3:
07:35:7c:7b:d1:55:79:21:8e:77:76:4e:14:17:51:
5e:d3:0e:d8:8b:ca:85:f9:01:43:8d:e4:b4:8f:73:
c9:db:67:82:29:02:88:74:da:45:b6:89:66:8b:c4:
a5:17:9b:ac:ec:32:4a:d2:f4:cd:dc:f6:ea:cb:2d:
d8:68:5d:e1:d1:45:38:eb:57:eb:31:eb:e2:50:17:
8e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B3:BD:D3:5A:C6:C1:CB:F6:15:7A:84:D2:D7:59:EF:5F:41:C0:0C
X509v3 Authority Key Identifier:
keyid:1D:00:C2:83:CA:A1:AB:3C:C4:37:1A:2A:38:4D:62:B1:CD:44:FB:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:ad:8a:8c:eb:f1:5b:be:c9:f1:24:3f:ab:5a:e6:4e:2d:fe:
a3:47:7f:0c:e2:9c:de:24:b9:dd:82:fa:a3:e4:58:a7:d4:7a:
0f:ac:34:c3:62:4a:c5:23:96:12:b4:2a:4e:91:ac:d7:89:3d:
ba:ec:ac:18:ef:38:0c:7a:51:cc:32:b6:41:ec:db:05:9d:8b:
f4:08:df:8e:bc:d9:f5:ad:bd:9e:fd:57:91:a3:0e:f5:ab:d0:
e6:ec:f7:5a:14:75:9b:88:96:bd:be:ef:98:ea:cd:46:52:6c:
40:b4:ad:ad:64:3d:d4:1d:f1:a7:7a:da:59:a8:2c:24:5b:43:
ed:9f:cc:13:31:37:3f:e5:7a:48:69:7a:17:31:e9:c4:a9:ac:
e7:e8:f4:6e:ba:c5:ca:5f:a1:6f:ef:d0:9e:dd:fc:79:73:34:
f7:2a:7b:02:43:34:37:8a:05:fe:07:16:a0:eb:9a:6d:1e:e8:
7a:8a:b8:53:32:ba:99:c1:a3:52:56:7a:57:34:7c:aa:08:39:
e6:28:2d:63:83:6a:cd:ce:65:ee:45:2a:ed:63:33:98:4d:6b:
34:a4:85:0f:d4:05:c9:c3:bf:ca:95:88:c9:ca:e7:bc:74:e5:
35:5d:97:ce:56:7c:3a:05:24:57:90:5d:9d:a8:2d:2e:e3:27:
78:55:b3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:52:33 2026 by rpki-client