
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft
File: -HfnZ8AkHlKW_jMylZne-j0toUE.mft (raw, json)
Hash identifier: aDcxOF3CwKKy13I202g1cSFls8kKpkbeARYjicgc4tw=
Subject key identifier: E4:B7:F6:21:A4:E8:89:10:31:3F:13:70:FD:13:61:54:BB:D4:22:87
Authority key identifier: F8:77:E7:67:C0:24:1E:52:96:FE:33:32:95:99:DE:FA:3D:2D:A1:41
Certificate issuer: /CN=A9145515/serialNumber=F877E767C0241E5296FE33329599DEFA3D2DA141
Certificate serial: 0C33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HfnZ8AkHlKW_jMylZne-j0toUE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft
Manifest number: 0C2A
Signing time: Thu 16 Apr 2026 18:41:17 +0000
Manifest this update: Thu 16 Apr 2026 18:41:17 +0000
Manifest next update: Thu 23 Apr 2026 18:41:17 +0000
Files and hashes: 1: -HfnZ8AkHlKW_jMylZne-j0toUE.crl (hash: U8iFVhaU9/99YZ//advaBWpAdFRJoVzpklP8ekWb0EU=)
2: 60875A5C2A3711EABEA9BF73C4F9AE02.roa (hash: fKNon6NCgCOGVHkPldMfFkQTkW6jIWPmLvSkFUdw9rQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.crl
rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HfnZ8AkHlKW_jMylZne-j0toUE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:41:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3123 (0xc33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145515, serialNumber=F877E767C0241E5296FE33329599DEFA3D2DA141
Validity
Not Before: Apr 16 18:41:17 2026 GMT
Not After : Apr 23 18:41:17 2026 GMT
Subject: CN=69e12d4d-5718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:65:5b:fa:76:fc:d7:aa:f4:bc:38:27:64:e7:
03:6a:a7:5e:3e:07:40:b8:dd:76:80:c3:7d:59:06:
ca:cc:7d:3f:96:b3:f1:91:a4:1a:2d:b9:c5:90:68:
bd:45:fd:69:18:a9:ec:a8:66:f7:b2:fe:a3:57:26:
6e:0d:61:57:54:c6:cd:eb:7c:fd:0b:d4:f1:f8:e3:
cf:71:ad:aa:7b:1c:34:a2:d5:99:d0:ab:6b:35:49:
32:b5:48:dc:24:f1:31:06:94:b7:33:39:54:0b:46:
25:fa:a6:97:c7:31:09:63:c9:92:f1:a9:32:58:c6:
d2:af:55:ac:bf:f5:f4:e0:f0:d9:5d:a4:e6:35:3f:
0d:04:ff:41:9b:06:ca:be:1e:d6:4a:ff:75:14:88:
5a:28:7a:ec:0a:e1:76:60:ac:3f:39:62:cc:48:7b:
a7:e8:fb:54:ac:84:03:42:bb:c1:cf:2c:8a:23:eb:
ec:5d:cf:8c:cb:be:2e:d6:37:60:fa:49:8c:38:a0:
8c:e2:e6:a2:76:77:c4:d2:b3:51:21:86:62:85:5c:
51:11:c4:4e:b9:6e:72:d3:10:fd:fd:34:39:73:fa:
cd:0a:44:b3:7d:15:71:e9:c1:a9:ce:94:ac:f1:36:
6b:f8:c9:a5:3e:9a:ce:b8:18:0b:b0:bf:45:f9:a8:
da:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B7:F6:21:A4:E8:89:10:31:3F:13:70:FD:13:61:54:BB:D4:22:87
X509v3 Authority Key Identifier:
keyid:F8:77:E7:67:C0:24:1E:52:96:FE:33:32:95:99:DE:FA:3D:2D:A1:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HfnZ8AkHlKW_jMylZne-j0toUE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:50:4b:6b:fc:17:9c:f0:41:fc:cb:80:db:42:26:18:ab:6a:
cf:3d:f7:d4:04:3f:6d:3a:c0:2c:91:b0:30:47:ee:29:47:bb:
79:57:0e:bd:76:6a:df:45:11:05:10:4e:34:ab:9a:0c:9a:33:
d0:8f:44:60:b2:ae:9a:06:0d:c1:3a:40:35:81:2f:8e:14:d0:
7a:93:b4:17:ec:41:be:b8:0d:83:ed:83:a8:75:96:52:09:1d:
d8:25:7a:42:96:af:79:5e:02:0b:90:e3:fe:5c:ce:c6:79:02:
02:26:38:0c:e9:c8:ab:5d:39:39:97:93:13:a1:bb:af:cc:aa:
2c:74:67:49:17:91:8a:ff:5a:fd:10:b4:16:b8:24:78:c7:8d:
b9:40:a0:48:13:8e:6d:05:7d:88:b1:9a:4a:d1:1a:99:bd:64:
d2:02:fd:ba:8a:6d:06:44:30:95:a6:34:79:41:32:c9:c4:da:
87:fa:6f:15:7a:16:f4:7e:d2:1e:16:02:7d:04:03:9b:b6:3f:
4b:c6:42:c6:4d:54:54:98:a1:83:28:47:41:4b:26:cb:60:09:
06:fa:f9:b0:c2:e8:9a:f0:7f:e3:fb:39:70:73:7d:e1:93:5d:
9e:30:94:34:20:33:66:db:1f:84:56:ff:ae:b0:3e:0a:c2:ca:
60:f4:58:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:47:53 2026 by rpki-client