
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft
File: HC-QzT9RuKzQAhDjV96agctF0XE.mft (raw, json)
Hash identifier: AHjzhiQx7gLplFwFP5qXcHXjf2OA0kZwzG61I1B1arE=
Subject key identifier: CC:24:66:17:F3:FE:71:9B:B2:89:65:71:07:BB:84:1A:E1:15:35:35
Authority key identifier: 1C:2F:90:CD:3F:51:B8:AC:D0:02:10:E3:57:DE:9A:81:CB:45:D1:71
Certificate issuer: /CN=A915B01D/serialNumber=1C2F90CD3F51B8ACD00210E357DE9A81CB45D171
Certificate serial: 1E9B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft
Manifest number: 1E8A
Signing time: Fri 12 Jun 2026 16:02:05 +0000
Manifest this update: Fri 12 Jun 2026 16:02:05 +0000
Manifest next update: Fri 19 Jun 2026 16:02:05 +0000
Files and hashes: 1: HC-QzT9RuKzQAhDjV96agctF0XE.crl (hash: Dp7JyMVE/wx9FRuQlOM1G4RAGUcFkoa4rnxMfW+z9os=)
2: DE95A942581611EE878B2E54C4F9AE02.roa (hash: e4hMYlDnHNsGyWnAsIxka4q6i/J4idktm6GuEoIlVXk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.crl
rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 16:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7835 (0x1e9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B01D, serialNumber=1C2F90CD3F51B8ACD00210E357DE9A81CB45D171
Validity
Not Before: Jun 12 16:02:05 2026 GMT
Not After : Jun 19 16:02:05 2026 GMT
Subject: CN=6a2c2d7d-6f93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:13:bc:be:8b:3b:cf:36:ff:f9:0b:59:7e:ad:
fd:c1:cc:e9:fe:bc:90:e4:68:f5:c0:cf:1f:4f:fd:
61:a5:ed:eb:34:1f:e1:9f:48:db:db:d4:52:df:83:
df:1f:a8:65:09:04:6e:fb:77:d7:e3:d1:4b:3e:48:
68:35:fa:1f:8e:84:29:00:e4:5a:7c:89:b3:f2:99:
b5:6b:e2:33:39:1e:49:80:ab:ae:8a:0c:ae:a3:7f:
63:78:b1:e4:a2:07:72:12:c1:a8:4d:1f:9c:67:82:
fe:84:d6:84:9d:48:bf:4c:78:2a:cd:ce:e3:ee:3f:
d4:e3:86:62:b5:0d:a4:ae:aa:b6:7f:33:62:f0:d6:
40:a6:b1:14:b5:99:9a:e0:e3:82:94:cb:39:71:fb:
d3:ef:18:9a:31:5c:e6:ae:45:0d:f2:88:ae:32:14:
19:bf:cf:c5:f8:74:d2:72:bd:02:cd:19:5b:8b:5e:
36:80:d1:6d:fd:94:71:9d:8d:16:f3:a3:e8:1b:56:
5d:af:d4:a5:9f:27:be:50:b5:34:0d:a9:6e:de:ed:
c1:88:56:5d:09:a2:5e:b0:f1:d6:5a:c4:6f:04:66:
0e:35:81:7d:99:21:eb:f9:4a:07:6a:cf:5d:04:38:
3e:b6:ee:cc:36:0b:c3:11:f5:31:4d:2c:4b:f3:9a:
64:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:24:66:17:F3:FE:71:9B:B2:89:65:71:07:BB:84:1A:E1:15:35:35
X509v3 Authority Key Identifier:
keyid:1C:2F:90:CD:3F:51:B8:AC:D0:02:10:E3:57:DE:9A:81:CB:45:D1:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:e5:09:17:04:c9:c4:a2:5f:ac:1d:f6:37:73:d6:ab:e4:85:
70:fc:c0:e4:d5:8c:31:b2:03:e2:7a:4e:e3:95:6b:f6:cc:85:
97:fe:f6:d2:f3:e2:2c:1d:36:12:6d:5b:c7:ce:bc:1a:fa:b1:
27:c1:05:9a:9d:90:62:b5:b0:9e:83:fb:a7:70:88:7d:ef:2c:
81:0c:f0:3b:0f:f2:2b:fa:66:08:99:74:91:14:2a:b5:0f:dc:
25:d4:ff:87:b4:dc:5d:4a:14:e9:0e:97:85:15:92:ee:6e:60:
b2:fb:67:0d:78:fc:87:26:70:f6:ea:0c:d5:45:82:93:23:31:
f2:b9:0f:7a:d8:83:0b:42:15:8e:3b:9c:21:ec:48:8f:8b:d6:
3c:20:3e:52:09:50:42:93:08:2c:35:d3:5e:4e:58:e5:78:9f:
e6:0b:3f:33:b7:63:e1:f6:3a:2e:e3:12:c2:b6:c5:49:9d:3f:
63:c5:11:15:86:17:bd:98:45:65:cd:57:3d:38:19:2d:5e:12:
62:a2:de:bc:cf:f2:ab:83:8d:b0:76:f7:db:3e:20:da:60:93:
e9:eb:12:ec:2a:b3:1c:79:13:15:da:bb:bc:62:af:b5:98:5a:
73:b3:5b:10:7d:96:02:96:41:02:3d:b6:bb:2b:a1:1b:8d:c2:
ab:f1:89:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:35:01 2026 by rpki-client