
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft
File: Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft (raw, json)
Hash identifier: jtGHgo2vxaUnfNZRvTTGAqCJ5iK9svxATRDZsEWfWyg=
Subject key identifier: D3:C3:95:CD:B8:BD:21:36:EA:54:39:05:54:C5:C1:89:C8:1D:94:D9
Authority key identifier: 1E:B9:AE:8B:F5:95:9F:E8:BF:2E:B8:2B:92:3B:71:7E:FF:31:06:C5
Certificate issuer: /CN=A9190D72/serialNumber=1EB9AE8BF5959FE8BF2EB82B923B717EFF3106C5
Certificate serial: 01A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft
Manifest number: 0192
Signing time: Sun 01 Mar 2026 05:38:15 +0000
Manifest this update: Sun 01 Mar 2026 05:38:15 +0000
Manifest next update: Sun 08 Mar 2026 05:38:15 +0000
Files and hashes: 1: Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl (hash: 2H02u95wkdMkpr50ydEpj1iQpOYpIziZKiRuFyYgl0A=)
2: 355D028E4AB511EF87AB161BC4F9AE02.roa (hash: xnTxVBzuqpyQgM9jdgicco4JNCk9XP1Efnj6SZnRf34=)
3: 486F76B812BF11F0BA15A929C4F9AE02.roa (hash: R8eJxtItRazPsCZ9nlDjiUaGQnio5Z28G0pGlAoxT8w=)
4: 3AB77B58E23311F0B92C3AF56C6F56BC.roa (hash: 1d3zxtwJOm1psvgD3f8+WDO08RijTBs6522TZCUjLQQ=)
5: 536D7D82E23311F080CB84306D6F56BC.roa (hash: vg0Z8ilDAT2QseKnWVc3mmXETnZQ5xBQza8L0XDSQlg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl
rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 05:38:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 418 (0x1a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190D72, serialNumber=1EB9AE8BF5959FE8BF2EB82B923B717EFF3106C5
Validity
Not Before: Mar 1 05:38:15 2026 GMT
Not After : Mar 8 05:38:15 2026 GMT
Subject: CN=69a3d0c7-cb00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:98:ed:72:b9:06:e3:f6:0d:69:fa:8a:bd:c9:
46:ef:5b:6b:b9:d1:60:47:8a:69:3f:e1:a8:a9:ea:
4e:ad:12:60:6c:e1:6c:ed:32:88:d0:43:ca:aa:6e:
cb:e8:00:e3:69:b9:b1:64:32:42:13:c5:fd:04:5b:
b2:0d:5f:65:63:dd:77:c8:6a:44:2d:1e:a0:b9:66:
3e:45:13:8c:94:c3:48:f4:23:a1:e2:b4:02:92:35:
71:9a:d1:e1:fb:5e:2b:f7:61:47:a8:4f:b7:d5:36:
fc:b7:17:cf:7e:e7:69:5a:6d:48:81:5f:29:c6:e2:
d3:1e:9b:1f:0a:00:80:04:b0:86:3c:95:d9:94:31:
b3:29:e2:eb:13:d1:18:56:e0:ef:88:79:d8:5f:45:
d9:86:60:fd:b3:04:73:49:c7:ca:d8:c5:41:76:8a:
1a:ab:70:26:77:3b:46:af:f0:79:53:4f:e0:61:bd:
cc:c8:53:63:b6:e7:24:6c:b4:55:df:5f:ed:c3:8e:
37:82:f2:d3:fd:26:2c:a3:37:0a:81:35:b7:56:6d:
fc:a0:ea:5b:a6:e7:46:40:76:47:f2:80:6d:3d:dc:
a5:4c:ee:51:42:eb:27:cf:59:3c:86:22:4c:6f:e4:
18:e4:75:8e:6e:56:d8:30:b2:a1:3f:0a:d8:8f:e6:
c8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C3:95:CD:B8:BD:21:36:EA:54:39:05:54:C5:C1:89:C8:1D:94:D9
X509v3 Authority Key Identifier:
keyid:1E:B9:AE:8B:F5:95:9F:E8:BF:2E:B8:2B:92:3B:71:7E:FF:31:06:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c6:eb:ad:85:6c:6b:1b:30:f8:14:7d:83:cd:60:19:d9:86:4d:
4f:ca:57:8c:35:ff:41:7d:66:5d:59:b7:94:7b:7b:2c:50:b8:
7b:f1:c2:ff:1c:5a:b0:67:f8:09:48:73:b7:84:d9:2f:77:01:
06:7f:df:24:ea:b9:d5:69:ed:83:05:3f:b8:8f:dd:73:5d:be:
bd:67:d1:32:c4:02:bb:aa:e0:26:fd:c0:c2:ae:09:65:16:36:
2f:e9:52:f0:30:fd:93:41:93:cd:4a:22:1d:76:e9:b6:ec:89:
8b:12:58:d7:20:e7:48:26:59:eb:69:cc:0e:55:db:d6:6b:8c:
ae:e8:1d:33:db:84:74:40:52:05:74:4e:61:f2:fd:a6:c7:2f:
e6:17:bd:f4:64:d9:3b:ab:f1:b9:9d:d9:ab:51:e3:85:5c:0b:
fd:fa:ae:5b:ce:52:ff:9d:76:de:0e:2e:d0:c3:c2:3d:17:26:
8a:c2:25:67:76:f5:02:dd:da:72:7e:55:f0:af:ad:4f:46:b7:
8e:2b:58:6f:47:4e:dc:93:55:35:7d:bb:98:aa:5c:09:77:ad:
f6:48:45:90:25:03:2f:87:cd:46:d2:2a:d6:97:a5:c4:18:83:
a2:ed:d0:57:1d:49:4d:59:4c:20:b7:a5:3f:3a:26:f1:a7:2d:
7d:d0:c3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:59:57 2026 by rpki-client