
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.mft
File: HhI4RWNx50SJRiLpisHuVbQUXhA.mft (raw, json)
Hash identifier: 8EuDlHlMu5j+YrQVLCoAmBWvlq7fBd3akVefTztIo2A=
Subject key identifier: 63:6A:7A:B2:B7:38:60:D9:CE:FB:08:5B:67:5C:5A:48:9D:9F:27:F1
Authority key identifier: 1E:12:38:45:63:71:E7:44:89:46:22:E9:8A:C1:EE:55:B4:14:5E:10
Certificate issuer: /CN=A917E678/serialNumber=1E1238456371E744894622E98AC1EE55B4145E10
Certificate serial: 1654
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HhI4RWNx50SJRiLpisHuVbQUXhA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.mft
Manifest number: 15F3
Signing time: Fri 12 Jun 2026 16:46:43 +0000
Manifest this update: Fri 12 Jun 2026 16:46:42 +0000
Manifest next update: Fri 19 Jun 2026 16:46:42 +0000
Files and hashes: 1: HhI4RWNx50SJRiLpisHuVbQUXhA.crl (hash: NrqU9CmXzDPQ0m9zFEn7p4u9xJqgnHakBvFN7EVlIVU=)
2: 0BFFC86E3FC211F18966A53AC7833773.roa (hash: W+YOe6hixH3mn1KveOHweplDujCY7TsXxGCoVqjHzBw=)
3: C9203DF43D5E11F19F1D0B4EAB833773.roa (hash: fhBWCudWssjjCZ/zBynhZzcCH3noLL5P4oCjMcFv1HI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.crl
rsync://rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HhI4RWNx50SJRiLpisHuVbQUXhA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 16:46:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5716 (0x1654)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E678, serialNumber=1E1238456371E744894622E98AC1EE55B4145E10
Validity
Not Before: Jun 12 16:46:42 2026 GMT
Not After : Jun 19 16:46:42 2026 GMT
Subject: CN=6a2c37f3-a419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:df:23:88:93:ff:26:aa:9e:7a:e4:6d:fa:eb:
58:e1:80:c9:13:81:dd:43:64:97:42:f7:7f:c2:df:
c7:7f:69:8d:b3:ab:1e:b9:6a:53:a3:f5:d2:49:e3:
b5:b9:0c:7b:1c:5d:c4:92:c0:46:08:0d:86:30:81:
86:c3:71:2c:86:23:f6:df:32:5b:4c:c5:f4:f8:c8:
3f:ae:7d:7d:d9:ff:a4:f1:69:97:de:ae:03:43:e3:
80:32:b5:84:a9:c7:b5:c3:fa:b1:a2:76:59:bd:e3:
48:7f:bc:c3:ca:f9:b8:94:05:f0:e4:bf:eb:e8:6a:
cd:1f:bb:a7:ac:f1:32:8f:e1:30:33:2f:6d:54:7f:
07:fa:68:35:b8:05:e1:23:26:d1:77:e4:21:cb:4e:
af:e7:36:5e:38:71:ad:bf:71:d3:19:0e:b7:a1:64:
e6:7f:53:02:19:2d:80:6f:9c:c7:8a:9b:ea:b0:94:
44:a3:33:90:36:8d:5d:89:a9:3e:1b:e4:12:91:07:
26:8c:a5:cb:dd:91:ad:0a:56:6e:d6:be:c0:d3:bf:
b0:19:7f:01:08:bf:1e:61:6f:10:b4:b2:a9:8e:e4:
55:d6:8c:17:d0:15:0d:ae:e8:ad:47:2e:0f:70:45:
09:a5:62:a8:bc:54:7b:81:ed:b4:7b:fc:77:04:23:
90:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:6A:7A:B2:B7:38:60:D9:CE:FB:08:5B:67:5C:5A:48:9D:9F:27:F1
X509v3 Authority Key Identifier:
keyid:1E:12:38:45:63:71:E7:44:89:46:22:E9:8A:C1:EE:55:B4:14:5E:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HhI4RWNx50SJRiLpisHuVbQUXhA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:21:ce:c5:39:ee:58:9b:97:87:1b:71:a0:58:61:f3:0b:6a:
e3:d3:0e:eb:61:8f:a3:8b:d4:b4:80:7d:60:e8:96:af:4a:84:
f2:26:b8:52:82:f9:e4:8f:a6:08:ce:c0:62:c3:ff:ae:91:e8:
ba:4d:65:e9:d3:da:65:15:4c:09:69:1e:90:03:54:8c:24:38:
df:e3:f4:a0:ce:b0:d4:e9:bb:0f:84:e2:d2:fd:90:c7:75:46:
65:3f:21:c1:32:c0:e0:c1:fa:77:41:5e:38:cc:36:ae:ba:4b:
1c:e2:e8:a5:4b:85:2a:61:c7:7f:a8:d5:a5:46:e8:35:29:c2:
7b:c8:5d:95:e2:eb:c3:b1:23:fa:14:13:01:33:6f:b5:6c:d7:
3e:ca:80:f5:4e:d3:02:b8:ae:a0:17:a6:f6:84:2b:df:c4:6c:
87:13:c6:be:2d:52:2a:f9:ec:69:cb:58:29:b7:59:ea:8e:23:
5f:d1:85:18:25:da:91:1d:2c:dd:33:83:65:f5:b2:ef:06:95:
c7:7b:7d:ca:b3:d2:c3:59:fc:1d:bf:11:14:f5:85:94:c0:f9:
36:ee:ea:7c:6d:a5:30:5f:21:d3:18:5d:a1:df:ac:b0:85:d4:
b0:ec:f6:6a:5d:5a:b2:26:11:f8:c3:8b:7b:39:25:b3:3d:07:
6c:bc:4e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:53:00 2026 by rpki-client