
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.mft
File: hctAGQp33J5olNhX9zu3qQ4JdOQ.mft (raw, json)
Hash identifier: QCqoQbDjz1+npCGLPOQJt+wjnjrcSoj+eAABdrhDbT8=
Subject key identifier: DA:11:1E:92:FD:AA:1F:B5:5C:9D:53:83:CA:12:25:30:88:F6:3E:7E
Authority key identifier: 85:CB:40:19:0A:77:DC:9E:68:94:D8:57:F7:3B:B7:A9:0E:09:74:E4
Certificate issuer: /CN=A9169BB4/serialNumber=85CB40190A77DC9E6894D857F73BB7A90E0974E4
Certificate serial: 0606
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hctAGQp33J5olNhX9zu3qQ4JdOQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.mft
Manifest number: 05F6
Signing time: Sun 01 Mar 2026 23:37:04 +0000
Manifest this update: Sun 01 Mar 2026 23:37:03 +0000
Manifest next update: Sun 08 Mar 2026 23:37:03 +0000
Files and hashes: 1: hctAGQp33J5olNhX9zu3qQ4JdOQ.crl (hash: C0gFXI4e+k4izSWx+0o5Jtr7i9RBWozNdRLj8aOC6L0=)
2: 7FCFB4745E8411EE89DF693EC4F9AE02.roa (hash: eopWrcCTKAsMxcnNdOCRso+7nTOlyhMbbG0+6DVN/mA=)
3: FD9A4AA0E53111EBAB62446EC4F9AE02.roa (hash: aXUNgdPZaRVWUWRyzVl3gVNo/2yllW0aODydzNYrLyQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.crl
rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hctAGQp33J5olNhX9zu3qQ4JdOQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:37:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1542 (0x606)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169BB4, serialNumber=85CB40190A77DC9E6894D857F73BB7A90E0974E4
Validity
Not Before: Mar 1 23:37:03 2026 GMT
Not After : Mar 8 23:37:03 2026 GMT
Subject: CN=69a4cda0-9d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:78:ff:75:1f:fe:ae:1b:a5:7f:db:12:f1:c6:
bc:b2:cd:e5:f8:3c:b2:42:5a:3b:a9:d7:0f:f4:44:
50:fe:15:1e:32:fb:52:0d:6f:e4:70:a7:bb:72:88:
d1:84:02:63:53:2a:7a:d8:8a:e2:f5:33:2e:6a:37:
2b:f6:06:1a:23:a2:8c:c1:0d:f5:09:08:a8:dc:ff:
e0:69:2c:8e:13:02:78:a3:77:2c:b8:bb:85:2a:db:
3e:70:4f:38:5c:b3:80:e0:65:4f:6b:83:fb:75:e7:
b1:8c:97:b4:b7:78:b9:c6:83:de:c0:16:03:2d:e2:
19:6d:34:d9:1b:15:ec:c0:09:8f:c5:6e:05:81:5f:
85:df:a3:7e:70:c3:72:ce:f7:d2:c2:2d:ba:fb:f4:
ad:d3:1e:0a:9d:63:5d:f0:61:87:73:d3:b1:07:f1:
53:ac:42:49:a5:ef:14:31:be:c6:81:df:d4:98:be:
ef:b0:3b:fc:cb:48:9a:61:d5:bf:03:43:eb:52:55:
5f:b9:8f:f0:df:66:68:24:d1:28:ee:fb:7e:45:6b:
8b:6c:74:13:bf:f7:41:04:e1:94:4d:a0:d4:a5:1a:
6f:00:67:4f:62:cc:cf:9e:f9:7a:06:bf:d5:23:ab:
bd:71:0d:b0:d1:2a:4b:81:37:71:2e:b7:18:5d:41:
9f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:11:1E:92:FD:AA:1F:B5:5C:9D:53:83:CA:12:25:30:88:F6:3E:7E
X509v3 Authority Key Identifier:
keyid:85:CB:40:19:0A:77:DC:9E:68:94:D8:57:F7:3B:B7:A9:0E:09:74:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hctAGQp33J5olNhX9zu3qQ4JdOQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:be:95:69:96:0f:d3:28:02:ae:d2:19:bf:1d:bf:48:9c:0c:
31:ad:67:f7:3c:ed:15:7b:62:d5:be:9c:75:91:05:7f:3c:6c:
4e:46:94:f5:58:8b:68:2a:03:89:1d:cf:e1:d9:c9:a1:cd:a7:
bc:f1:cb:b7:10:1e:64:50:9a:95:ec:18:2e:b5:2a:10:8a:f2:
30:44:2d:6d:4a:0e:32:f7:57:0c:0d:5d:d0:5c:28:39:9b:0b:
6b:22:19:59:05:71:db:95:2f:74:c2:5f:45:b9:59:9c:5a:b4:
ea:21:87:cf:4e:7c:0c:75:d9:85:60:0c:67:41:5e:9e:ad:6e:
5d:91:bc:92:18:69:af:9f:ae:b1:f9:2c:55:d8:a3:37:bc:07:
40:9c:4c:09:49:46:42:90:c8:b3:72:49:e7:55:82:ad:7f:3e:
da:cb:23:af:10:08:1a:d3:4a:e2:74:2d:18:c7:4f:2f:4b:4b:
d6:ae:63:0a:b8:3f:6f:11:cd:fd:15:5d:d6:54:a9:76:53:e5:
01:e9:67:8b:8a:e8:c3:8d:b0:e6:ca:96:18:24:db:d5:d3:2d:
7f:3b:f8:84:b9:04:1c:68:82:75:fb:c5:f4:7f:91:ee:09:b5:
a0:9d:f6:23:bb:f3:98:5d:a4:a6:89:bc:a8:37:4f:a9:d1:d4:
6d:5f:c6:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:09:22 2026 by rpki-client