
$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.mft
File: hoEbsmeu-FQA2-cpcCMtQRotmuk.mft (raw, json)
Hash identifier: ekJNBv5D7PWOE4B6T+eL7+L0sCMQ98XxAVlOGcwfeF4=
Subject key identifier: 32:7C:2F:9D:B9:A4:7C:C8:E6:2B:A3:16:27:82:02:89:97:59:E1:31
Authority key identifier: 86:81:1B:B2:67:AE:F8:54:00:DB:E7:29:70:23:2D:41:1A:2D:9A:E9
Certificate issuer: /CN=A913AE7C/serialNumber=86811BB267AEF85400DBE72970232D411A2D9AE9
Certificate serial: 0C43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hoEbsmeu-FQA2-cpcCMtQRotmuk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.mft
Manifest number: 0C3A
Signing time: Mon 02 Mar 2026 01:53:29 +0000
Manifest this update: Mon 02 Mar 2026 01:53:27 +0000
Manifest next update: Mon 09 Mar 2026 01:53:27 +0000
Files and hashes: 1: hoEbsmeu-FQA2-cpcCMtQRotmuk.crl (hash: 4T4kjmpS689Ep+CY6YYerDOrqVrbCixyHnBPU0v2gGY=)
2: CE9692E0222311EAAED0162CC4F9AE02.roa (hash: W05cTvwuZ3N93hWfUJPpUsDgcMlEbyJ5596px1i50nc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.crl
rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hoEbsmeu-FQA2-cpcCMtQRotmuk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:53:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3139 (0xc43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913AE7C, serialNumber=86811BB267AEF85400DBE72970232D411A2D9AE9
Validity
Not Before: Mar 2 01:53:27 2026 GMT
Not After : Mar 9 01:53:27 2026 GMT
Subject: CN=69a4ed98-aafb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a7:cb:10:99:e1:4a:f0:90:ae:c5:c5:a8:2d:
2f:ff:46:59:f9:22:88:fb:6f:bf:5c:f9:60:88:6e:
d4:c7:27:08:f9:2a:5d:a2:5d:3c:85:99:77:2a:b9:
65:c4:34:2e:ad:6f:81:50:2a:17:ad:85:4b:93:6e:
4b:e6:a0:03:ee:bf:73:cf:c1:b6:6b:29:93:4a:17:
bc:8c:1b:65:27:e7:ed:e6:fa:18:bf:94:7a:03:59:
90:a9:b2:36:f0:f2:8a:14:a3:7b:b9:d9:50:cb:3d:
5c:84:49:99:c3:25:14:ce:0d:77:1c:e4:c8:23:b5:
62:f5:47:eb:7b:14:5b:97:22:fc:b4:d0:ec:47:fe:
80:3b:73:78:01:33:41:52:6a:5a:06:5f:23:76:76:
65:ff:f5:40:27:40:87:40:8b:3e:4e:64:3f:e3:9d:
65:47:06:26:6c:e8:64:27:d9:c6:23:a3:db:ee:1f:
4f:7b:20:a7:35:c5:d8:6c:51:a9:58:11:7e:0e:ec:
c3:cd:54:31:95:6b:ea:e0:7a:df:54:04:3e:6f:37:
99:0e:0a:0f:72:2f:64:11:22:f7:2e:b5:bc:04:e8:
f8:2b:a3:0e:c5:58:3f:0a:e0:0b:62:3b:c7:b6:fe:
21:41:a7:1a:b7:85:5d:07:48:31:ac:a9:69:75:65:
17:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:7C:2F:9D:B9:A4:7C:C8:E6:2B:A3:16:27:82:02:89:97:59:E1:31
X509v3 Authority Key Identifier:
keyid:86:81:1B:B2:67:AE:F8:54:00:DB:E7:29:70:23:2D:41:1A:2D:9A:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hoEbsmeu-FQA2-cpcCMtQRotmuk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:4b:b1:77:08:f7:ae:d9:4d:5c:f6:11:a5:ee:56:19:b9:0a:
be:2f:7d:96:57:43:7c:b4:77:bd:0b:01:e8:20:02:3e:ae:4a:
7f:7f:ca:92:4a:08:62:a2:e3:18:bd:ca:a1:11:07:25:a9:e4:
50:61:51:43:21:99:74:44:81:a8:3a:0b:08:6f:24:60:2f:f4:
58:03:3e:c9:0d:aa:bc:58:32:3f:0a:1b:ec:31:78:e4:e9:fd:
ed:7a:a7:94:69:3a:02:4f:a7:5c:e7:90:db:ed:ed:0c:2b:2f:
78:5b:69:33:da:d8:96:a6:5f:1b:9f:cb:47:29:19:0b:a5:7b:
5b:0b:0a:c5:d6:d3:7f:0d:d2:b5:ad:ae:b5:2d:af:6e:79:fa:
97:9a:4f:f6:81:fe:31:13:00:69:0e:9e:f5:04:f9:f5:a0:9d:
f4:36:04:07:d2:a2:9b:53:e2:88:7b:13:36:5f:b6:33:00:c4:
f3:a8:c9:ab:41:2e:df:ce:d3:6e:d9:38:00:20:6c:a9:dd:e9:
80:bb:88:24:50:0d:8d:bc:2b:7b:70:42:03:eb:c6:4c:c1:b4:
a7:06:34:59:de:4e:9c:a9:bf:89:34:3a:b3:1c:af:fd:f3:96:
ed:59:07:57:ed:c6:cc:8b:d4:94:8e:73:74:34:c8:87:52:3b:
b4:e4:d5:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:30:56 2026 by rpki-client