
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.mft
File: HhI4RWNx50SJRiLpisHuVbQUXhA.mft (raw, json)
Hash identifier: tCZPep1sbPGMlz4rTHssUT4b2AAuvXPp/W+dpCCHAaw=
Subject key identifier: 37:FD:B7:F4:F8:98:98:DC:7F:92:E2:46:60:1F:40:94:1E:0E:C5:11
Authority key identifier: 1E:12:38:45:63:71:E7:44:89:46:22:E9:8A:C1:EE:55:B4:14:5E:10
Certificate issuer: /CN=A917E678/serialNumber=1E1238456371E744894622E98AC1EE55B4145E10
Certificate serial: 169B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HhI4RWNx50SJRiLpisHuVbQUXhA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.mft
Manifest number: 1635
Signing time: Sat 10 Oct 2026 16:48:31 +0000
Manifest this update: Sat 10 Oct 2026 16:48:30 +0000
Manifest next update: Sat 17 Oct 2026 16:48:30 +0000
Files and hashes: 1: HhI4RWNx50SJRiLpisHuVbQUXhA.crl (hash: m9UKL7xmet53E5m1WNy7wUye9zf7Aty6DyQoFm+Wuog=)
2: C9203DF43D5E11F19F1D0B4EAB833773.roa (hash: DX4eexE4YC+Zii7wTi3ae+5wNhCUW2YRgzcsXgrn4Gc=)
3: 0BFFC86E3FC211F18966A53AC7833773.roa (hash: 1bRai1yKxod8Ng4Dkl4xffVS1smeGTtBYsweb+835T4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.crl
rsync://rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HhI4RWNx50SJRiLpisHuVbQUXhA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 16:48:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5787 (0x169b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E678, serialNumber=1E1238456371E744894622E98AC1EE55B4145E10
Validity
Not Before: Oct 10 16:48:30 2026 GMT
Not After : Oct 17 16:48:30 2026 GMT
Subject: CN=6aca6c5e-422c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2b:60:5b:89:33:f0:28:af:c6:02:87:2c:8e:
c3:73:98:ca:20:98:b6:2a:9f:ef:ed:0e:d8:10:72:
bf:99:9c:6c:b6:78:97:3c:51:e5:ad:74:37:66:42:
c2:b0:4b:ed:14:cf:84:60:8b:34:5e:3c:36:2a:82:
c7:9b:23:6a:78:e5:0f:e6:85:11:51:74:bf:fe:fd:
2c:3e:4d:90:35:19:71:ab:a7:e9:63:d6:9a:b9:e8:
72:d5:d4:14:ba:24:9c:c6:a4:3d:67:96:ec:e1:8f:
72:09:fb:2a:ca:ee:e2:8a:2c:91:12:96:eb:43:ce:
f4:c8:ac:fd:d5:c8:61:4c:47:60:53:f5:1f:3d:4a:
4e:0e:ef:88:32:c2:5e:49:14:93:b8:1f:73:4b:3c:
42:7a:a8:f0:30:c1:43:eb:aa:52:8b:b5:a9:b9:99:
47:64:e7:62:77:c9:3b:a8:7c:44:bf:f3:74:2e:25:
0f:f8:16:e6:49:c0:1c:c4:fd:77:d4:3c:4e:61:0a:
af:e6:97:7a:63:71:ee:56:bb:7f:08:95:79:cd:bf:
4a:10:12:05:e0:76:23:91:af:e8:76:1b:ce:df:a3:
24:03:d6:3f:c7:43:41:f4:df:dd:e2:cd:0d:ec:81:
aa:75:46:23:58:f3:e8:dc:cd:91:a9:ac:8a:dc:2a:
1a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:FD:B7:F4:F8:98:98:DC:7F:92:E2:46:60:1F:40:94:1E:0E:C5:11
X509v3 Authority Key Identifier:
keyid:1E:12:38:45:63:71:E7:44:89:46:22:E9:8A:C1:EE:55:B4:14:5E:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HhI4RWNx50SJRiLpisHuVbQUXhA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:7a:20:c7:59:5a:e9:3a:b4:99:2c:0b:6b:bf:bd:ff:b5:eb:
7c:07:5d:9d:57:b4:5f:93:d7:86:53:27:10:c8:c5:c0:01:68:
6d:18:47:68:ee:a6:c5:55:93:e9:27:77:bd:7b:4f:30:11:d7:
d9:9c:9a:e5:89:4b:06:2e:19:0c:06:f8:22:06:69:6a:63:1c:
c3:50:4a:41:44:ca:02:3e:41:8b:27:4c:ba:61:26:61:31:94:
0c:5a:2e:03:88:2e:7b:04:73:84:b0:78:2b:23:28:5f:09:68:
d9:15:92:d4:68:86:d1:1a:53:cd:92:66:fe:31:20:c2:a8:34:
80:41:0f:94:ad:d6:48:8d:26:69:21:3d:7c:06:32:fc:23:9e:
df:73:22:2b:ab:f9:77:93:a4:2d:33:18:eb:68:07:71:cc:1d:
ca:88:3a:0c:b9:77:3b:87:4c:ab:01:90:00:7d:f2:f0:c5:3c:
8e:4b:7d:ce:21:97:08:1f:70:8b:69:22:dc:32:e4:7e:24:9c:
c6:fe:5f:65:32:cc:c6:c2:c8:8f:31:36:48:0a:93:46:f6:54:
43:51:2a:88:41:94:71:72:4b:d5:ce:bc:05:d4:58:d8:01:c6:
a0:cc:d0:aa:78:01:b1:c2:19:4f:45:0e:1e:9d:d1:70:6d:16:
7d:0f:c5:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:52:00 2026 by rpki-client