
$ rpki-client -vvf rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.mft
File: hitzuc41BLC6JB0U_awOxLTkrcI.mft (raw, json)
Hash identifier: DSmiJ/Kg3tvcfzs07KeHyLMZPVT8xEUkI0VEnftBASI=
Subject key identifier: 4A:D8:75:48:92:11:27:D9:3B:52:E0:7C:D8:3C:FD:ED:28:F1:49:E6
Authority key identifier: 86:2B:73:B9:CE:35:04:B0:BA:24:1D:14:FD:AC:0E:C4:B4:E4:AD:C2
Certificate issuer: /CN=A915CCEA/serialNumber=862B73B9CE3504B0BA241D14FDAC0EC4B4E4ADC2
Certificate serial: 09F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hitzuc41BLC6JB0U_awOxLTkrcI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.mft
Manifest number: 09DE
Signing time: Thu 16 Apr 2026 19:49:02 +0000
Manifest this update: Thu 16 Apr 2026 19:49:02 +0000
Manifest next update: Thu 23 Apr 2026 19:49:02 +0000
Files and hashes: 1: hitzuc41BLC6JB0U_awOxLTkrcI.crl (hash: Gvp6nXAcnrdOoBPQUivZzBE9kqQVFg77yKjcm7jPSuQ=)
2: 70FED13CCEF611ED9DDE0A39C4F9AE02.roa (hash: 6M5Mg9C116unCx1h9rVUgS55hFW2He6mLEZ0NRGWeB0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.crl
rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hitzuc41BLC6JB0U_awOxLTkrcI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:49:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2547 (0x9f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915CCEA, serialNumber=862B73B9CE3504B0BA241D14FDAC0EC4B4E4ADC2
Validity
Not Before: Apr 16 19:49:02 2026 GMT
Not After : Apr 23 19:49:02 2026 GMT
Subject: CN=69e13d2e-8573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:49:67:36:1b:11:a3:94:1a:47:de:4e:a5:e9:
eb:ea:c4:15:34:e0:96:99:41:78:2d:07:ca:d0:31:
36:18:f7:48:4a:3f:f5:7c:5a:86:d4:b6:ea:dd:b0:
4e:c5:89:b8:92:86:57:86:6f:76:ff:c9:e7:1d:f2:
37:e9:79:d0:21:a5:b6:8c:52:80:90:91:90:2d:f9:
a0:fe:06:df:cb:f2:10:7d:ce:fb:89:f8:be:5c:c7:
e9:fd:67:19:74:1c:91:29:16:36:eb:ca:40:79:27:
45:c2:dd:80:c7:85:25:80:f7:51:4e:7b:26:37:41:
b5:4c:df:d9:65:ab:7e:64:23:f9:67:e7:cc:4a:9d:
df:99:c5:ce:13:20:de:af:40:ac:bc:15:b5:f8:89:
ff:65:b4:2a:a3:d2:64:29:79:d4:1f:38:91:be:90:
39:d0:f0:8d:1b:f8:9e:7e:fc:70:86:36:c4:32:23:
5b:f3:65:31:44:1b:99:0f:07:40:06:e9:6e:29:68:
b4:93:13:8b:28:3f:e3:34:c1:5f:b9:8a:74:62:8a:
4e:11:5e:58:c7:3b:19:7f:f7:3f:f9:fa:4f:66:03:
85:eb:43:bd:58:13:ce:0d:f0:fc:30:66:b0:b0:11:
61:c2:39:c7:b5:90:8e:b2:41:72:83:66:06:ba:c0:
2f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D8:75:48:92:11:27:D9:3B:52:E0:7C:D8:3C:FD:ED:28:F1:49:E6
X509v3 Authority Key Identifier:
keyid:86:2B:73:B9:CE:35:04:B0:BA:24:1D:14:FD:AC:0E:C4:B4:E4:AD:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hitzuc41BLC6JB0U_awOxLTkrcI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:f7:9b:2d:c5:e7:9a:1d:fa:c8:9a:b6:89:9f:db:7e:09:ab:
0b:ef:e8:19:75:86:bd:2e:19:b3:cb:20:10:a7:21:0a:f5:bd:
13:cf:7e:a5:6c:16:f3:e8:15:9e:90:8d:db:bd:fe:09:49:c7:
69:3a:c6:b7:ed:0f:01:1c:ea:61:bb:8e:de:e9:10:7d:60:79:
fa:3a:a9:c2:5c:02:cf:20:2d:34:8e:c2:4f:f3:35:ab:cf:ba:
1a:59:63:ab:52:f0:b9:68:2f:76:2f:12:1b:db:18:f5:ae:1f:
85:53:65:b6:ab:79:fe:d3:e2:39:45:c6:55:1a:fa:67:b2:97:
15:61:32:41:f0:97:20:f7:1e:b5:fb:db:46:e2:8f:48:37:6b:
db:56:f2:22:f9:31:64:8c:ab:4d:1d:5d:f6:26:9e:73:de:68:
f6:3e:bc:7d:78:3e:b6:d0:50:76:35:5e:e3:52:9e:ca:3d:a9:
fe:ab:53:97:d6:b2:38:78:97:25:7f:7d:96:6a:19:a3:1f:04:
2e:c1:df:c4:7c:77:d8:15:70:f9:41:c1:e8:dd:cf:c5:11:80:
71:27:16:93:d2:b1:4b:76:82:d8:1e:ed:86:cb:01:be:c8:03:
31:08:60:aa:62:00:d0:da:a5:61:3c:a4:91:14:2d:5a:1e:05:
f4:97:bd:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:56:18 2026 by rpki-client