
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.mft
File: HdcXsimTYZDOtmfHzhyp-b-1-sQ.mft (raw, json)
Hash identifier: tqSywKpkffLvVaKIaa3/353s31QUo+vhinXG6RKv8L8=
Subject key identifier: 3B:1D:B0:0E:3B:9F:4F:EF:4F:DE:71:14:A7:38:9E:8D:C7:B0:73:E5
Authority key identifier: 1D:D7:17:B2:29:93:61:90:CE:B6:67:C7:CE:1C:A9:F9:BF:B5:FA:C4
Certificate issuer: /CN=A913F721/serialNumber=1DD717B229936190CEB667C7CE1CA9F9BFB5FAC4
Certificate serial: 0BAE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdcXsimTYZDOtmfHzhyp-b-1-sQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.mft
Manifest number: 0B7E
Signing time: Sat 28 Feb 2026 19:29:21 +0000
Manifest this update: Sat 28 Feb 2026 19:29:20 +0000
Manifest next update: Sat 07 Mar 2026 19:29:20 +0000
Files and hashes: 1: HdcXsimTYZDOtmfHzhyp-b-1-sQ.crl (hash: ze9+ob/XGA886Io6CDp83j0cEMBJO1umCqg1LCz0glw=)
2: 1AB6B24A502211F0AFF2E30FC4F9AE02.roa (hash: kj+LbGbtBvSSpF59xQ/oF6zo99e75Fj59GXX8sxOzfs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.crl
rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdcXsimTYZDOtmfHzhyp-b-1-sQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 19:29:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2990 (0xbae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F721, serialNumber=1DD717B229936190CEB667C7CE1CA9F9BFB5FAC4
Validity
Not Before: Feb 28 19:29:20 2026 GMT
Not After : Mar 7 19:29:20 2026 GMT
Subject: CN=69a34211-993d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:79:67:4e:bf:5e:6d:94:28:72:a8:cd:8a:77:
f9:96:0a:7b:65:bd:5f:00:41:57:97:73:4a:ee:25:
94:78:32:55:0f:6d:77:81:aa:8a:0b:1d:be:23:a8:
17:52:de:f8:c2:e1:ed:7f:99:8f:97:52:21:7e:18:
bd:20:77:df:84:df:39:db:93:9b:43:d0:d2:d4:a5:
10:f8:e2:eb:8b:b1:45:81:6c:49:c5:ff:2a:cf:e2:
28:2a:5d:4e:a9:70:c5:99:f4:88:6f:55:92:ed:29:
7c:b2:6a:e6:d4:46:57:4e:96:22:78:b7:db:e9:7e:
c3:13:4a:0e:52:3f:e7:41:cf:3a:5c:d3:f8:b2:25:
a5:92:f2:98:60:0b:2f:1c:d3:c9:6b:44:d4:71:6d:
7b:5c:a5:a4:f0:d1:ec:f1:ea:c9:d1:4c:6d:c5:a7:
b8:68:2c:92:bc:56:b6:69:cf:59:70:78:9f:3e:1f:
53:7c:cb:aa:15:a6:71:fc:51:6f:85:12:1a:88:2e:
24:05:29:7e:1d:ea:b7:41:a5:ea:ed:b4:b8:04:6a:
87:25:37:56:7d:cd:ad:02:75:e8:41:e8:0b:2f:05:
65:d5:00:17:c3:b5:4b:84:a8:48:31:d0:01:a4:dc:
fc:15:a8:f8:a4:96:61:5e:13:7e:cc:70:56:d8:fe:
9b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:1D:B0:0E:3B:9F:4F:EF:4F:DE:71:14:A7:38:9E:8D:C7:B0:73:E5
X509v3 Authority Key Identifier:
keyid:1D:D7:17:B2:29:93:61:90:CE:B6:67:C7:CE:1C:A9:F9:BF:B5:FA:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdcXsimTYZDOtmfHzhyp-b-1-sQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:5c:64:f4:d1:99:be:65:7d:6f:59:5f:3f:fd:7c:aa:0c:ba:
a3:94:ab:fa:8e:22:22:56:46:c7:53:4c:a0:aa:fa:24:a7:87:
5e:67:56:0e:42:4d:97:1d:bc:6e:54:7e:b5:34:12:4f:c8:05:
f6:6c:fd:1f:a2:df:19:fe:8b:52:da:1e:49:f2:20:e2:1f:67:
b6:5b:19:5f:2b:72:6a:f8:0b:93:67:5f:bd:59:b4:cb:50:0a:
6d:55:56:a6:43:cf:ef:f7:36:b0:7f:5c:5c:28:6c:61:34:0e:
20:c1:75:46:5f:82:1d:76:93:b9:a9:31:34:f3:f2:89:d7:8f:
44:b7:ac:da:e0:f4:19:95:2d:e3:3c:59:95:a9:5f:ad:10:38:
c8:d1:f5:a9:65:29:08:4a:f5:54:19:c1:0c:39:cf:76:98:89:
1e:fd:2c:56:2a:b0:34:68:62:f5:96:de:28:b6:1b:d3:74:31:
95:c3:fd:e0:76:3c:5e:ef:a4:e3:7e:bc:39:c2:1f:5e:c1:bb:
a9:6d:d3:5a:5d:a9:ca:a0:3a:db:47:30:fb:49:cc:95:e9:ac:
0a:9b:3c:28:a6:91:68:13:37:58:3e:0f:e7:5d:9b:3b:10:a2:
60:7a:81:cc:8c:29:4d:9a:20:9f:e0:21:69:c0:e2:6b:20:cc:
17:2d:d1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:44:39 2026 by rpki-client