
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.mft
File: HSpVFaipmzCyHRhxvPr9J-saEyo.mft (raw, json)
Hash identifier: 4SvOvyz7GQSCFFZ0X+ZVxzbX/7Hn4zyiQ7zb/0efiV8=
Subject key identifier: 2E:48:52:54:F2:C3:50:4E:AC:3E:D3:D2:D8:F9:0E:15:10:8E:73:E2
Authority key identifier: 1D:2A:55:15:A8:A9:9B:30:B2:1D:18:71:BC:FA:FD:27:EB:1A:13:2A
Certificate issuer: /CN=A9185B30/serialNumber=1D2A5515A8A99B30B21D1871BCFAFD27EB1A132A
Certificate serial: 02EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSpVFaipmzCyHRhxvPr9J-saEyo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.mft
Manifest number: 02E8
Signing time: Mon 02 Mar 2026 00:38:41 +0000
Manifest this update: Mon 02 Mar 2026 00:38:39 +0000
Manifest next update: Mon 09 Mar 2026 00:38:39 +0000
Files and hashes: 1: HSpVFaipmzCyHRhxvPr9J-saEyo.crl (hash: VPDNaWPsQwPwoaISCi1aPOHtf8s+/UdX5U07uGWDUFg=)
2: D6E7D65C192E11ED927BF512C4F9AE02.roa (hash: DVr0amxAWZgoxiAH+g9huvxmF7FumJsE61KGOjDJl5E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.crl
rsync://rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSpVFaipmzCyHRhxvPr9J-saEyo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:38:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 750 (0x2ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185B30, serialNumber=1D2A5515A8A99B30B21D1871BCFAFD27EB1A132A
Validity
Not Before: Mar 2 00:38:39 2026 GMT
Not After : Mar 9 00:38:39 2026 GMT
Subject: CN=69a4dc10-6480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:24:69:87:d3:8b:b6:ed:2d:a8:0f:e8:dc:dc:
81:39:e4:a5:2a:7c:eb:74:85:89:3a:64:ac:53:0b:
d2:a9:55:5d:3f:e7:8c:8f:0e:8d:0e:b4:29:a3:cf:
2d:9d:4d:89:d2:56:94:ea:dc:9b:66:fd:07:ca:eb:
1c:7c:b2:db:e3:e0:fe:f1:dc:ba:2c:ab:84:9f:85:
64:f3:80:a4:8f:43:13:22:1a:ce:ae:cb:9e:b8:e5:
6c:b9:35:6e:a9:8a:86:e1:cd:f7:18:a6:c6:bd:89:
55:43:53:cc:bb:18:f4:f5:c9:19:dc:df:45:fe:a1:
dc:b1:fe:09:c3:9c:b8:d5:97:f3:11:a3:98:1d:6a:
bf:e8:e1:35:ce:24:58:67:91:ed:7d:40:0e:6b:df:
f7:f6:71:11:73:9e:a7:ca:24:69:41:cf:17:d0:a7:
40:ed:f6:2a:64:c5:e2:ad:92:cc:a7:0c:46:38:6e:
7f:7d:64:e6:da:5b:14:e0:86:21:fe:99:e6:7c:9a:
b0:9e:2c:19:e1:3b:ac:b6:b3:19:32:d8:77:8e:88:
5e:4c:f1:fe:3e:4d:5a:e7:ea:07:b8:5d:cd:c6:87:
11:5a:51:f5:08:7a:b8:b5:9e:f1:fb:87:bb:62:e7:
68:1c:3f:cf:7a:f2:96:2b:ea:07:10:69:21:42:56:
18:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:48:52:54:F2:C3:50:4E:AC:3E:D3:D2:D8:F9:0E:15:10:8E:73:E2
X509v3 Authority Key Identifier:
keyid:1D:2A:55:15:A8:A9:9B:30:B2:1D:18:71:BC:FA:FD:27:EB:1A:13:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSpVFaipmzCyHRhxvPr9J-saEyo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:af:14:7d:53:41:17:61:0c:ac:22:3d:7e:85:41:a0:a4:fc:
e2:bd:6b:11:24:a3:4d:63:60:3a:23:70:fa:de:bb:2d:cc:0d:
f1:cf:f7:4d:37:3b:39:bb:48:42:6e:78:8c:a4:20:a2:e3:2a:
4d:52:89:2a:1e:15:07:13:d0:30:35:14:93:28:db:2c:a8:df:
11:4e:f8:8f:8c:a1:0d:9c:29:eb:25:ff:9d:93:fd:97:65:32:
b8:9e:f1:42:fa:0f:25:cb:96:f7:af:87:47:f7:87:be:9b:e6:
e7:6c:c4:8c:bf:07:ef:97:c1:1d:67:20:85:1d:00:91:73:5b:
a3:6e:61:09:9c:83:ce:1c:75:3b:33:de:a8:eb:1c:fd:ec:b0:
5c:1d:8e:ac:d8:56:1d:b2:b1:91:5d:63:ff:84:f7:4c:f8:58:
09:f8:0a:cc:2d:17:fe:b8:5a:53:b4:b3:72:47:4e:42:db:08:
0d:59:f1:8b:9b:fe:0a:17:da:89:4c:5d:97:86:7d:39:5e:78:
15:60:95:dd:f9:bf:47:5b:39:33:eb:6a:48:c2:fa:9b:3a:f4:
39:f4:83:35:3c:4d:c9:24:b2:1e:48:14:f9:50:ba:4b:c6:32:
84:0f:66:55:d6:1c:3c:ce:ba:dc:03:e9:1d:7a:13:2e:c9:6c:
ba:8d:35:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:17:57 2026 by rpki-client