
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/HdG4aHiGkkxGExFgUO6Q6dSUJp4.mft
File: HdG4aHiGkkxGExFgUO6Q6dSUJp4.mft (raw, json)
Hash identifier: xH97Ts9ZsySHRtEQc4QfxjkoigHjZanO/GN3f2SaFR4=
Subject key identifier: 7C:A6:8B:CC:10:6B:83:D8:EA:5A:34:62:52:06:F9:98:13:E4:59:63
Authority key identifier: 1D:D1:B8:68:78:86:92:4C:46:13:11:60:50:EE:90:E9:D4:94:26:9E
Certificate issuer: /CN=A911D848/serialNumber=1DD1B8687886924C4613116050EE90E9D494269E
Certificate serial: 013D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdG4aHiGkkxGExFgUO6Q6dSUJp4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/HdG4aHiGkkxGExFgUO6Q6dSUJp4.mft
Manifest number: 012F
Signing time: Mon 11 May 2026 05:51:51 +0000
Manifest this update: Mon 11 May 2026 05:51:50 +0000
Manifest next update: Mon 18 May 2026 05:51:50 +0000
Files and hashes: 1: HdG4aHiGkkxGExFgUO6Q6dSUJp4.crl (hash: MuK51FlqZK9g1S9dAL9f/rq69oNm+9mwyvjKQYMkUzA=)
2: F0C8DB1CA54E11EF8592FD66C4F9AE02.roa (hash: N51VbptkWVgsgU5QWmECxTG7x4Sh2baOj7rAhNlJuzU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/HdG4aHiGkkxGExFgUO6Q6dSUJp4.crl
rsync://rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/HdG4aHiGkkxGExFgUO6Q6dSUJp4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdG4aHiGkkxGExFgUO6Q6dSUJp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 05:51:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 317 (0x13d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D848, serialNumber=1DD1B8687886924C4613116050EE90E9D494269E
Validity
Not Before: May 11 05:51:50 2026 GMT
Not After : May 18 05:51:50 2026 GMT
Subject: CN=6a016e77-5edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4e:1e:05:78:63:5d:08:c3:e4:d5:50:9e:e3:
74:07:e8:fb:ba:86:14:23:da:cb:5a:aa:5e:ad:be:
0a:02:16:82:4c:b4:cf:03:00:34:28:03:68:8d:6d:
eb:c2:fe:60:9e:23:f8:37:d2:5f:ae:83:fe:ec:da:
5b:a6:5e:77:24:2f:fd:ac:6d:b2:9a:84:a6:5e:e6:
ae:8a:57:00:4d:29:f7:24:84:28:30:46:91:3f:b7:
34:7b:17:7b:31:af:1c:72:68:a8:97:52:3d:db:07:
cd:18:e3:39:44:dd:54:f4:7f:26:08:09:67:60:0e:
47:b3:9a:f2:c9:47:91:af:e8:c2:47:0f:99:40:3f:
8d:38:b9:5b:a7:ac:5a:4d:17:29:22:ed:b9:0b:77:
80:d0:e4:76:16:c8:36:8d:ed:71:51:8b:d8:11:87:
71:dd:19:c8:77:ea:e3:ec:14:fc:a1:96:c9:2e:a1:
75:4b:2e:3f:5c:94:fc:c0:36:3f:9c:b0:86:82:91:
65:59:31:ce:9b:29:5b:43:d4:96:54:b3:fb:d3:c7:
e8:b5:a1:81:f2:d2:2e:2e:b7:6c:b9:c7:c4:64:96:
d5:3c:bb:6d:07:5e:22:3b:92:c0:28:26:65:97:b0:
cb:d8:ff:67:9d:b4:51:e7:d8:61:bd:37:e1:27:76:
e5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A6:8B:CC:10:6B:83:D8:EA:5A:34:62:52:06:F9:98:13:E4:59:63
X509v3 Authority Key Identifier:
keyid:1D:D1:B8:68:78:86:92:4C:46:13:11:60:50:EE:90:E9:D4:94:26:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/HdG4aHiGkkxGExFgUO6Q6dSUJp4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdG4aHiGkkxGExFgUO6Q6dSUJp4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/HdG4aHiGkkxGExFgUO6Q6dSUJp4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:0d:4f:9d:9b:cc:f8:f4:48:57:eb:f1:be:dc:f1:b9:05:f7:
f6:e4:40:52:69:a1:35:14:ab:38:70:67:1c:d7:15:2e:ca:74:
fb:24:db:da:27:64:52:81:d4:83:18:ad:fb:01:fd:a8:23:e5:
d8:a2:6e:24:29:49:7b:85:3f:d4:bc:31:2e:42:df:f7:fa:e3:
8b:32:f0:a2:d1:f2:c2:ec:67:66:9d:b8:5a:f1:a1:56:27:17:
54:14:a1:f1:b8:bb:c3:b7:25:23:55:36:23:3d:43:d4:bd:3a:
a0:e5:ba:2b:b7:2b:0d:f7:9a:72:f3:66:7c:7a:8f:22:51:55:
25:54:63:63:39:08:0b:c4:eb:cb:e3:38:d6:98:c5:c5:19:54:
e6:14:a5:81:6f:55:5e:cb:34:08:df:94:c3:d2:96:b5:bf:b1:
40:01:a5:c6:a9:78:f9:4a:3e:87:04:1a:1b:a9:7b:03:f5:a1:
d7:99:ac:8f:38:bd:77:f7:10:7b:fa:fb:07:11:67:ba:6d:cf:
3b:74:8e:df:f1:3e:cb:98:98:69:4a:7a:fa:ea:74:ea:48:67:
b0:03:5a:7a:f2:06:b2:c1:37:e0:1f:63:9e:58:f8:9a:3c:b4:
40:c7:ca:7c:3e:c6:ec:5d:0e:7d:1c:e1:5b:dd:46:d3:3d:e7:
7a:85:1a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:01:17 2026 by rpki-client