
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft
File: HsyXilPvK-iOXyatm4q4g3PRl6Y.mft (raw, json)
Hash identifier: lDOgtkVmbgrP2/mUoE+wl3ETlWsZ3bkitKiZo3nbhfE=
Subject key identifier: 68:2F:F3:17:78:79:86:71:FC:55:A1:BD:34:AF:69:49:6C:F5:4E:61
Authority key identifier: 1E:CC:97:8A:53:EF:2B:E8:8E:5F:26:AD:9B:8A:B8:83:73:D1:97:A6
Certificate issuer: /CN=A9149F3E/serialNumber=1ECC978A53EF2BE88E5F26AD9B8AB88373D197A6
Certificate serial: 352C
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/HsyXilPvK-iOXyatm4q4g3PRl6Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft
Manifest number: 352C
Signing time: Sat 28 Feb 2026 14:22:51 +0000
Manifest this update: Sat 28 Feb 2026 14:22:51 +0000
Manifest next update: Sat 07 Mar 2026 14:22:51 +0000
Files and hashes: 1: HsyXilPvK-iOXyatm4q4g3PRl6Y.crl (hash: 2X/b4AkN0BFQh52ZffYaWv+92SMvwFbyWs1LbaO9IZA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.crl
rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/HsyXilPvK-iOXyatm4q4g3PRl6Y.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 14:22:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13612 (0x352c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149F3E, serialNumber=1ECC978A53EF2BE88E5F26AD9B8AB88373D197A6
Validity
Not Before: Feb 28 14:22:51 2026 GMT
Not After : Mar 7 14:22:51 2026 GMT
Subject: CN=69a2fa3b-a224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:07:3c:57:79:1f:4d:8b:44:12:83:51:ad:15:
10:85:fd:7f:3f:51:e5:ec:f2:a7:75:30:8d:92:a7:
84:e2:cd:df:6d:1e:0d:85:0d:57:61:a6:bd:e7:59:
6c:37:e8:d4:77:fb:bd:11:5c:87:37:89:d0:b1:73:
ff:5d:2a:4d:a4:de:d1:66:d7:9f:b9:5b:e0:ba:5e:
86:2b:97:98:82:ad:c5:1a:2a:69:bd:ae:e5:fd:12:
b8:16:f2:0f:7e:d1:71:cd:d4:f0:f3:70:66:77:92:
c1:76:90:56:e7:66:ce:63:c2:06:43:3f:38:6b:2a:
c3:2a:ee:e6:22:75:0e:c5:25:72:aa:29:7f:f6:ce:
03:f6:96:cd:b6:a5:ed:fb:a0:5c:08:08:cc:2b:71:
8c:07:6f:e2:db:b2:51:24:a9:c3:f2:9f:a7:d9:bf:
6c:fd:5f:b7:9f:81:13:17:16:c2:c4:0a:6d:1a:cb:
83:2b:79:61:f8:9c:50:b3:4f:0d:2f:dc:6b:11:5a:
93:18:40:43:6c:38:92:9a:45:9e:c9:bc:d4:bb:ff:
b9:87:92:9e:ac:91:9e:54:cc:89:f8:12:55:f5:15:
93:28:11:75:14:38:42:6e:35:9f:e9:a3:94:c3:03:
8c:b4:ad:7e:db:c4:24:29:6f:02:e0:11:ea:2d:16:
8b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:2F:F3:17:78:79:86:71:FC:55:A1:BD:34:AF:69:49:6C:F5:4E:61
X509v3 Authority Key Identifier:
keyid:1E:CC:97:8A:53:EF:2B:E8:8E:5F:26:AD:9B:8A:B8:83:73:D1:97:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/HsyXilPvK-iOXyatm4q4g3PRl6Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:1e:9f:90:a0:4a:93:17:5d:8e:17:83:36:25:a4:93:c3:e1:
01:2e:ff:0b:ab:79:33:e6:f1:26:db:db:56:8b:1c:6e:e8:56:
39:ff:96:72:30:f2:3f:7c:29:22:ee:26:11:53:9c:63:49:0d:
05:c6:e7:e5:c0:75:89:d2:d1:01:04:dc:ec:cc:6e:6d:0e:a3:
16:ea:48:39:0b:44:88:6b:ae:81:98:1d:60:ee:1b:b3:ab:ae:
6b:14:df:81:32:86:c3:ab:f9:68:a0:15:ee:bd:50:1a:fe:e9:
d8:f9:ac:62:90:44:4c:19:8d:8d:6f:da:96:ea:08:8e:b2:fc:
17:4c:00:79:ef:42:b7:39:cf:2d:39:d7:14:31:b9:86:d7:98:
b5:26:ea:a8:23:47:44:7c:7b:4a:97:fa:65:cc:22:a5:f8:72:
42:bb:c2:08:01:c7:78:26:3a:ed:d5:fa:91:60:f0:15:30:e0:
ab:9b:ae:fe:7e:68:78:41:df:79:92:33:9f:4c:fe:31:11:89:
a7:75:7a:21:3e:a9:45:d9:c7:a6:aa:d1:bc:43:53:f8:7e:cb:
eb:6c:5e:2d:60:76:3b:9a:ed:5a:db:0c:aa:66:b9:b5:be:90:
c7:34:3f:af:22:e8:86:ed:18:2b:25:74:e6:5f:71:2e:54:a9:
5b:7e:ee:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:42:55 2026 by rpki-client