
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.mft
File: hqZPKtLd4rfZYk5pInrQmxd4xsE.mft (raw, json)
Hash identifier: q6rC6tNkSw198ivDTL0gPW7Quh0yj/iODqxj7xCfer0=
Subject key identifier: CC:6E:34:1C:A8:F0:58:B3:A6:DE:0A:53:C3:4B:FF:99:86:3B:3C:89
Authority key identifier: 86:A6:4F:2A:D2:DD:E2:B7:D9:62:4E:69:22:7A:D0:9B:17:78:C6:C1
Certificate issuer: /CN=A9169A3F/serialNumber=86A64F2AD2DDE2B7D9624E69227AD09B1778C6C1
Certificate serial: F4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hqZPKtLd4rfZYk5pInrQmxd4xsE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.mft
Manifest number: F4
Signing time: Sun 01 Mar 2026 07:23:07 +0000
Manifest this update: Sun 01 Mar 2026 07:23:07 +0000
Manifest next update: Sun 08 Mar 2026 07:23:07 +0000
Files and hashes: 1: hqZPKtLd4rfZYk5pInrQmxd4xsE.crl (hash: iMeekom3dlAQx0MlFBBlsZ6giXrB9oUOJNjzZ9vHRaY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.crl
rsync://rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hqZPKtLd4rfZYk5pInrQmxd4xsE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:23:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 244 (0xf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169A3F, serialNumber=86A64F2AD2DDE2B7D9624E69227AD09B1778C6C1
Validity
Not Before: Mar 1 07:23:07 2026 GMT
Not After : Mar 8 07:23:07 2026 GMT
Subject: CN=69a3e95b-b451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c3:d9:e9:b0:9a:0d:ab:5b:75:00:6a:29:4d:
62:0b:6a:0b:8e:d1:6c:aa:5b:9b:29:19:81:e5:5a:
cf:d5:b2:e6:49:2d:7f:43:7c:ed:22:2b:63:a1:10:
67:fd:7b:01:85:ff:f7:05:b0:0f:5d:78:c3:55:7a:
e5:24:e5:6a:c2:e8:79:55:6e:64:96:76:07:45:0d:
24:57:3d:9d:6e:46:44:2f:ed:81:b1:f9:3b:60:7f:
ea:9a:26:82:d8:b0:8e:78:9d:a3:0a:aa:88:0a:89:
15:f7:37:68:83:9c:8a:96:ff:4d:50:3e:bf:11:43:
7e:ac:50:d1:4f:05:d9:1f:22:e9:11:4d:d0:d8:17:
9a:d3:d8:50:82:bf:b9:8e:f4:9c:c8:03:61:bd:92:
85:a6:d7:16:3e:92:ae:82:5e:e3:2c:40:88:2a:04:
17:8f:b4:27:02:3b:11:a7:73:c4:fa:22:2a:10:b8:
aa:55:36:e0:4b:4a:cd:76:f5:ad:6a:e9:19:7f:f0:
c9:1f:95:70:2f:c6:87:56:bb:cb:64:55:85:ef:25:
c1:06:7d:e8:b4:11:76:d3:a8:d2:de:aa:75:31:a6:
2c:da:c4:ed:72:3f:d5:d3:ee:25:0e:9a:6a:87:7b:
50:a5:8a:d4:f0:a3:f7:2d:72:c2:88:b9:07:5f:2f:
4a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:6E:34:1C:A8:F0:58:B3:A6:DE:0A:53:C3:4B:FF:99:86:3B:3C:89
X509v3 Authority Key Identifier:
