
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.mft
File: hseUaUaypXsFbwKyeTQNMMLOSbQ.mft (raw, json)
Hash identifier: LWVQP+WJyJ4aDIKUalCHL3+659uPKpQXcf0a1+TmUf8=
Subject key identifier: D9:1F:3B:53:5B:46:03:1D:D2:BA:5A:32:FC:BF:16:F4:86:8D:CD:AE
Authority key identifier: 86:C7:94:69:46:B2:A5:7B:05:6F:02:B2:79:34:0D:30:C2:CE:49:B4
Certificate issuer: /CN=A9120B99/serialNumber=86C7946946B2A57B056F02B279340D30C2CE49B4
Certificate serial: 360C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.mft
Manifest number: 35CE
Signing time: Wed 22 Jul 2026 14:24:01 +0000
Manifest this update: Wed 22 Jul 2026 14:24:00 +0000
Manifest next update: Wed 29 Jul 2026 14:24:00 +0000
Files and hashes: 1: hseUaUaypXsFbwKyeTQNMMLOSbQ.crl (hash: CkoZO6DEjIj2McGbYxMccVuOrFQsi0whTzAcqJ6fHIw=)
2: 2BB9C0962D3511F1BEC8C490BD833773.roa (hash: M2/DOJue81Ta3Rj5Fa3xRuzMgODRNGvnffODxr3mNPw=)
3: 8E3D04582E6111F1B6525AEF9C833773.roa (hash: vj80xxBZZ47KcJ0pnAomU1A+ji7M1/hFg9BFpv3vEYM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.crl
rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 14:23:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13836 (0x360c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120B99, serialNumber=86C7946946B2A57B056F02B279340D30C2CE49B4
Validity
Not Before: Jul 22 14:24:00 2026 GMT
Not After : Jul 29 14:24:00 2026 GMT
Subject: CN=6a60d281-4900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b8:93:3b:af:47:12:1e:70:12:33:93:9c:f3:
68:18:c8:3e:a7:71:95:33:d3:67:8d:21:04:b1:9b:
8d:49:bf:ec:20:49:39:d9:3f:24:6b:e2:ee:dc:6c:
eb:d0:b9:aa:2a:17:f2:b0:cc:2b:91:5b:d7:16:53:
c5:79:ee:ca:4b:cd:4f:56:b0:a2:23:25:7d:ef:f6:
b2:15:2c:8c:e5:f1:9b:43:02:c6:eb:ee:e5:89:bd:
0a:38:76:0b:7a:2d:75:a2:d5:01:04:ee:27:6c:63:
0d:3d:fd:0e:bb:63:7e:9e:89:2e:12:a1:eb:60:95:
2f:11:8a:15:fd:65:8d:e0:4e:9c:f1:3a:ad:8a:f6:
3d:2f:83:a8:a7:8d:86:61:1d:54:6c:75:49:7b:80:
79:a1:c9:67:0a:79:df:75:93:ee:42:c0:6f:50:39:
8a:fe:5b:f5:95:73:d4:83:aa:6a:34:41:a3:34:94:
a3:97:5c:11:84:22:fe:21:72:72:11:c9:70:01:ba:
ce:1d:45:af:9d:f7:3a:00:4a:85:9b:ac:7e:1c:1f:
2c:7e:1a:39:53:2e:bf:4f:ee:9b:e3:c7:55:e4:8c:
6a:b6:5f:27:80:24:c5:53:05:e7:37:e8:a8:a7:3d:
91:72:26:7d:6b:92:10:3f:f4:a0:6c:45:31:b1:39:
22:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:1F:3B:53:5B:46:03:1D:D2:BA:5A:32:FC:BF:16:F4:86:8D:CD:AE
X509v3 Authority Key Identifier:
