
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.mft
File: HhI4RWNx50SJRiLpisHuVbQUXhA.mft (raw, json)
Hash identifier: iHDhZ1oYNN0i2G7ixf4h8jS9vUadPfNk5NG4W9x5KH0=
Subject key identifier: 7F:0E:82:89:6F:5A:99:52:41:28:13:E3:47:E5:95:30:EB:2E:79:59
Authority key identifier: 1E:12:38:45:63:71:E7:44:89:46:22:E9:8A:C1:EE:55:B4:14:5E:10
Certificate issuer: /CN=A917E678/serialNumber=1E1238456371E744894622E98AC1EE55B4145E10
Certificate serial: 162C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HhI4RWNx50SJRiLpisHuVbQUXhA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.mft
Manifest number: 15D0
Signing time: Thu 16 Apr 2026 16:46:06 +0000
Manifest this update: Thu 16 Apr 2026 16:46:06 +0000
Manifest next update: Thu 23 Apr 2026 16:46:06 +0000
Files and hashes: 1: HhI4RWNx50SJRiLpisHuVbQUXhA.crl (hash: bpjbK+qCo4pGbwYyikQx/Tj+G28OrFs+IcAyDL6YaWU=)
2: C5C8F29AFFE711F09EC342C9756F56BC.roa (hash: j07fKwZtLRciT6NFGCe/+nPRJNggQVvYMx63JVztzcI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.crl
rsync://rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HhI4RWNx50SJRiLpisHuVbQUXhA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:46:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5676 (0x162c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E678, serialNumber=1E1238456371E744894622E98AC1EE55B4145E10
Validity
Not Before: Apr 16 16:46:06 2026 GMT
Not After : Apr 23 16:46:06 2026 GMT
Subject: CN=69e1124e-d2da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:50:b0:e1:aa:94:b7:57:47:e8:48:33:ef:3e:
b6:3d:84:07:f6:53:8f:40:69:9d:13:c3:c8:5e:f7:
72:1f:b9:1b:d7:b0:ab:37:35:01:cf:9a:6d:b3:8d:
c6:85:b3:d8:f1:42:aa:bd:f4:fe:df:24:a1:92:84:
46:1a:10:35:56:97:71:fd:ac:26:db:af:ab:55:08:
90:42:e5:33:14:f9:1f:42:02:4a:1f:c7:b1:3c:f5:
dc:0d:83:74:f5:dc:d0:c3:ee:9e:e0:0f:e6:97:89:
53:38:13:7b:3c:11:93:c8:9a:c3:a1:86:71:7d:02:
77:2c:f7:c7:df:b6:ec:2c:20:88:8a:e9:46:0d:ae:
3c:21:02:2b:e3:e2:27:d3:d5:b8:18:36:93:0d:f4:
40:5b:fc:01:ad:35:65:17:ea:55:f5:37:3c:e7:2c:
1c:13:bd:2d:fb:40:35:9b:dc:dc:8b:c9:d1:c2:1c:
37:c8:85:97:ce:3d:93:c7:16:da:4d:fb:c1:b6:33:
ab:f2:4e:66:46:03:8c:35:57:be:93:f4:47:b1:33:
dc:12:2e:8d:5a:e4:85:34:32:72:45:ae:4d:04:64:
45:10:5d:a1:8f:41:89:31:3f:40:f3:ba:ab:a0:c0:
93:4b:73:c1:b9:37:4b:7f:89:df:61:c5:de:12:cd:
10:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:0E:82:89:6F:5A:99:52:41:28:13:E3:47:E5:95:30:EB:2E:79:59
X509v3 Authority Key Identifier:
keyid:1E:12:38:45:63:71:E7:44:89:46:22:E9:8A:C1:EE:55:B4:14:5E:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HhI4RWNx50SJRiLpisHuVbQUXhA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:d6:99:45:2c:03:e2:e8:2b:7b:c1:ba:17:84:cb:f9:54:75:
8f:85:91:9b:fa:cc:26:14:ef:e5:51:4e:31:e0:e5:f4:13:65:
dc:e8:4b:5d:a8:e7:62:f0:c5:51:5e:31:6a:75:28:3b:d0:11:
de:df:0c:3f:ca:44:39:d2:4c:67:b9:e4:01:47:c5:4e:9b:2d:
52:5d:06:63:a9:54:c5:e7:ec:aa:20:8a:c3:99:11:6b:32:2f:
ff:fc:dd:da:f2:14:bb:74:0d:33:b1:79:9b:96:e1:61:09:a5:
05:9c:fa:aa:25:84:65:63:f2:4e:20:0a:09:9c:b0:52:ae:ad:
d3:80:28:9f:68:b3:1b:23:ed:61:35:0b:21:07:26:0c:44:07:
55:14:88:b0:e9:bb:95:13:ea:c5:17:07:ac:ce:74:27:fe:dc:
b9:6f:f8:03:09:d7:9b:7c:ab:a7:ac:26:1d:97:08:9e:34:3d:
f1:f0:42:bd:d1:f2:6c:c5:72:b2:e8:5f:50:ad:ab:71:c1:16:
24:7d:be:4e:d4:fc:bd:92:7c:3a:81:ac:9b:d9:0d:96:65:70:
80:b5:41:0c:2d:11:d0:00:ef:dc:f8:18:61:4d:19:ff:d8:7d:
9d:2b:0d:d6:5a:f5:fc:b5:6a:00:89:9d:d5:b2:5e:61:ed:c6:
58:c7:1e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:50:07 2026 by rpki-client