
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft
File: HRIX74_oS1glUWcbyjXmhEhpJJc.mft (raw, json)
Hash identifier: Cpe+Q7xEhYX7bfjh48AyQVStdnfNVF3qYxcSqgHFXi4=
Subject key identifier: D9:CC:14:1C:D9:7B:AA:FB:49:85:7F:8D:B3:CE:A3:90:DD:CE:05:B7
Authority key identifier: 1D:12:17:EF:8F:E8:4B:58:25:51:67:1B:CA:35:E6:84:48:69:24:97
Certificate issuer: /CN=A91C8BB4/serialNumber=1D1217EF8FE84B582551671BCA35E68448692497
Certificate serial: 0AE3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRIX74_oS1glUWcbyjXmhEhpJJc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft
Manifest number: 0AD9
Signing time: Sun 01 Mar 2026 23:31:16 +0000
Manifest this update: Sun 01 Mar 2026 23:31:15 +0000
Manifest next update: Sun 08 Mar 2026 23:31:15 +0000
Files and hashes: 1: HRIX74_oS1glUWcbyjXmhEhpJJc.crl (hash: pY//qU8S7/g9p8Zp5gIrxgFIpQF3WOOTT3giGblacgA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.crl
rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRIX74_oS1glUWcbyjXmhEhpJJc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:31:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2787 (0xae3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8BB4, serialNumber=1D1217EF8FE84B582551671BCA35E68448692497
Validity
Not Before: Mar 1 23:31:15 2026 GMT
Not After : Mar 8 23:31:15 2026 GMT
Subject: CN=69a4cc44-2336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f4:3f:2b:80:8e:6a:21:78:fb:fb:ca:24:d2:
2e:1b:45:4a:f1:77:ee:c1:92:76:e5:e8:dd:8c:bd:
3f:af:5b:a1:06:39:c0:d9:9e:19:62:d8:e7:db:3c:
1e:44:a2:8f:eb:7c:c0:0e:e9:29:0b:0c:7a:05:6e:
a7:ab:d6:8e:5d:e3:f6:43:15:49:6d:b3:d6:fa:d3:
1f:89:96:46:7b:03:84:bc:d0:b1:2b:73:f0:cf:b1:
a0:a0:72:ef:b6:b5:e9:43:c0:8c:91:bf:76:81:24:
dd:2d:ff:5a:7e:2b:6d:79:bd:b3:53:89:02:8c:0a:
7c:8c:c5:12:8e:ca:f6:9b:5d:32:b2:20:fb:fd:98:
f0:7d:de:c1:f0:31:39:ee:25:bb:e2:01:d0:08:89:
71:d6:40:2e:f6:73:a3:00:a3:5a:e8:dc:16:0c:7b:
49:04:53:c7:4b:04:05:4f:45:67:d6:6e:47:51:8a:
ec:ac:f1:8c:f2:5c:b9:bf:f4:f1:01:ce:cb:b9:69:
1b:81:e1:5f:e0:eb:56:42:76:8e:ca:fa:38:cd:e3:
26:89:18:6e:7a:e7:68:d2:60:5d:c7:9a:26:8e:d1:
53:9a:e0:7c:58:57:3d:b0:50:55:84:72:35:c7:4c:
91:fa:70:e8:f9:ef:33:63:df:a8:de:50:9a:1d:df:
e6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:CC:14:1C:D9:7B:AA:FB:49:85:7F:8D:B3:CE:A3:90:DD:CE:05:B7
X509v3 Authority Key Identifier:
keyid:1D:12:17:EF:8F:E8:4B:58:25:51:67:1B:CA:35:E6:84:48:69:24:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRIX74_oS1glUWcbyjXmhEhpJJc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:61:db:c5:3e:2a:85:c4:a5:45:84:30:5c:83:58:6d:05:6d:
13:6e:a7:28:2b:64:ea:3f:73:38:a7:72:2d:41:c8:26:14:40:
6d:28:10:31:6c:32:f1:02:37:d0:d2:66:19:c1:e0:d0:a0:bb:
86:4e:68:d6:6e:28:1b:f2:46:d1:25:2d:4b:a0:85:4a:b3:eb:
6b:1d:6c:b1:c2:97:ba:8f:86:99:f0:5d:ca:d9:3f:b4:7c:0f:
11:4f:73:7c:a9:cb:4d:66:64:d7:92:0c:45:4c:0f:29:e2:76:
e6:c2:a3:7f:4e:14:3b:69:04:fb:35:63:eb:c6:4b:71:4f:d0:
0d:d6:b5:b8:5b:58:aa:e0:27:3a:11:47:a7:c7:5f:73:37:44:
a3:1e:ba:8a:cb:40:9b:3f:35:18:a4:86:d4:81:16:2b:4a:d8:
81:09:a4:dd:01:33:10:20:87:58:7d:b3:34:c5:54:b5:16:11:
f6:50:8f:23:72:ad:a7:31:70:7c:30:ca:f2:3e:a4:af:eb:7e:
14:ed:72:f7:64:9f:07:27:b8:83:5c:b5:88:09:07:58:2e:78:
b9:b1:79:2f:eb:97:60:bc:7f:fb:3e:78:a5:aa:f2:22:d7:bc:
4b:a0:b4:2d:70:ce:7d:1d:60:f1:a3:bb:bb:2a:77:29:fc:75:
8d:45:d8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:42:31 2026 by rpki-client