keyid:86:C7:94:69:46:B2:A5:7B:05:6F:02:B2:79:34:0D:30:C2:CE:49:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:38:93:6e:f8:99:f5:70:71:df:61:6c:a6:39:80:59:25:ae:
dc:79:7a:57:c4:d9:3a:b3:17:e2:cc:27:cd:8e:06:97:a7:22:
57:e5:63:8f:e2:22:ae:e5:a9:62:db:a8:c7:d8:cf:61:03:8c:
29:54:05:1f:42:cb:12:cd:a4:7d:dc:d8:6f:b0:e1:cb:df:91:
9d:d1:f1:84:00:0f:12:17:93:3f:b4:85:25:4c:2f:59:27:f4:
65:af:00:04:f3:01:82:83:2a:84:fb:8b:d6:7d:06:f9:a9:31:
ac:fc:52:1d:6c:d6:bf:b4:45:d4:0b:28:44:b6:09:64:dc:bf:
6f:3d:fe:98:c6:04:69:cd:71:84:d6:0e:9f:49:8c:8b:5a:71:
f7:c0:b7:f1:fd:be:bc:fc:a2:fd:cd:6f:17:34:f5:5d:be:f5:
e7:72:e5:f0:7b:9d:7d:1c:bc:f0:0c:32:21:9e:bc:8d:02:d1:
db:28:cd:38:b7:84:73:e9:73:7c:8c:81:6e:9d:54:6e:af:65:
b5:04:9a:60:0d:cc:32:9b:15:9d:84:27:ec:82:1a:4e:6f:77:
d8:bb:98:e9:41:0e:4c:31:f5:75:94:51:87:9d:63:4c:0b:ff:
4d:3f:cf:43:2a:d1:1f:39:64:a8:9a:be:fe:ad:82:c9:4a:16:
ee:a9:0b:a3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjBCOTkxMTAvBgNVBAUTKDg2Qzc5NDY5NDZCMkE1N0IwNTZGMDJCMjc5MzQwRDMw
QzJDRTQ5QjQwHhcNMjYwNzIyMTQyNDAwWhcNMjYwNzI5MTQyNDAwWjAYMRYwFAYD
VQQDEw02YTYwZDI4MS00OTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo7iTO69HEh5wEjOTnPNoGMg+p3GVM9NnjSEEsZuNSb/sIEk52T8ka+Lu3Gzr
0LmqKhfysMwrkVvXFlPFee7KS81PVrCiIyV97/ayFSyM5fGbQwLG6+7lib0KOHYL
ei11otUBBO4nbGMNPf0Ou2N+nokuEqHrYJUvEYoV/WWN4E6c8TqtivY9L4Oop42G
YR1UbHVJe4B5oclnCnnfdZPuQsBvUDmK/lv1lXPUg6pqNEGjNJSjl1wRhCL+IXJy
EclwAbrOHUWvnfc6AEqFm6x+HB8sfho5Uy6/T+6b48dV5Ixqtl8ngCTFUwXnN+io
pz2RciZ9a5IQP/SgbEUxsTkiwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNkfO1Nb
RgMd0rpaMvy/FvSGjc2uMB8GA1UdIwQYMBaAFIbHlGlGsqV7BW8Csnk0DTDCzkm0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEI5OS9EM0Y5MDUxQzFE
ODMxMUUyQjRFRDVDRDkwOEIwMkNEMi9oc2VVYVVheXBYc0Zid0t5ZVRRTk1NTE9T
YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hzZVVhVWF5cFhzRmJ3S3llVFFOTU1MT1NiUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MEI5OS9EM0Y5MDUxQzFEODMxMUUyQjRFRDVDRDkwOEIwMkNEMi9oc2VVYVVheXBY
c0Zid0t5ZVRRTk1NTE9TYlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASjiTbviZ9XBx32FspjmAWSWu3Hl6V8TZOrMX4swnzY4Gl6ciV+Vjj+IiruWp
Ytuox9jPYQOMKVQFH0LLEs2kfdzYb7Dhy9+RndHxhAAPEheTP7SFJUwvWSf0Za8A
BPMBgoMqhPuL1n0G+akxrPxSHWzWv7RF1AsoRLYJZNy/bz3+mMYEac1xhNYOn0mM
i1px98C38f2+vPyi/c1vFzT1Xb7153Ll8HudfRy88AwyIZ68jQLR2yjNOLeEc+lz
fIyBbp1Ubq9ltQSaYA3MMpsVnYQn7IIaTm932LuY6UEOTDH1dZRRh51jTAv/TT/P
QyrRHzlkqJq+/q2CyUoW7qkLow==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:06:12 2026 by rpki-client