
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft
File: HRIX74_oS1glUWcbyjXmhEhpJJc.mft (raw, json)
Hash identifier: ifRCKsrZkF0OjjRdjMzY+qRml8UTi/kos9/v7dpPDZU=
Subject key identifier: 3B:4C:61:15:D7:58:D7:1F:36:94:05:F7:AD:3D:89:02:0F:1E:35:7F
Authority key identifier: 1D:12:17:EF:8F:E8:4B:58:25:51:67:1B:CA:35:E6:84:48:69:24:97
Certificate issuer: /CN=A91C8BB4/serialNumber=1D1217EF8FE84B582551671BCA35E68448692497
Certificate serial: 0B55
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRIX74_oS1glUWcbyjXmhEhpJJc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft
Manifest number: 0B4B
Signing time: Thu 08 Oct 2026 19:22:13 +0000
Manifest this update: Thu 08 Oct 2026 19:22:13 +0000
Manifest next update: Thu 15 Oct 2026 19:22:13 +0000
Files and hashes: 1: HRIX74_oS1glUWcbyjXmhEhpJJc.crl (hash: 7pYC590BRMQMpePUsaee/UcSwaPBUoNbO09PavErUcM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.crl
rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRIX74_oS1glUWcbyjXmhEhpJJc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 19:22:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2901 (0xb55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8BB4, serialNumber=1D1217EF8FE84B582551671BCA35E68448692497
Validity
Not Before: Oct 8 19:22:13 2026 GMT
Not After : Oct 15 19:22:13 2026 GMT
Subject: CN=6ac7ed65-c194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c8:04:aa:6b:aa:38:e0:a6:2d:2b:76:f6:d6:
3c:40:58:db:51:fc:59:91:eb:01:90:05:89:f6:08:
07:a0:f3:16:24:12:33:8d:6b:63:c5:8a:65:60:db:
eb:6a:f2:c1:3f:a6:a8:e8:2f:c9:57:5d:15:ee:fd:
83:7b:29:b6:bc:59:ad:09:9d:a7:65:88:38:34:8a:
78:c3:cf:b7:54:f1:ef:ec:76:ed:a4:99:63:4a:75:
05:ad:b3:6c:9e:29:5d:de:04:f6:28:bc:37:f1:1c:
1f:2b:d6:c4:ea:d9:5a:20:e3:a0:3b:42:97:2a:f8:
09:5f:5c:40:f3:06:6a:19:da:f3:48:24:0a:a1:65:
0c:50:eb:03:36:df:ab:b1:4d:88:df:6c:47:3d:23:
02:4a:3a:57:7a:0a:86:e0:70:10:16:5b:e5:08:5a:
63:c7:3f:3c:66:97:fe:14:e0:33:79:d5:ac:db:d2:
43:cf:e0:8f:5f:13:04:cd:ff:95:fa:25:5a:13:9e:
28:3f:42:bc:90:4f:6a:fc:34:f9:8d:c0:71:ea:9e:
5d:4f:8d:1e:92:76:a2:f6:98:f0:13:2b:70:85:20:
ae:08:b5:be:27:63:b3:6f:b1:26:d3:8f:7c:ce:68:
fc:73:0f:7a:61:73:22:8e:c5:67:59:24:c1:36:ca:
9e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:4C:61:15:D7:58:D7:1F:36:94:05:F7:AD:3D:89:02:0F:1E:35:7F
X509v3 Authority Key Identifier:
keyid:1D:12:17:EF:8F:E8:4B:58:25:51:67:1B:CA:35:E6:84:48:69:24:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRIX74_oS1glUWcbyjXmhEhpJJc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:0a:1f:07:61:a7:9c:6e:f2:6d:68:2b:a1:fe:fb:bd:a3:d6:
73:b5:d9:4c:44:d3:31:6f:4c:85:f5:84:40:50:7d:10:83:20:
69:0d:82:5c:f1:c1:41:ba:cc:23:3a:0b:45:7b:c7:40:e1:ba:
e4:b0:8f:1d:c4:b4:ab:77:55:c1:8b:db:49:30:04:9b:99:70:
8b:bf:f4:be:bb:a3:93:36:a6:2e:f5:70:97:2a:30:e1:73:14:
5b:f6:87:89:e3:f2:27:3d:10:4d:57:7f:28:e4:90:90:4d:bf:
6b:4d:3a:9f:ca:b5:89:b2:1c:b0:8a:cb:58:af:24:dc:db:23:
40:a6:ce:74:28:95:ac:43:da:bc:1b:47:42:cc:23:15:cc:86:
27:d8:76:d7:f4:9f:71:e7:8a:35:03:b1:c4:fe:12:4f:52:70:
5d:18:75:39:47:6f:79:15:23:de:4b:88:40:c5:95:18:ac:c8:
08:ce:63:b3:a6:54:9c:a1:fe:e8:86:c3:57:ac:a5:81:3e:d4:
13:7e:30:51:aa:ba:b2:25:c1:3c:99:8e:e1:00:a2:27:86:37:
3b:8d:b7:32:d3:99:82:6d:fb:21:6c:26:c8:53:79:de:21:80:
18:92:b0:0d:e5:7f:f9:0e:64:47:92:f3:cc:2c:da:c5:dd:88:
64:90:3f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 09:22:51 2026 by rpki-client