
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/HgqTik3H07rU9fll3NVeCymMQts.mft
File: HgqTik3H07rU9fll3NVeCymMQts.mft (raw, json)
Hash identifier: FGJZ87/pGWCyQLZAiJpYmti940BKgs6soYDQ0VAsCKQ=
Subject key identifier: 47:5F:33:ED:60:D8:F0:F1:FB:2E:DA:07:26:05:F6:D9:DF:07:F0:E7
Authority key identifier: 1E:0A:93:8A:4D:C7:D3:BA:D4:F5:F9:65:DC:D5:5E:0B:29:8C:42:DB
Certificate issuer: /CN=A9174A4F/serialNumber=1E0A938A4DC7D3BAD4F5F965DCD55E0B298C42DB
Certificate serial: 0EFD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgqTik3H07rU9fll3NVeCymMQts.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/HgqTik3H07rU9fll3NVeCymMQts.mft
Manifest number: 0EEE
Signing time: Mon 28 Sep 2026 17:44:37 +0000
Manifest this update: Mon 28 Sep 2026 17:44:37 +0000
Manifest next update: Mon 05 Oct 2026 17:44:37 +0000
Files and hashes: 1: HgqTik3H07rU9fll3NVeCymMQts.crl (hash: vgeJ9552VOYIu00oUWXW/Y3qEhIe9VOZWBJgSxbno2o=)
2: 7592203EB1B111E999187E66C4F9AE02.roa (hash: uuj0NeXtofK/Wq7L6uOJQ8Z949+GsSsOfpPni85+dcw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/HgqTik3H07rU9fll3NVeCymMQts.crl
rsync://rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/HgqTik3H07rU9fll3NVeCymMQts.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgqTik3H07rU9fll3NVeCymMQts.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 17:44:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3837 (0xefd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174A4F, serialNumber=1E0A938A4DC7D3BAD4F5F965DCD55E0B298C42DB
Validity
Not Before: Sep 28 17:44:37 2026 GMT
Not After : Oct 5 17:44:37 2026 GMT
Subject: CN=6abaa785-dc35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:a7:2d:1b:ab:8b:ca:23:d1:0e:97:11:8b:ab:
9d:03:a7:f9:19:e3:c7:9d:ef:d0:ea:c1:65:57:3c:
ab:ea:61:1a:50:2f:1d:13:04:08:b7:78:85:f7:18:
0d:ec:d5:36:41:fb:1e:25:b3:c8:af:e2:3e:d3:77:
a6:59:58:ed:cf:ed:5e:36:d0:34:52:b2:67:b0:63:
3b:fb:c8:0e:a4:68:75:87:06:3e:19:a2:ac:10:c7:
62:14:47:2b:c4:20:e1:53:97:69:e5:7e:41:b3:b9:
ea:b2:7e:1b:3a:d4:5f:cb:4e:7a:61:ad:b2:18:e5:
58:77:e8:3b:bb:cc:05:40:3c:1b:fd:b0:fc:65:86:
0d:b2:94:92:5f:91:0f:52:63:59:26:d6:21:a1:50:
31:cf:99:fb:e7:dd:1a:1f:e1:e6:0d:cb:c8:e0:12:
12:05:c3:8e:4f:b8:07:2e:a2:08:7a:07:07:0f:69:
8e:02:6a:5b:ff:5f:4c:17:e9:76:c3:c6:db:41:c9:
99:1c:c6:0e:04:c5:0c:a5:95:30:94:e4:d7:13:01:
97:14:0c:a5:50:ec:64:03:10:e0:4f:6c:dd:00:68:
3a:1f:e4:7a:2c:39:9a:1a:eb:3a:80:1d:77:47:e5:
c2:f4:b8:d4:70:61:91:79:16:a5:c7:76:58:29:cb:
fc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:5F:33:ED:60:D8:F0:F1:FB:2E:DA:07:26:05:F6:D9:DF:07:F0:E7
X509v3 Authority Key Identifier:
keyid:1E:0A:93:8A:4D:C7:D3:BA:D4:F5:F9:65:DC:D5:5E:0B:29:8C:42:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/HgqTik3H07rU9fll3NVeCymMQts.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgqTik3H07rU9fll3NVeCymMQts.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/HgqTik3H07rU9fll3NVeCymMQts.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:48:56:49:b0:cc:f9:a4:ad:e0:5c:36:23:c8:36:62:7b:7b:
89:92:88:ce:d3:f2:5a:5b:a0:d2:f4:df:58:0c:ae:33:bb:36:
3e:20:fc:08:b8:f9:f5:d3:cc:d0:17:29:e0:b8:4c:cf:bc:6b:
73:9c:17:e7:80:7e:40:c3:ca:b1:34:13:35:47:f8:77:6e:a8:
31:23:53:d5:5b:03:91:73:a2:90:f0:4d:ba:53:b3:c1:4b:72:
65:b1:13:6b:ad:25:9c:51:db:e6:e1:e3:f2:07:01:8f:07:6f:
4c:1b:8f:97:ea:0c:a3:af:2f:40:a2:03:ab:a3:15:38:cc:ed:
9f:a0:58:4b:ea:2a:31:f7:36:2d:33:b4:76:58:bf:22:6a:85:
c9:c1:1c:1f:82:b0:ef:b8:a6:2a:7f:c2:10:75:86:1b:74:65:
0f:f5:ac:75:e9:b1:a8:71:6d:4b:91:47:47:50:70:3b:b9:de:
8b:62:d5:b9:5f:04:bf:b1:19:51:03:c9:21:5f:c5:4e:5e:3a:
04:0e:95:08:e8:bd:07:99:58:9b:40:b1:23:0e:c4:5b:4a:a6:
d1:a5:f4:3f:c2:90:18:30:1a:81:0e:18:59:e1:ba:84:d7:be:
9e:33:bd:e3:25:1d:57:ad:ce:99:0b:f7:70:b6:45:1c:fd:ff:
40:f7:fe:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 00:57:55 2026 by rpki-client