
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9179D1F/D982CB5E95D711EC953F954DC4F9AE02/HA69woHQL52iTsEXS6nPGEWbk-A.mft
File: HA69woHQL52iTsEXS6nPGEWbk-A.mft (raw, json)
Hash identifier: SwCXvY0LohOfWH7z4Bcem+OJ5vxYI/P4qgbGpYJDhFo=
Subject key identifier: 32:74:F5:2C:1C:B1:94:C0:D5:77:BD:A1:7C:C7:33:32:AD:BA:D5:B5
Authority key identifier: 1C:0E:BD:C2:81:D0:2F:9D:A2:4E:C1:17:4B:A9:CF:18:45:9B:93:E0
Certificate issuer: /CN=A9179D1F/serialNumber=1C0EBDC281D02F9DA24EC1174BA9CF18459B93E0
Certificate serial: 04A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA69woHQL52iTsEXS6nPGEWbk-A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179D1F/D982CB5E95D711EC953F954DC4F9AE02/HA69woHQL52iTsEXS6nPGEWbk-A.mft
Manifest number: 04A2
Signing time: Tue 22 Sep 2026 23:34:24 +0000
Manifest this update: Tue 22 Sep 2026 23:34:24 +0000
Manifest next update: Tue 29 Sep 2026 23:34:24 +0000
Files and hashes: 1: HA69woHQL52iTsEXS6nPGEWbk-A.crl (hash: nhPza2267LUTwSM/3FN7Wyc7lFDkhtwOfpnv7//t1VA=)
2: ED816DEC95DA11EC993BD050C4F9AE02.roa (hash: fDOU5iTnJ9Tf4/wEKmB/yast8lh3cbWWkQ+UhkQy1GI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179D1F/D982CB5E95D711EC953F954DC4F9AE02/HA69woHQL52iTsEXS6nPGEWbk-A.crl
rsync://rpki.apnic.net/member_repository/A9179D1F/D982CB5E95D711EC953F954DC4F9AE02/HA69woHQL52iTsEXS6nPGEWbk-A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA69woHQL52iTsEXS6nPGEWbk-A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 23:34:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1192 (0x4a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179D1F, serialNumber=1C0EBDC281D02F9DA24EC1174BA9CF18459B93E0
Validity
Not Before: Sep 22 23:34:24 2026 GMT
Not After : Sep 29 23:34:24 2026 GMT
Subject: CN=6ab31080-c994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:59:3a:53:c3:27:cd:4a:71:be:c8:f3:0a:68:
bb:92:17:5d:69:c4:68:98:aa:1e:54:93:9f:b2:c8:
38:b5:a8:21:20:e0:56:bd:84:87:4e:61:77:83:d6:
a7:ad:68:98:78:36:62:2f:dd:c1:0f:49:ee:06:cb:
46:2e:27:32:46:32:06:ee:4e:b6:ea:34:0e:d7:e9:
de:ab:9a:74:1f:13:97:07:4f:ef:e6:d6:80:12:98:
83:a3:26:b4:e6:30:31:db:92:ea:45:c6:8e:f3:b2:
81:3c:9e:c9:df:92:cd:14:d7:7c:d3:c2:43:74:3e:
0f:34:74:5e:12:3e:d5:86:67:b5:af:bc:c9:25:63:
e0:6f:03:91:2e:2b:46:5f:84:d4:6b:d0:8f:1a:27:
5b:60:3e:9d:8f:da:a2:eb:3f:18:e0:b7:a3:b2:3e:
0f:3e:5c:d6:c7:d1:e9:9c:ca:87:9f:fe:af:df:43:
dd:26:2d:a4:2d:47:30:26:b8:b8:c0:dd:7f:70:63:
7d:ae:cf:a8:e6:6c:d7:ae:42:3a:15:8a:21:41:65:
7b:cc:b5:ca:26:2d:cd:ee:11:03:19:37:52:7c:ac:
ba:74:3b:4f:d2:7e:fc:0f:7f:ed:2f:7e:82:99:e1:
99:c9:18:e4:9f:d7:95:35:66:a2:cd:d3:bf:94:8b:
3d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:74:F5:2C:1C:B1:94:C0:D5:77:BD:A1:7C:C7:33:32:AD:BA:D5:B5
X509v3 Authority Key Identifier:
keyid:1C:0E:BD:C2:81:D0:2F:9D:A2:4E:C1:17:4B:A9:CF:18:45:9B:93:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179D1F/D982CB5E95D711EC953F954DC4F9AE02/HA69woHQL52iTsEXS6nPGEWbk-A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA69woHQL52iTsEXS6nPGEWbk-A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179D1F/D982CB5E95D711EC953F954DC4F9AE02/HA69woHQL52iTsEXS6nPGEWbk-A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:9b:54:8f:83:2e:f1:04:1a:06:76:25:85:b1:45:3d:e7:f2:
70:21:69:69:2a:da:42:a9:b9:d5:2d:93:0b:15:6b:c8:3e:c2:
03:61:86:3b:b0:a3:a1:46:42:8b:a1:11:54:72:15:fe:66:75:
34:7c:c8:10:1e:a6:1c:c5:94:56:9e:5f:56:6e:60:ab:cb:0c:
4c:02:a9:c9:7f:cf:d2:ce:bb:90:8b:4d:95:27:8b:b3:f1:9e:
47:0b:84:c5:b9:2e:f8:99:da:09:90:01:66:cf:a3:26:20:4d:
da:79:3d:e4:79:54:fd:60:c8:53:14:72:ae:08:5a:e8:e9:0c:
bc:7a:04:06:07:64:1c:2c:8c:c2:74:ab:03:0a:69:c7:41:63:
85:3a:3d:a7:e0:52:7e:d6:d1:ff:65:b0:72:31:45:7d:58:df:
11:f0:9a:de:1e:22:78:f3:ac:cd:07:65:98:cb:c8:9f:98:7a:
30:61:92:29:a8:fb:4a:56:8f:00:93:d1:07:d0:84:0e:3c:82:
bd:20:de:d6:c9:e7:f7:ef:7e:d6:75:79:75:d8:27:78:70:79:
ee:31:6c:fc:45:4f:0b:c5:c8:0c:bb:be:8a:91:55:6f:62:da:
6e:62:c3:28:1d:9f:8c:67:a0:aa:4e:07:e8:47:ce:d0:68:0e:
26:de:a3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:30:16 2026 by rpki-client