
$ rpki-client -vvf rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.mft
File: _HkvHWLyld9EH6IejzvPJ8phBjA.mft (raw, json)
Hash identifier: ptcVEeQ1E+MUC2VzAkuV7lYofEMHvEAi40DqmVzP83g=
Subject key identifier: 9D:D8:24:2D:F2:4B:AA:25:E7:1B:29:05:3E:E3:2D:B9:83:1A:EF:FA
Authority key identifier: FC:79:2F:1D:62:F2:95:DF:44:1F:A2:1E:8F:3B:CF:27:CA:61:06:30
Certificate issuer: /CN=A913DAC6/serialNumber=FC792F1D62F295DF441FA21E8F3BCF27CA610630
Certificate serial: 0141
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_HkvHWLyld9EH6IejzvPJ8phBjA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.mft
Manifest number: 0139
Signing time: Fri 17 Apr 2026 05:06:45 +0000
Manifest this update: Fri 17 Apr 2026 05:06:45 +0000
Manifest next update: Fri 24 Apr 2026 05:06:45 +0000
Files and hashes: 1: _HkvHWLyld9EH6IejzvPJ8phBjA.crl (hash: Sujo4nOJIfnbjemrfKJpnK3eszctkPet0uc/BmNONzI=)
2: B01E86045EC511EFA4479F42C4F9AE02.roa (hash: zsKXMSkp+PvWPKVbS2PdjPccXHzghWKgI1Bm0STGTmY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.crl
rsync://rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_HkvHWLyld9EH6IejzvPJ8phBjA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:06:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 321 (0x141)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913DAC6, serialNumber=FC792F1D62F295DF441FA21E8F3BCF27CA610630
Validity
Not Before: Apr 17 05:06:45 2026 GMT
Not After : Apr 24 05:06:45 2026 GMT
Subject: CN=69e1bfe5-8a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:74:37:ff:5b:a0:da:a2:88:dc:b9:7d:f8:56:
69:f4:d9:39:5a:62:73:5c:ed:fe:e3:ae:65:a5:04:
8e:3f:bd:c0:85:50:61:e1:38:fa:9c:3e:16:a1:1a:
f7:50:51:9f:ce:48:ee:60:e3:3f:70:a1:31:02:41:
7c:33:91:c8:64:de:49:20:2e:59:eb:82:35:a6:9a:
14:a1:2f:73:72:37:81:7a:3d:e0:db:ab:56:3b:e3:
58:a8:59:53:9a:9b:85:0e:67:28:ee:af:a3:4b:51:
2d:42:da:39:0e:c5:73:6e:38:02:75:56:6c:68:cf:
c7:b3:2d:79:7c:04:1d:2d:17:1f:3a:aa:b3:94:03:
3b:17:de:7e:54:d5:fe:8c:9f:a8:f8:7a:22:16:ba:
fd:93:e2:70:e5:e8:57:df:5a:09:f9:9d:ad:56:41:
3c:35:73:53:28:c8:a7:0b:37:cb:03:b1:03:c9:8b:
10:3d:20:8b:35:0b:7a:d9:1f:79:96:7e:26:a5:de:
7a:02:f1:2d:ef:01:ed:42:8a:87:42:ed:5b:a8:cf:
f9:cb:79:66:37:30:31:17:87:b1:84:33:26:3b:6e:
99:79:b9:55:c3:4d:73:c3:36:c2:02:3f:2b:41:07:
80:72:a5:14:d2:7c:3c:e2:b6:70:00:f4:dd:23:bb:
46:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D8:24:2D:F2:4B:AA:25:E7:1B:29:05:3E:E3:2D:B9:83:1A:EF:FA
X509v3 Authority Key Identifier:
keyid:FC:79:2F:1D:62:F2:95:DF:44:1F:A2:1E:8F:3B:CF:27:CA:61:06:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_HkvHWLyld9EH6IejzvPJ8phBjA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:dc:ac:65:a4:00:b2:19:ca:10:4d:e9:f7:49:6c:62:dc:4d:
6c:e6:96:28:e9:df:4a:62:eb:65:0c:bf:44:6c:2c:03:65:15:
b3:3e:99:94:80:af:20:d9:00:1f:23:75:26:3f:2d:11:c1:2e:
ae:c9:af:50:5b:92:0b:41:e4:c1:b9:7c:19:23:47:1a:af:67:
45:eb:07:94:cc:da:83:03:24:5d:ae:31:1e:c7:6b:89:09:10:
6b:1a:49:db:7c:09:49:61:55:fb:f1:08:76:fa:82:4b:30:e8:
af:40:dd:cd:a2:60:09:31:48:9a:c5:b4:e7:98:a7:7e:84:f5:
a7:8c:55:69:86:bf:94:ad:df:2c:4e:d1:38:90:f2:cf:bf:96:
e5:73:51:48:68:c9:ac:15:fc:20:1c:59:da:17:7d:80:18:2d:
36:e5:04:a4:08:55:ca:78:af:81:e7:b3:20:ac:30:84:7d:5c:
55:89:7d:85:5d:d2:92:e0:4d:a7:00:9d:5c:83:fb:21:2c:8b:
95:f3:6d:ef:60:a3:aa:80:94:80:c4:5b:1a:63:4e:0c:ce:cd:
6f:ea:fb:d8:94:81:c5:a7:ed:0d:fb:cc:fe:f3:8e:32:c7:69:
c1:e9:4b:4a:e5:dc:6c:c8:c3:22:48:0f:ac:db:cb:a8:70:b4:
d6:96:e0:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:33:32 2026 by rpki-client