
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft
File: hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft (raw, json)
Hash identifier: cqZVWySrV4ugPH/BI7EoWPKLDjTy52BeYxwYSBGaHzs=
Subject key identifier: 6E:16:10:41:97:4C:10:74:88:0D:87:4A:7B:A5:4F:C8:AA:C1:3D:91
Authority key identifier: 87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56
Certificate issuer: /CN=A91982EF/serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656
Certificate serial: 0185
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft
Manifest number: 0160
Signing time: Fri 25 Sep 2026 05:19:01 +0000
Manifest this update: Fri 25 Sep 2026 05:19:01 +0000
Manifest next update: Fri 02 Oct 2026 05:19:01 +0000
Files and hashes: 1: hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl (hash: YRyCwN7PnFyr1M3k8qYxvu/G2eanbFYQmNykJgFYL1w=)
2: F33309A2B72011EFB3A5D772C4F9AE02.roa (hash: n9XHNHcl2xF8ubtL4a2OwVIihOJ0QV9E2Gddb2c8vlo=)
3: 1A3A1E2C287D11F18C83C945A7833773.roa (hash: ZCfKBgXebATm3jCXx6esyXYyxCluZLc0GUaxOph0UXs=)
4: 3A8C7518B72111EFA9A92F26C4F9AE02.roa (hash: O/afFCUP8vi3DtNxbtCLXq4PUJjWlL9Mty/w2HiZ0No=)
5: 98AEAB84B72111EF8A087D30C4F9AE02.roa (hash: d33D0nn4vSuDr9mrd9PxLM5FRlHIJ8B/2JN7+OeYbXY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl
rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 05:19:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 389 (0x185)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91982EF, serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656
Validity
Not Before: Sep 25 05:19:01 2026 GMT
Not After : Oct 2 05:19:01 2026 GMT
Subject: CN=6ab60445-e94e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:3d:56:15:e7:a0:5c:cf:46:30:3f:2d:0a:fe:
63:6b:19:62:47:de:d8:df:5c:b5:63:1e:75:b5:f3:
09:03:f2:e8:ac:73:af:d4:21:60:39:b4:a4:19:91:
92:38:30:63:cb:c7:af:2d:bf:82:2b:5c:13:33:d0:
eb:bf:78:66:0b:72:4e:45:c0:09:5d:25:ec:79:df:
c5:18:dd:1f:09:4c:43:5c:59:c7:24:74:3a:92:01:
ab:c5:3a:11:f4:97:10:cf:f5:57:f6:71:77:4a:74:
f1:c5:f8:35:3d:aa:ad:b0:dd:ec:6d:85:d5:54:9f:
1a:4a:0d:49:ca:24:c3:1c:20:3c:2b:14:1c:a9:36:
9c:df:a0:b7:34:f9:6a:cf:1f:f1:df:9d:56:09:4d:
f9:c0:be:7b:9a:97:bd:29:c0:2c:97:ca:5f:e6:b1:
ea:3f:b8:c2:68:17:cd:96:2b:b0:f5:56:58:de:d4:
8d:14:90:02:0e:1d:15:8f:36:31:72:8f:7b:1c:90:
c1:67:73:ad:75:9d:2b:99:76:f3:3d:0c:07:f7:52:
a8:b8:26:03:1b:ab:c6:c4:67:a4:d5:f2:89:a8:2c:
3e:fb:32:cc:ed:6c:2d:8f:0c:d0:19:5d:8c:5d:de:
34:0a:d1:0f:78:14:15:77:2b:88:6b:6a:7d:4e:a1:
4c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:16:10:41:97:4C:10:74:88:0D:87:4A:7B:A5:4F:C8:AA:C1:3D:91
X509v3 Authority Key Identifier:
keyid:87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:15:31:34:f4:2e:91:45:45:cd:6d:d7:b9:18:e8:03:75:d0:
c6:93:0c:d0:c2:ff:3b:a8:b6:3d:e7:14:56:94:ff:35:80:a9:
17:51:40:6d:f5:ac:47:f4:71:d8:65:3f:4d:a5:1e:6b:12:0f:
21:0a:0f:4b:2f:df:61:41:3b:c0:ca:86:22:59:a4:1b:b6:be:
6d:3f:95:f1:1c:2d:fb:c8:f0:e4:f9:92:82:d4:89:76:8d:b6:
31:49:12:5f:d8:86:2b:28:4b:e5:4b:ce:cb:a2:ac:31:cd:ac:
e6:d7:d4:6d:2f:6a:02:9d:3e:fa:f3:3e:7f:21:56:c3:83:f5:
aa:3f:ae:69:05:83:bc:2a:ea:dd:d4:12:18:33:fe:bf:b5:5a:
13:fa:e6:be:34:78:ca:4d:d7:eb:e2:4a:41:c9:4a:c1:52:22:
7c:d9:63:7d:3f:f1:9a:5b:09:5a:18:21:06:fd:37:d4:e6:e1:
b7:09:df:58:a4:1d:a3:9b:48:d3:95:cf:b9:07:9f:a9:80:a5:
c5:cb:f8:43:f5:33:5e:ca:42:b8:25:73:c8:54:c8:1f:87:55:
7c:c7:51:8f:08:dd:f8:6f:4c:77:6b:ec:f8:91:68:b5:73:36:
8e:bb:b6:f4:dd:0a:7d:86:29:08:47:38:4c:40:93:d2:fd:f9:
e9:a2:a9:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:27:44 2026 by rpki-client