
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.mft
File: HgeR690MlMNWujc9fg8BYQPUC5I.mft (raw, json)
Hash identifier: +2CBvQlKMzpGNLUNAgxI4nJf9iUkuYGsGpweDPGA2nc=
Subject key identifier: 3E:0E:7D:09:7D:C5:CA:AF:3B:74:EA:ED:84:E1:20:F5:90:F5:E4:15
Authority key identifier: 1E:07:91:EB:DD:0C:94:C3:56:BA:37:3D:7E:0F:01:61:03:D4:0B:92
Certificate issuer: /CN=A916D07E/serialNumber=1E0791EBDD0C94C356BA373D7E0F016103D40B92
Certificate serial: C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgeR690MlMNWujc9fg8BYQPUC5I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.mft
Manifest number: C3
Signing time: Fri 17 Apr 2026 06:39:33 +0000
Manifest this update: Fri 17 Apr 2026 06:39:32 +0000
Manifest next update: Fri 24 Apr 2026 06:39:32 +0000
Files and hashes: 1: HgeR690MlMNWujc9fg8BYQPUC5I.crl (hash: NjaIIsX3k0Pph2rc3oIDUfvlSaeQOQDApF9TtkQFXn4=)
2: 6014E88A257E11F08DB64644C4F9AE02.roa (hash: F8P/YIAmPajfOLRCSw3O/MamJ0JWaY6aJY2xYJin4yE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.crl
rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgeR690MlMNWujc9fg8BYQPUC5I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:39:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 199 (0xc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D07E, serialNumber=1E0791EBDD0C94C356BA373D7E0F016103D40B92
Validity
Not Before: Apr 17 06:39:32 2026 GMT
Not After : Apr 24 06:39:32 2026 GMT
Subject: CN=69e1d5a5-6452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:32:7a:44:05:ae:c1:eb:6d:c2:3c:c6:bc:cc:
6c:ce:ea:cb:5d:2c:d9:c1:f9:57:5e:d3:28:18:e2:
fd:17:7f:68:a4:1c:f7:ae:51:bf:80:aa:91:52:fb:
2a:ed:b8:04:15:75:3b:15:b3:2b:72:d9:13:99:d9:
7a:6c:84:80:13:3b:80:82:37:27:8c:ee:a6:f3:e5:
a4:e8:0e:e8:d4:9c:51:cc:bf:77:f9:e6:91:4a:c3:
54:3b:6e:bc:ed:9b:af:81:1e:ab:06:68:6d:cf:5f:
55:8a:82:63:20:24:96:c2:ee:a7:72:47:e2:4f:e2:
bb:d1:ba:e9:92:94:a3:c3:6f:7c:fe:f8:86:93:9b:
be:a1:b4:3c:f8:4a:a0:1d:01:af:c1:23:29:52:7c:
c5:58:db:e5:ba:f2:13:82:32:e6:8c:ee:48:67:cd:
3e:81:61:36:f3:dd:31:11:33:3c:f4:b4:79:29:12:
08:78:df:8c:07:77:47:e6:c9:c1:b4:e0:12:3f:7d:
b3:cb:61:e7:95:02:35:01:1c:52:dc:09:69:d2:97:
1e:28:f2:b5:d8:ed:c4:b9:31:3f:25:5a:cf:a3:59:
e1:a8:4b:71:c2:30:72:81:b1:50:57:ad:d0:cc:ac:
89:39:4a:38:f3:d8:4f:f7:33:45:8d:2e:ea:cf:34:
17:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:0E:7D:09:7D:C5:CA:AF:3B:74:EA:ED:84:E1:20:F5:90:F5:E4:15
X509v3 Authority Key Identifier:
keyid:1E:07:91:EB:DD:0C:94:C3:56:BA:37:3D:7E:0F:01:61:03:D4:0B:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgeR690MlMNWujc9fg8BYQPUC5I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cf:1f:11:e8:8a:a4:d1:17:18:05:e2:78:dd:0a:03:ea:cb:2a:
aa:bf:6b:4f:1c:46:1e:58:5b:75:88:8f:7e:55:48:30:b1:02:
d9:69:e7:4e:4f:41:d9:97:d3:ab:cf:c7:d2:ba:f6:8c:a0:43:
08:fd:f6:50:57:5b:61:da:d7:09:bb:4c:de:42:2a:a7:fc:ca:
69:68:31:55:97:44:e8:7b:e7:6d:0c:25:42:85:f4:a7:e7:b9:
de:d8:e8:39:b4:51:9e:71:6c:f9:96:4f:3e:24:36:b6:07:5e:
3a:eb:12:17:60:5e:9b:a6:07:02:f0:eb:23:72:67:a5:e6:8e:
3d:d2:2f:dc:d3:91:b3:18:27:1a:54:e3:79:20:b5:6f:a8:a1:
c3:17:2a:41:4b:08:37:f7:38:b2:0b:99:d7:13:84:c7:5c:1b:
de:cb:7f:cb:52:f2:ea:45:38:21:45:bd:db:3b:28:76:e6:88:
a9:e9:4d:75:3d:71:76:cc:e4:09:de:ff:6b:c5:d5:e5:18:a3:
87:51:55:f3:3d:e8:a5:1a:ab:cd:63:50:b9:bb:4d:4a:bb:20:
26:c9:7f:9f:da:1d:13:f9:50:cb:80:cf:9c:78:62:b0:c4:4e:
da:e2:55:4f:ad:cc:95:96:cf:1a:22:de:77:9d:94:20:7b:ae:
a4:f5:6b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:05:58 2026 by rpki-client