
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.mft
File: HgeR690MlMNWujc9fg8BYQPUC5I.mft (raw, json)
Hash identifier: 4b6INxrczGaaTp0DDC85vQvzMPgXc8WCiG0adDR62cE=
Subject key identifier: 22:06:90:84:77:54:36:0F:4E:15:DA:F6:9E:8F:F5:E7:F5:D8:18:98
Authority key identifier: 1E:07:91:EB:DD:0C:94:C3:56:BA:37:3D:7E:0F:01:61:03:D4:0B:92
Certificate issuer: /CN=A916D07E/serialNumber=1E0791EBDD0C94C356BA373D7E0F016103D40B92
Certificate serial: AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgeR690MlMNWujc9fg8BYQPUC5I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.mft
Manifest number: A9
Signing time: Sun 01 Mar 2026 08:31:18 +0000
Manifest this update: Sun 01 Mar 2026 08:31:18 +0000
Manifest next update: Sun 08 Mar 2026 08:31:18 +0000
Files and hashes: 1: HgeR690MlMNWujc9fg8BYQPUC5I.crl (hash: w6iwq1ETGRoXCNJIuUwld5ZkOQuzQtBKrv+pRz4ApGE=)
2: 6014E88A257E11F08DB64644C4F9AE02.roa (hash: 7eYSOQ3wsfu7KFAltY0onX1LYBjQ9AeeFQK0c0ksPU0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.crl
rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgeR690MlMNWujc9fg8BYQPUC5I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:31:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171 (0xab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D07E, serialNumber=1E0791EBDD0C94C356BA373D7E0F016103D40B92
Validity
Not Before: Mar 1 08:31:18 2026 GMT
Not After : Mar 8 08:31:18 2026 GMT
Subject: CN=69a3f956-cd64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:34:3f:1e:03:ad:0e:2b:4d:93:88:57:7b:f7:
6b:4c:c1:03:ef:19:d2:9f:38:f5:3b:fb:dd:9c:fa:
40:bd:d1:b8:4a:b7:0e:01:7b:91:13:f4:ed:bd:2f:
b4:ba:17:b4:9d:c4:de:1a:0f:86:38:6f:6f:bf:0a:
d6:4f:2c:73:4e:ef:ed:7e:0f:a4:6d:b7:4d:a5:43:
8a:ac:e0:86:12:16:ab:d1:12:74:61:cd:08:34:3a:
ce:2b:11:ce:0f:16:36:ab:bf:d5:07:a9:17:79:74:
4a:ce:f8:7e:1c:77:80:de:c7:b4:52:7f:3c:5b:63:
28:8b:65:27:1d:5f:d1:0b:34:55:7c:7a:df:c5:8c:
65:44:f9:34:13:05:15:0c:c7:a8:46:fb:a5:8a:ed:
2d:ea:11:4e:7e:9a:34:92:31:5b:ac:20:7b:e7:3f:
5d:fc:24:b9:5b:2c:b2:a5:99:ab:3a:25:8f:1a:58:
f0:b0:14:06:3d:7c:bb:2e:35:74:c7:9a:b0:a1:87:
0a:2f:6b:e6:5e:05:54:b3:26:f3:f2:40:f6:ef:74:
28:3d:8b:a9:af:7c:43:6c:41:32:94:80:fb:d7:13:
a1:54:d9:56:d7:0d:d5:e4:22:0e:b7:4b:a7:b0:aa:
68:39:e9:f1:01:48:ef:e5:f3:a5:84:92:42:65:d4:
8a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:06:90:84:77:54:36:0F:4E:15:DA:F6:9E:8F:F5:E7:F5:D8:18:98
X509v3 Authority Key Identifier:
keyid:1E:07:91:EB:DD:0C:94:C3:56:BA:37:3D:7E:0F:01:61:03:D4:0B:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgeR690MlMNWujc9fg8BYQPUC5I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:65:7d:32:a3:5f:74:00:72:50:a2:c0:cd:95:04:ff:44:17:
1c:59:b8:95:36:61:4e:ad:14:b5:5d:d1:f6:55:9d:dd:01:9e:
76:45:a2:83:00:e2:fe:91:0a:89:78:78:77:0a:e3:27:a6:0b:
51:e7:60:3b:95:87:ff:20:61:c5:2d:69:95:c9:df:1f:fc:0f:
59:95:eb:be:4f:f2:3d:97:57:05:17:1e:11:47:48:9a:46:4f:
23:9a:26:f0:90:7d:2d:24:91:ed:21:8f:09:e5:ca:c0:f5:d3:
00:62:83:f8:1f:1e:f2:44:40:d4:15:c3:a7:d8:63:58:44:9a:
74:e9:08:32:e0:4b:42:ea:2a:ff:e0:59:23:95:35:85:7b:4a:
83:36:07:1d:7f:dc:a8:65:f9:96:19:b9:9a:4b:00:2f:f3:d6:
5d:ee:f9:1d:3e:04:d8:14:76:78:da:f8:dc:6e:b6:08:e1:1e:
02:9a:51:4b:ee:7a:ff:8b:af:bf:8f:ae:8f:7d:f9:29:fa:fe:
54:cf:c1:93:e8:3c:31:49:45:9c:8c:5a:d9:db:72:9a:47:1d:
57:b3:f0:51:ff:8c:1f:54:a0:1e:85:3f:5b:ab:9c:f1:1c:7b:
ff:f4:9b:af:a0:a7:3b:d9:63:70:a9:ed:6b:df:00:f2:4b:ab:
ee:05:83:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:11:32 2026 by rpki-client