keyid:86:A6:4F:2A:D2:DD:E2:B7:D9:62:4E:69:22:7A:D0:9B:17:78:C6:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hqZPKtLd4rfZYk5pInrQmxd4xsE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:bb:11:9b:e4:a9:ee:3f:4c:02:1a:ac:a9:0b:f9:02:4a:6b:
e2:d2:22:10:3f:fb:57:00:7a:7a:45:e7:65:89:33:60:f0:fc:
e5:09:e0:7c:c8:e1:d6:f6:aa:5e:2b:a9:93:cd:9e:8c:92:9e:
f6:14:62:fb:40:90:78:82:83:f4:ea:54:3d:67:14:87:fc:7d:
10:d0:44:5c:44:87:0c:7e:c8:41:00:26:e9:c6:93:a7:5a:cf:
ab:b9:8a:17:42:59:c6:50:a7:10:49:36:2e:2d:90:48:20:76:
51:a6:11:16:f7:2b:17:ac:55:c8:30:79:04:e9:6a:a2:9c:4d:
7d:3d:48:07:60:5e:87:9c:ca:57:a7:63:fd:ae:f5:38:98:29:
16:94:25:af:05:78:5a:06:f3:01:d9:eb:d4:b6:8c:09:06:0e:
5e:c5:c7:ca:c7:ad:32:92:9f:a9:b8:0e:ce:34:e4:eb:35:57:
e2:34:48:94:2a:c4:41:34:df:28:f3:94:94:72:6b:a0:d9:b5:
f8:a8:55:c8:c0:b0:0f:4a:66:f9:4a:54:db:1b:2d:3d:a9:ca:
30:cf:e4:b0:0a:98:b7:d3:59:d7:de:45:5e:43:2e:0a:04:b4:
67:58:2d:6e:34:94:cd:b5:8b:d9:67:29:7f:54:57:0b:94:cd:
2b:3a:64:7f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjlBM0YxMTAvBgNVBAUTKDg2QTY0RjJBRDJEREUyQjdEOTYyNEU2OTIyN0FEMDlC
MTc3OEM2QzEwHhcNMjYwMzAxMDcyMzA3WhcNMjYwMzA4MDcyMzA3WjAYMRYwFAYD
VQQDEw02OWEzZTk1Yi1iNDUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq8PZ6bCaDatbdQBqKU1iC2oLjtFsqlubKRmB5VrP1bLmSS1/Q3ztIitjoRBn
/XsBhf/3BbAPXXjDVXrlJOVqwuh5VW5klnYHRQ0kVz2dbkZEL+2Bsfk7YH/qmiaC
2LCOeJ2jCqqICokV9zdog5yKlv9NUD6/EUN+rFDRTwXZHyLpEU3Q2Bea09hQgr+5
jvScyANhvZKFptcWPpKugl7jLECIKgQXj7QnAjsRp3PE+iIqELiqVTbgS0rNdvWt
aukZf/DJH5VwL8aHVrvLZFWF7yXBBn3otBF206jS3qp1MaYs2sTtcj/V0+4lDppq
h3tQpYrU8KP3LXLCiLkHXy9KlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMxuNByo
8Fizpt4KU8NL/5mGOzyJMB8GA1UdIwQYMBaAFIamTyrS3eK32WJOaSJ60JsXeMbB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUEzRi85QjI3NTRGNkEy
NEYxMUVGQjZCMEZGNDlDNEY5QUUwMi9ocVpQS3RMZDRyZlpZazVwSW5yUW14ZDR4
c0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2hxWlBLdExkNHJmWllrNXBJbnJRbXhkNHhzRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
OUEzRi85QjI3NTRGNkEyNEYxMUVGQjZCMEZGNDlDNEY5QUUwMi9ocVpQS3RMZDRy
ZlpZazVwSW5yUW14ZDR4c0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMrsRm+Sp7j9MAhqsqQv5Akpr4tIiED/7VwB6ekXnZYkzYPD85QngfMjh1vaq
Xiupk82ejJKe9hRi+0CQeIKD9OpUPWcUh/x9ENBEXESHDH7IQQAm6caTp1rPq7mK
F0JZxlCnEEk2Li2QSCB2UaYRFvcrF6xVyDB5BOlqopxNfT1IB2Beh5zKV6dj/a71
OJgpFpQlrwV4WgbzAdnr1LaMCQYOXsXHysetMpKfqbgOzjTk6zVX4jRIlCrEQTTf
KPOUlHJroNm1+KhVyMCwD0pm+UpU2xstPanKMM/ksAqYt9NZ195FXkMuCgS0Z1gt
bjSUzbWL2Wcpf1RXC5TNKzpkfw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:48:37 2026 by rpki-client