
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft
File: HRIX74_oS1glUWcbyjXmhEhpJJc.mft (raw, json)
Hash identifier: hBHjYX0ilzerVNz09y7cQXfWNMl3Nc9w45XJGOdaly8=
Subject key identifier: 50:AE:BD:A5:EA:AC:5B:EB:E0:E1:00:D8:52:23:61:AF:BF:E9:E0:88
Authority key identifier: 1D:12:17:EF:8F:E8:4B:58:25:51:67:1B:CA:35:E6:84:48:69:24:97
Certificate issuer: /CN=A91C8BB4/serialNumber=1D1217EF8FE84B582551671BCA35E68448692497
Certificate serial: 0AFB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRIX74_oS1glUWcbyjXmhEhpJJc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft
Manifest number: 0AF1
Signing time: Thu 16 Apr 2026 19:19:03 +0000
Manifest this update: Thu 16 Apr 2026 19:19:03 +0000
Manifest next update: Thu 23 Apr 2026 19:19:03 +0000
Files and hashes: 1: HRIX74_oS1glUWcbyjXmhEhpJJc.crl (hash: C/9Mw+Fo6/0WLLL/xy3d1m0eDLGhuhnx3zhrq5ay0dI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.crl
rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRIX74_oS1glUWcbyjXmhEhpJJc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:19:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2811 (0xafb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8BB4, serialNumber=1D1217EF8FE84B582551671BCA35E68448692497
Validity
Not Before: Apr 16 19:19:03 2026 GMT
Not After : Apr 23 19:19:03 2026 GMT
Subject: CN=69e13627-dd05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ae:63:15:5d:69:09:ba:ed:b2:57:6b:b4:d5:
9e:d6:84:50:98:ea:b2:ee:25:af:13:d2:9d:20:74:
20:88:6a:95:71:3e:d0:5c:f9:31:49:05:8f:fb:9b:
fc:8b:63:9d:42:e4:df:6d:a1:32:05:78:75:c9:bb:
a1:99:d3:3d:17:f4:54:df:2a:7d:25:82:f1:9e:e7:
c0:4a:24:74:0b:48:03:eb:73:a5:d2:b2:41:85:28:
46:a0:38:37:a0:be:2f:81:44:83:12:b3:04:d6:37:
df:8c:74:0b:f7:52:5e:b4:a0:6c:f1:ac:0e:2b:de:
ae:8a:41:da:0a:f3:f5:a4:34:93:c2:e5:e7:1e:58:
49:0d:5b:da:e2:2b:4f:ad:8f:69:0d:80:88:02:00:
c8:24:25:05:42:19:a7:1c:ba:ec:1a:f7:43:ba:f1:
97:0c:d4:e6:23:d5:4a:64:a5:06:d9:d6:90:2e:2e:
40:b4:84:6a:4e:c3:c9:c4:19:c0:52:6c:a7:21:4f:
20:d5:d5:25:eb:70:8f:c8:91:ad:99:eb:81:15:ad:
a8:08:5b:bb:c1:2d:e9:f9:39:12:8d:ef:96:2b:f9:
c0:7f:02:47:5a:e6:6e:ea:a0:f9:15:6b:14:a0:26:
4d:f0:75:d1:66:f9:37:ec:3a:db:db:ef:fe:bd:a8:
97:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:AE:BD:A5:EA:AC:5B:EB:E0:E1:00:D8:52:23:61:AF:BF:E9:E0:88
X509v3 Authority Key Identifier:
keyid:1D:12:17:EF:8F:E8:4B:58:25:51:67:1B:CA:35:E6:84:48:69:24:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRIX74_oS1glUWcbyjXmhEhpJJc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:82:f8:41:39:13:38:ff:de:10:fc:d8:ee:af:c2:f1:d1:a2:
b6:5e:fd:9a:71:fa:51:41:8f:9f:e1:ca:0e:b9:14:54:d4:10:
27:09:66:20:99:c4:c7:69:19:a3:4b:f4:17:95:84:18:0f:98:
02:81:55:be:15:d8:df:86:b7:e3:0b:91:9a:a4:83:df:3d:f0:
e0:2b:a1:b6:27:cb:3d:0d:05:e4:ac:d9:38:36:bc:2d:da:98:
77:af:b6:cc:b4:30:e7:7c:c7:63:0d:2c:d1:f0:1f:28:4b:0a:
8c:2a:3f:cd:38:54:9a:06:51:d8:08:7a:d6:5b:f7:a8:1d:a2:
7a:7a:89:04:90:f2:e4:c2:20:20:a7:b1:c2:8b:db:41:5b:a7:
55:b1:61:f6:fc:9c:0a:35:e3:34:1a:95:f5:a4:7d:12:7e:4d:
c7:7b:68:d8:98:6a:6e:1c:87:eb:9c:95:0d:ed:9c:8a:fb:88:
b6:2c:80:af:77:29:91:d8:d2:3b:99:5f:1c:d9:57:d0:8b:e4:
47:72:a8:b9:43:bf:86:86:2b:a0:ae:54:aa:50:3e:c8:ef:35:
cf:e7:56:41:95:86:ad:a2:fb:d1:27:64:c6:f2:75:a2:36:82:
f0:34:2f:04:64:a4:c1:bc:f8:d3:60:48:4d:da:9a:db:19:d0:
98:b9:3d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:25:52 2026 by rpki-client