
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft
File: hobJK4fdXdLuKrtA7HPxePYEWjQ.mft (raw, json)
Hash identifier: n28MWjnJ7fShvomjYRtUpdvCf7husZvTS4ppxOWU6HI=
Subject key identifier: B8:64:CC:1D:32:D8:4D:02:B2:5B:70:04:95:61:93:DB:22:D4:AB:A9
Authority key identifier: 86:86:C9:2B:87:DD:5D:D2:EE:2A:BB:40:EC:73:F1:78:F6:04:5A:34
Certificate issuer: /CN=A9165DB1/serialNumber=8686C92B87DD5DD2EE2ABB40EC73F178F6045A34
Certificate serial: 0305
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft
Manifest number: 0301
Signing time: Sun 01 Mar 2026 02:04:41 +0000
Manifest this update: Sun 01 Mar 2026 02:04:41 +0000
Manifest next update: Sun 08 Mar 2026 02:04:41 +0000
Files and hashes: 1: hobJK4fdXdLuKrtA7HPxePYEWjQ.crl (hash: mBQvv70o6bDUe6ynB78a0UQamU5gh9bA+yebbSGMN/Y=)
2: 7CA593102A2811F0819D8C13C4F9AE02.roa (hash: Ia6tlVbLIeqz/TCnxF60wA233bLpbVn+2ya+t4NGuKY=)
3: 7D164B822A2811F0819D8C13C4F9AE02.roa (hash: ev+YjLUEFuV9synNnilJkgFER39S40N1zyX1CzULmag=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.crl
rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 02:04:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 773 (0x305)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165DB1, serialNumber=8686C92B87DD5DD2EE2ABB40EC73F178F6045A34
Validity
Not Before: Mar 1 02:04:41 2026 GMT
Not After : Mar 8 02:04:41 2026 GMT
Subject: CN=69a39eb9-e031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:78:2c:54:82:5a:6a:e4:e4:78:41:c7:83:95:
81:a4:15:71:dc:d2:09:42:87:52:5e:3c:09:24:d5:
01:fd:7a:66:e0:8e:66:65:8a:96:b4:e3:80:2e:6b:
53:97:5e:0c:75:87:88:68:3c:dd:fd:f9:a5:c3:6b:
37:e4:53:be:02:7b:ba:5f:d8:0c:07:69:6f:40:07:
ff:f8:8a:50:3f:ab:33:8a:ed:35:8e:0c:e7:a1:21:
43:83:91:23:a3:6a:e2:ec:c3:4a:d9:91:33:77:04:
fa:b5:47:fc:08:04:c4:90:78:3c:c7:86:93:20:9a:
12:e9:08:82:d4:b2:3f:5a:9b:40:87:5a:bd:4a:80:
60:cb:f0:d9:f6:7c:c2:83:be:8e:82:9f:8a:72:97:
9e:ce:81:06:03:65:e0:55:2b:9f:83:80:04:de:02:
10:8b:c3:3c:a8:b5:ad:25:cf:6a:63:44:d6:a0:5e:
dc:88:5f:d9:6a:18:98:31:31:0e:d7:0a:34:bb:19:
67:95:22:9e:34:93:42:9e:70:84:7d:df:7b:5d:81:
69:de:e2:cf:58:a8:f4:2f:e4:88:fe:94:35:00:03:
f6:96:f0:30:37:94:84:8a:fb:09:cd:6b:9d:92:35:
d9:65:38:f1:9c:24:89:4e:cd:9c:cf:0d:4c:f7:63:
6f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:64:CC:1D:32:D8:4D:02:B2:5B:70:04:95:61:93:DB:22:D4:AB:A9
X509v3 Authority Key Identifier:
keyid:86:86:C9:2B:87:DD:5D:D2:EE:2A:BB:40:EC:73:F1:78:F6:04:5A:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:e8:97:65:73:e0:d7:6b:a3:b8:93:04:d0:d6:79:94:24:8c:
1d:ab:44:4f:92:aa:98:02:04:62:8a:33:8b:36:4b:32:40:db:
9c:2e:e9:18:1a:bd:14:9d:b7:51:15:30:1a:d5:b4:d8:ea:97:
d9:16:21:9f:ad:5d:33:3d:62:f5:da:68:e2:3b:fd:48:aa:f4:
63:fc:fc:56:b4:84:60:87:72:33:f9:11:06:ed:f9:3c:83:d3:
e4:42:2c:61:d1:65:40:a4:1e:1d:fb:e9:6c:dd:a6:17:7b:9a:
12:61:4d:ff:14:aa:2b:7a:fe:c0:74:c0:62:d8:a6:cf:ae:9a:
be:c7:ab:00:bf:8b:64:ed:39:8b:b2:f9:06:c1:97:5d:23:10:
67:74:6e:c6:d8:4e:f4:b2:5f:e9:e0:b5:00:8b:a2:80:d7:de:
b7:bd:a2:65:95:57:d1:89:28:c0:61:40:91:da:92:15:d9:7f:
5d:28:1b:0a:8f:7d:e1:43:01:3c:7a:26:8a:76:91:7e:a9:ab:
33:20:36:99:9e:dd:a1:27:a0:fd:4b:a8:b1:3f:98:45:19:2b:
a5:93:56:df:b2:33:ad:9e:93:1d:07:29:46:82:07:5a:17:ac:
0d:21:aa:71:a9:b0:9d:c0:64:a9:bb:6f:c9:06:e1:c4:f0:bd:
02:1f:ef:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:57:36 2026 by rpki-client