
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.mft
File: HSpVFaipmzCyHRhxvPr9J-saEyo.mft (raw, json)
Hash identifier: SaBt7tPXKOp8SE9EM2cWMA1BCxpIh88GXP/aulEk7BI=
Subject key identifier: 65:CA:09:89:97:31:A8:4C:CF:FB:5D:38:8B:AF:6B:70:CD:CE:B2:2A
Authority key identifier: 1D:2A:55:15:A8:A9:9B:30:B2:1D:18:71:BC:FA:FD:27:EB:1A:13:2A
Certificate issuer: /CN=A9185B30/serialNumber=1D2A5515A8A99B30B21D1871BCFAFD27EB1A132A
Certificate serial: 0306
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSpVFaipmzCyHRhxvPr9J-saEyo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.mft
Manifest number: 0300
Signing time: Fri 17 Apr 2026 01:09:30 +0000
Manifest this update: Fri 17 Apr 2026 01:09:30 +0000
Manifest next update: Fri 24 Apr 2026 01:09:30 +0000
Files and hashes: 1: HSpVFaipmzCyHRhxvPr9J-saEyo.crl (hash: TGcae8ZSd375vVf6dTuqKEgxSDf5Q6chkch5QAH+SRw=)
2: D6E7D65C192E11ED927BF512C4F9AE02.roa (hash: DVr0amxAWZgoxiAH+g9huvxmF7FumJsE61KGOjDJl5E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.crl
rsync://rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSpVFaipmzCyHRhxvPr9J-saEyo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 774 (0x306)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185B30, serialNumber=1D2A5515A8A99B30B21D1871BCFAFD27EB1A132A
Validity
Not Before: Apr 17 01:09:30 2026 GMT
Not After : Apr 24 01:09:30 2026 GMT
Subject: CN=69e1884a-1879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:30:8e:4d:8f:3b:b7:71:85:cc:97:f1:58:58:
7c:75:1f:af:8d:f1:8e:bb:57:a8:cc:a7:a9:b6:b6:
50:76:51:16:67:f5:00:e5:a6:7f:d6:9f:66:8c:24:
15:0b:93:0f:b1:08:65:a8:b7:ae:6f:dc:d6:ef:9c:
16:6d:1b:b1:8b:f2:78:9d:27:02:74:a3:80:8d:9f:
5a:7a:03:69:f5:51:36:60:07:b3:38:30:6c:75:15:
c0:6f:bf:5b:95:12:01:3b:73:b3:0e:88:ca:d8:3d:
9d:cf:62:7b:f4:f5:b1:63:dc:6a:01:3a:20:6a:4e:
0f:bf:42:c8:ee:7d:cd:fb:f1:24:7b:64:58:4b:31:
3c:2e:04:0e:09:27:38:1d:4c:ad:7c:84:bd:16:a9:
14:6a:41:ba:7c:13:01:9e:c1:18:75:7c:4a:c5:f2:
6a:47:ab:2b:fe:2c:c9:bb:2f:29:df:70:27:ce:ac:
ff:4f:7e:39:d9:01:10:a3:95:e6:8a:9c:45:95:27:
8e:c8:98:49:29:6d:aa:43:63:93:75:99:90:53:91:
d3:73:b4:79:ef:81:f9:a3:86:99:6d:21:6f:28:a5:
0f:62:80:e5:f2:a8:99:3c:2c:2e:44:1e:aa:8d:3a:
0d:b4:87:d1:df:42:c9:9f:d6:10:f4:eb:dd:c7:b2:
53:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:CA:09:89:97:31:A8:4C:CF:FB:5D:38:8B:AF:6B:70:CD:CE:B2:2A
X509v3 Authority Key Identifier:
keyid:1D:2A:55:15:A8:A9:9B:30:B2:1D:18:71:BC:FA:FD:27:EB:1A:13:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSpVFaipmzCyHRhxvPr9J-saEyo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:08:6f:ba:58:7b:e0:17:97:3f:66:59:90:47:d3:56:c9:67:
44:a1:49:7f:10:8f:74:2e:55:bb:b4:c3:47:b8:78:71:74:44:
df:98:1c:e5:b4:34:a2:c7:fb:43:d0:2b:de:53:8b:c3:06:4f:
18:28:ce:5a:fb:f0:d8:8f:37:5d:b3:f5:21:81:8c:45:19:ab:
76:44:32:a8:25:4e:bb:4c:4f:81:3b:5e:f5:53:07:0e:0d:66:
76:33:d8:26:09:ff:e6:65:3d:56:97:cf:df:1f:dc:8a:8e:cd:
23:73:42:46:f7:0c:b8:78:1e:fa:d8:60:65:eb:9b:e0:3e:8d:
8e:90:ad:65:19:f9:84:80:d4:c2:87:bf:28:26:d8:f6:c4:8d:
57:cd:69:02:ff:79:9a:b3:84:08:27:3a:ee:72:84:0f:31:97:
a2:6e:32:c3:6a:d9:af:b7:28:6f:de:da:fd:30:52:fd:27:45:
01:40:99:2a:72:11:91:3f:92:69:40:03:ed:82:0e:f6:52:00:
99:f1:a9:e0:f6:8d:47:3f:30:05:c9:51:05:7a:76:15:71:d0:
49:37:ea:c2:1d:dd:58:c3:3f:b4:4f:7d:7e:e7:13:6b:fa:92:
fa:38:f3:fa:dc:30:fc:94:b7:9a:38:80:42:ce:7a:b8:17:24:
20:46:93:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:38:30 2026 by rpki-client