
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.mft
File: hitzuc41BLC6JB0U_awOxLTkrcI.mft (raw, json)
Hash identifier: VM94Dp1gW8uVgVjm5D57l9uLRgfE/Hy6PjW713LeA4s=
Subject key identifier: C1:9F:FB:07:39:5A:47:05:EB:E9:EA:13:8B:D1:27:18:0B:B2:87:92
Authority key identifier: 86:2B:73:B9:CE:35:04:B0:BA:24:1D:14:FD:AC:0E:C4:B4:E4:AD:C2
Certificate issuer: /CN=A915CCEA/serialNumber=862B73B9CE3504B0BA241D14FDAC0EC4B4E4ADC2
Certificate serial: 0A58
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hitzuc41BLC6JB0U_awOxLTkrcI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.mft
Manifest number: 0A39
Signing time: Tue 22 Sep 2026 19:34:04 +0000
Manifest this update: Tue 22 Sep 2026 19:34:04 +0000
Manifest next update: Tue 29 Sep 2026 19:34:04 +0000
Files and hashes: 1: hitzuc41BLC6JB0U_awOxLTkrcI.crl (hash: g/ssxiLgSE57O/p4qKlfc605Q+mC2vYVnvbZnhLcIm8=)
2: FA57B70A706F11F1A66ABD9E76A30FBC.roa (hash: 5UlaJz5G/bidOHbT2NbkpzH8+pUHMJEGRJQ4pdfZDCc=)
3: 4D0CE5E2707011F1821CCDE576A30FBC.roa (hash: k8rAQNqq8sWrzsdiI+Wr1tNTCkuJZjz1VkVrhy0zp1g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.crl
rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hitzuc41BLC6JB0U_awOxLTkrcI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 19:34:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2648 (0xa58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915CCEA, serialNumber=862B73B9CE3504B0BA241D14FDAC0EC4B4E4ADC2
Validity
Not Before: Sep 22 19:34:04 2026 GMT
Not After : Sep 29 19:34:04 2026 GMT
Subject: CN=6ab2d82c-27d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6e:0a:2e:e3:4a:cf:6b:f7:84:4e:e9:ae:7c:
c0:28:b5:01:c5:ca:ea:6e:9f:c1:14:e2:2c:b6:4d:
e4:5c:32:b6:3a:17:c4:29:d5:1b:d0:29:1b:81:09:
c7:c0:f9:fe:dc:75:38:47:22:e6:bc:6e:5b:2c:29:
b4:b2:a4:72:53:44:3a:82:fb:09:e4:fc:82:2a:5c:
a1:dd:45:c5:14:f6:91:0b:1b:26:f5:12:7f:22:5b:
64:d6:de:24:3d:0a:5d:7b:aa:d5:f8:71:14:42:bf:
d7:c0:0a:9f:b8:ef:c6:9e:72:5f:80:f5:c3:25:91:
03:a5:b8:8e:01:b1:6e:82:9e:85:e8:45:d3:e8:e1:
08:11:5e:28:40:c1:14:d9:c3:30:71:6c:8b:c2:bd:
30:19:61:48:43:4f:88:74:8f:11:00:29:14:c5:7e:
6b:ec:62:ee:b9:78:64:6f:61:a1:7d:d9:c7:12:e9:
f0:29:9c:70:eb:b6:37:ee:4a:bd:d5:92:b6:e3:cd:
53:16:67:9a:42:9f:8e:b6:58:ba:55:c3:39:17:a5:
44:e4:4c:4c:d2:c4:0d:34:13:5a:ff:e5:f4:88:9a:
a5:2b:83:97:7d:37:dc:bb:67:81:89:7e:c6:1c:36:
b8:2d:f7:bd:2f:5f:e2:d5:3c:a7:78:de:2f:80:be:
ce:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:9F:FB:07:39:5A:47:05:EB:E9:EA:13:8B:D1:27:18:0B:B2:87:92
X509v3 Authority Key Identifier:
keyid:86:2B:73:B9:CE:35:04:B0:BA:24:1D:14:FD:AC:0E:C4:B4:E4:AD:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hitzuc41BLC6JB0U_awOxLTkrcI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:7a:b5:b7:03:b1:82:91:e7:fd:ec:4b:c1:00:9d:7c:17:e5:
fe:7d:21:43:50:48:51:38:a0:c3:8a:fe:b4:f7:d4:d5:a4:c1:
50:b3:13:45:be:79:03:06:bb:dc:d3:f1:ac:a7:04:36:f6:7b:
0c:be:ea:2b:8f:02:f4:e4:b7:89:f6:97:d1:c8:b4:98:08:38:
52:ca:23:4c:9d:6f:4e:90:1b:5e:2f:0d:45:da:e3:42:03:cb:
94:23:37:21:95:f2:ef:2a:76:35:ea:54:3f:46:d2:0c:af:61:
68:85:ef:a0:10:9d:1e:8f:c3:4d:01:b3:04:6a:5d:ce:c1:1f:
63:f1:33:22:c5:b9:25:fb:3b:ba:2d:e2:c0:d3:ce:d5:a3:cf:
46:22:21:35:1b:ad:9a:d6:8f:ad:91:fe:81:cd:da:a5:33:35:
b9:a7:af:45:be:a3:3a:44:25:d2:f8:cf:7d:fc:60:00:8b:8d:
f7:a4:cc:b4:26:fa:37:dd:be:11:a8:96:a6:10:b4:38:1d:0e:
12:5a:52:bf:4d:81:94:02:52:0a:1a:6f:f7:88:b7:77:79:1d:
ad:9c:34:4c:0f:06:3b:68:c2:b9:01:ac:4a:3e:cf:db:01:6f:
ce:c5:84:cf:34:9c:09:8a:c6:e4:9b:99:02:7c:1b:d9:12:45:
43:a9:bb:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:01:28 2026 by rpki-client