
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.mft
File: HgeR690MlMNWujc9fg8BYQPUC5I.mft (raw, json)
Hash identifier: HlsnF3hY4p/Z9FUHzl3QfMuxMf3LQpWfahphyU3PBoQ=
Subject key identifier: 41:FB:B1:95:BF:C8:52:45:A9:3A:75:9E:BC:0B:8B:90:53:94:2B:C6
Authority key identifier: 1E:07:91:EB:DD:0C:94:C3:56:BA:37:3D:7E:0F:01:61:03:D4:0B:92
Certificate issuer: /CN=A916D07E/serialNumber=1E0791EBDD0C94C356BA373D7E0F016103D40B92
Certificate serial: AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgeR690MlMNWujc9fg8BYQPUC5I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.mft
Manifest number: AB
Signing time: Mon 02 Mar 2026 01:02:31 +0000
Manifest this update: Mon 02 Mar 2026 01:02:29 +0000
Manifest next update: Mon 09 Mar 2026 01:02:29 +0000
Files and hashes: 1: HgeR690MlMNWujc9fg8BYQPUC5I.crl (hash: V8YX/HcNP3LhU9qCAuz3tFEmrIJxyJf2T4NAbYCKxN0=)
2: 6014E88A257E11F08DB64644C4F9AE02.roa (hash: F8P/YIAmPajfOLRCSw3O/MamJ0JWaY6aJY2xYJin4yE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.crl
rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgeR690MlMNWujc9fg8BYQPUC5I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175 (0xaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D07E, serialNumber=1E0791EBDD0C94C356BA373D7E0F016103D40B92
Validity
Not Before: Mar 2 01:02:29 2026 GMT
Not After : Mar 9 01:02:29 2026 GMT
Subject: CN=69a4e1a6-5aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:46:7b:0f:10:95:60:39:56:ed:6f:40:44:a6:
11:16:fc:b0:ee:b8:91:b0:ce:7c:39:b3:03:7e:52:
2c:2b:72:da:eb:20:7d:a2:68:f1:d6:3b:45:dc:b3:
97:2e:80:c9:35:04:b6:cd:5b:31:16:b5:37:7d:dc:
99:c0:67:bb:3e:4e:22:2f:cb:ff:91:a4:22:48:cf:
a8:6b:b6:62:ca:99:e1:5c:d1:b5:f2:88:fe:79:fc:
36:b3:8b:a4:db:8e:0d:4b:74:c9:aa:3d:8f:26:81:
59:42:52:dc:98:72:39:88:dc:ba:31:d8:58:af:f1:
61:a9:1c:b2:2f:93:4a:2f:c3:87:9e:63:32:6c:5c:
2a:32:cd:46:b0:9c:d6:be:32:14:52:95:a0:c4:26:
30:98:b5:96:31:36:70:28:9f:42:1c:71:ff:29:52:
1f:6e:40:6d:9f:a0:27:56:83:80:a6:86:e1:64:0c:
6d:4b:ff:f2:5b:da:81:70:cc:b1:2b:9f:52:74:ee:
b1:83:6e:14:dc:66:7d:36:b2:53:ca:e7:e0:31:e7:
52:a0:70:38:57:01:e3:07:9e:71:38:3e:1b:c6:12:
08:d2:75:ff:8f:d0:9d:38:39:7d:e2:db:87:da:0a:
9c:d0:71:30:bb:69:41:37:03:ca:0c:32:c7:50:4b:
4d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:FB:B1:95:BF:C8:52:45:A9:3A:75:9E:BC:0B:8B:90:53:94:2B:C6
X509v3 Authority Key Identifier:
keyid:1E:07:91:EB:DD:0C:94:C3:56:BA:37:3D:7E:0F:01:61:03:D4:0B:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgeR690MlMNWujc9fg8BYQPUC5I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:d9:96:23:8a:e8:fa:71:04:39:73:04:b0:25:21:d3:41:f4:
3b:a5:7d:a6:81:9c:6f:19:50:a9:40:f8:55:c8:05:59:2a:15:
19:5d:85:f7:ce:3c:7e:30:98:b1:ea:92:6f:ec:45:d0:05:01:
a1:a7:b8:e5:e2:e5:c1:d0:83:a4:fd:5c:a9:9e:73:2d:34:a1:
2e:74:ef:47:ab:d6:92:94:f3:a2:7b:d8:27:1e:7e:bd:ad:4f:
15:8f:ec:3a:ef:10:72:8d:5c:7f:1f:f8:f3:8f:21:20:17:6f:
27:5c:49:70:21:e7:fd:63:28:b6:67:24:ed:db:b5:ef:cc:11:
69:3c:b1:0b:2c:8b:09:43:2a:1d:bd:e5:d2:ad:f8:5f:94:b7:
d4:4d:d7:26:1c:b3:7e:5f:e4:15:f1:15:ac:64:c8:e8:f0:e1:
9f:51:cd:18:29:22:13:b8:3d:6c:ae:31:e5:3d:2d:6c:85:06:
73:48:21:58:a7:bd:c3:f0:f0:02:cd:5f:99:80:5d:b8:fc:6a:
7c:e4:74:04:cc:0a:b5:83:ff:91:1d:95:5c:9e:57:ac:13:82:
21:73:bd:c2:69:31:99:bc:0f:ce:ff:c6:39:98:e1:31:b0:af:
e0:6b:91:80:c9:8f:22:fc:e0:2a:55:6e:34:3e:84:26:c3:8a:
3c:6e:83:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:52:52 2026 by rpki-client