
$ rpki-client -vvf rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft
File: hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft (raw, json)
Hash identifier: eYm+qUeFK0OTE4puuGiLu/3FveJbQYkF+Q2lZU2ycM0=
Subject key identifier: 9C:C5:D9:B6:F3:4D:FE:E4:05:EE:F6:4D:DD:34:0E:29:19:BB:BA:75
Authority key identifier: 87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56
Certificate issuer: /CN=A91982EF/serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656
Certificate serial: 012C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft
Manifest number: 010C
Signing time: Fri 17 Apr 2026 05:53:38 +0000
Manifest this update: Fri 17 Apr 2026 05:53:37 +0000
Manifest next update: Fri 24 Apr 2026 05:53:37 +0000
Files and hashes: 1: hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl (hash: uRBkI/nUNcjnT1FZakb/F/pMUnKnT6MblQ5YlkZ2Zhk=)
2: F33309A2B72011EFB3A5D772C4F9AE02.roa (hash: HYHec9orOca+00gsDqMx8Gss9C7gqHvPJgzKMMmNDKk=)
3: 1A3A1E2C287D11F18C83C945A7833773.roa (hash: Tw9tkubBBNCNa0WzdkiGoAB9GeB7p8eEnqNQk5A660Q=)
4: 98AEAB84B72111EF8A087D30C4F9AE02.roa (hash: j2Hz+mynGpqLJnmZlqehevWYxoqbcW99ZISJiOfwTiY=)
5: 3A8C7518B72111EFA9A92F26C4F9AE02.roa (hash: wy1fO8emrrb11LIF29YjzsQF2VR/akidMRTHMxAcTfI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl
rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:53:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 300 (0x12c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91982EF, serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656
Validity
Not Before: Apr 17 05:53:37 2026 GMT
Not After : Apr 24 05:53:37 2026 GMT
Subject: CN=69e1cae2-1099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0b:f6:a9:0a:a7:c7:6e:5d:2a:2a:69:3b:40:
5b:7a:36:f1:05:0f:37:b7:9e:e0:11:d1:4b:04:3e:
e7:f6:a2:9c:17:7d:a7:e4:46:0f:37:f4:90:53:fd:
dd:bc:18:09:74:46:0c:d5:5b:25:aa:84:55:d1:e6:
8d:8c:c7:14:17:fd:9b:0b:30:c6:68:fa:9b:66:81:
06:a6:29:da:87:1b:00:de:11:d4:81:88:e9:9c:67:
6a:a7:df:e2:8e:df:cf:ae:bd:cc:da:2a:08:8c:8a:
8a:78:25:bd:6e:01:23:af:a7:de:38:d8:43:16:45:
90:d8:09:fa:20:66:ea:fb:5d:c0:cb:a0:86:93:28:
14:be:43:bf:ed:dc:41:b1:e2:ea:84:6c:aa:14:c5:
11:73:2e:ca:06:4a:bf:8c:51:ba:c1:2a:0b:0b:b5:
d4:3a:18:ba:85:23:a5:49:e0:24:4a:27:a8:24:c2:
27:f1:f1:53:c3:19:c7:c6:2a:a8:83:11:18:ab:d6:
eb:c9:a4:d9:40:2d:10:23:f9:e2:6a:68:21:69:90:
e1:35:e9:c6:63:ca:1c:ef:e5:91:fd:80:63:6e:90:
67:70:26:88:d8:f7:13:91:ef:d9:49:7d:1b:5b:a7:
60:bb:f8:12:61:18:cf:30:b2:6a:6c:ae:39:74:98:
77:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C5:D9:B6:F3:4D:FE:E4:05:EE:F6:4D:DD:34:0E:29:19:BB:BA:75
X509v3 Authority Key Identifier:
keyid:87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:17:d9:1d:2c:d8:5a:36:77:bc:b7:df:c7:03:bd:8b:f4:66:
2a:3f:2e:a0:91:54:50:2c:7e:f1:e1:b6:4d:00:f0:02:ac:f2:
fa:b5:b5:ed:79:c1:6a:a5:7f:7a:b7:41:2e:36:9f:e9:06:2c:
f1:98:fd:1a:72:f0:23:4c:9a:1c:e4:39:e1:9a:16:eb:e1:21:
db:c1:c0:00:33:59:d0:c4:1b:63:e6:ed:11:93:e1:ee:40:3c:
53:a4:18:62:c3:8f:e8:a8:c5:a9:83:f3:5a:18:3f:07:44:f2:
4c:ff:b8:90:79:94:78:cc:e8:2f:f3:24:76:4e:a2:83:07:8e:
00:e2:61:32:c0:64:fa:66:d1:0f:cc:25:cd:e4:8d:7e:27:f9:
99:4b:4f:89:6d:24:e1:b7:8f:92:11:e9:9a:2c:b5:0c:48:63:
98:73:41:9a:d2:7b:3d:68:19:c8:fa:e8:c4:7e:63:00:e7:05:
c5:b7:4d:34:9c:f9:de:70:74:dc:01:f4:04:5d:8d:57:de:38:
53:1d:0e:c7:55:59:28:a0:4c:73:0c:82:ad:a4:c9:58:66:6b:
03:a4:7b:9a:ee:de:b0:ce:a3:35:89:74:a0:de:97:83:a7:cd:
3d:11:55:e3:93:52:9b:20:05:2c:dd:ea:41:98:1f:ba:8b:a0:
70:87:14:d6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTgyRUYxMTAvBgNVBAUTKDg3MTk3RkQ1NDZEQzMxNTIzMTExREQ5MzkwQjFCQTNG
M0Q3MDI2NTYwHhcNMjYwNDE3MDU1MzM3WhcNMjYwNDI0MDU1MzM3WjAYMRYwFAYD
VQQDEw02OWUxY2FlMi0xMDk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvQv2qQqnx25dKippO0BbejbxBQ83t57gEdFLBD7n9qKcF32n5EYPN/SQU/3d
vBgJdEYM1VslqoRV0eaNjMcUF/2bCzDGaPqbZoEGpinahxsA3hHUgYjpnGdqp9/i
jt/Prr3M2ioIjIqKeCW9bgEjr6feONhDFkWQ2An6IGbq+13Ay6CGkygUvkO/7dxB
seLqhGyqFMURcy7KBkq/jFG6wSoLC7XUOhi6hSOlSeAkSieoJMIn8fFTwxnHxiqo
gxEYq9bryaTZQC0QI/niamghaZDhNenGY8oc7+WR/YBjbpBncCaI2PcTke/ZSX0b
W6dgu/gSYRjPMLJqbK45dJh3KwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJzF2bbz
Tf7kBe72Td00DikZu7p1MB8GA1UdIwQYMBaAFIcZf9VG3DFSMRHdk5Cxuj89cCZW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODJFRi9GQzY1MEI3MkI3
MUQxMUVGODk4MkM0MENDNEY5QUUwMi9oeGxfMVViY01WSXhFZDJUa0xHNlB6MXdK
bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2h4bF8xVWJjTVZJeEVkMlRrTEc2UHoxd0psWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
ODJFRi9GQzY1MEI3MkI3MUQxMUVGODk4MkM0MENDNEY5QUUwMi9oeGxfMVViY01W
SXhFZDJUa0xHNlB6MXdKbFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYBfZHSzYWjZ3vLffxwO9i/RmKj8uoJFUUCx+8eG2TQDwAqzy+rW17XnBaqV/
erdBLjaf6QYs8Zj9GnLwI0yaHOQ54ZoW6+Eh28HAADNZ0MQbY+btEZPh7kA8U6QY
YsOP6KjFqYPzWhg/B0TyTP+4kHmUeMzoL/Mkdk6igweOAOJhMsBk+mbRD8wlzeSN
fif5mUtPiW0k4bePkhHpmiy1DEhjmHNBmtJ7PWgZyProxH5jAOcFxbdNNJz53nB0
3AH0BF2NV944Ux0Ox1VZKKBMcwyCraTJWGZrA6R7mu7esM6jNYl0oN6Xg6fNPRFV
45NSmyAFLN3qQZgfuougcIcU1g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:25:25 2026 by rpki-client