
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.mft
File: hdbxhJPYoIzHKxsJHUr1T48KKLM.mft (raw, json)
Hash identifier: yKZvkM/O9lT6UYeQQiv7xyIP4P5lAodu/PQofMZudtg=
Subject key identifier: F3:2F:2F:67:63:D2:31:3D:24:6D:4D:0B:7C:B1:68:05:27:69:F8:60
Authority key identifier: 85:D6:F1:84:93:D8:A0:8C:C7:2B:1B:09:1D:4A:F5:4F:8F:0A:28:B3
Certificate issuer: /CN=A9125225/serialNumber=85D6F18493D8A08CC72B1B091D4AF54F8F0A28B3
Certificate serial: 0762
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hdbxhJPYoIzHKxsJHUr1T48KKLM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.mft
Manifest number: 0755
Signing time: Fri 02 Oct 2026 22:07:54 +0000
Manifest this update: Fri 02 Oct 2026 22:07:53 +0000
Manifest next update: Fri 09 Oct 2026 22:07:53 +0000
Files and hashes: 1: hdbxhJPYoIzHKxsJHUr1T48KKLM.crl (hash: KJLOWHIwpT1Vf03/Mqm67EEWd2hIkjYvOWp00F1RBtE=)
2: F66F50628A9C11EB9B2E044BC4F9AE02.roa (hash: ViFrg5wOh95Ixt6WgSbJ0P48D8DiHVTNhf0f6qrl96I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.crl
rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hdbxhJPYoIzHKxsJHUr1T48KKLM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 22:07:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1890 (0x762)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125225, serialNumber=85D6F18493D8A08CC72B1B091D4AF54F8F0A28B3
Validity
Not Before: Oct 2 22:07:53 2026 GMT
Not After : Oct 9 22:07:53 2026 GMT
Subject: CN=6ac02b3a-7b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:bd:05:fb:1f:e7:08:9d:24:9b:98:b5:d1:4d:
1a:4a:4e:ec:3f:7c:86:d2:8b:55:58:0f:a3:1d:5a:
6a:a5:ac:74:0f:db:d8:35:e3:33:4e:0b:97:b8:b3:
28:fe:35:cf:47:b5:aa:62:7a:36:83:00:cb:0d:47:
7f:29:f2:25:99:36:ed:6d:34:4c:f4:e2:36:cc:f0:
ad:3b:fa:5a:53:50:34:3b:0e:30:d6:8f:00:46:b2:
d4:03:4f:5f:bb:2f:d0:5f:a9:c8:f7:d7:5b:30:9e:
98:21:5f:84:a0:3b:f5:04:80:d6:f0:16:f6:40:4a:
9b:26:1d:77:a0:07:96:06:c0:29:02:66:96:16:46:
ca:c7:53:2e:80:a7:08:e5:1d:c8:43:37:40:82:39:
71:c8:73:2a:58:a5:fa:3e:a6:89:09:72:c8:35:b2:
17:01:9a:d7:05:54:e5:b0:e8:76:25:3a:b9:dc:4e:
08:35:43:5c:e3:3c:8f:c2:59:a0:53:8f:9c:26:f4:
a9:73:4f:9d:fd:86:0d:be:0c:a6:5f:99:c9:2d:90:
86:b1:4a:2a:6f:7e:14:71:ad:04:4c:7a:aa:65:f5:
0a:6b:87:dd:a4:fe:29:1d:8e:71:85:33:db:85:4d:
3c:19:5a:30:fb:e6:49:b1:f6:90:96:a5:ac:7e:29:
a8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:2F:2F:67:63:D2:31:3D:24:6D:4D:0B:7C:B1:68:05:27:69:F8:60
X509v3 Authority Key Identifier:
keyid:85:D6:F1:84:93:D8:A0:8C:C7:2B:1B:09:1D:4A:F5:4F:8F:0A:28:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hdbxhJPYoIzHKxsJHUr1T48KKLM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:e3:48:fe:35:29:2c:23:17:c7:0e:db:dc:85:3a:a4:2b:53:
49:36:d3:ea:90:a6:99:90:1f:48:a5:54:82:56:51:a6:58:aa:
b3:de:17:f2:b6:40:86:0f:ab:72:95:d3:91:3c:b3:89:8d:18:
a7:a5:be:01:b1:0d:7f:7b:81:dc:1e:44:91:a0:e5:03:07:24:
36:8a:23:ed:97:c7:25:26:ba:be:fd:81:0f:f0:1e:c8:1d:72:
cf:7a:b2:3d:29:8d:ee:6e:3e:70:bd:20:d8:b7:6a:b0:0a:78:
10:b8:95:5b:87:f1:ff:37:6c:49:b5:ca:8b:a7:4b:d8:9c:23:
f3:37:42:75:03:30:b3:77:c1:08:a3:62:c3:48:a3:30:ee:43:
57:6e:63:35:3a:41:96:e7:06:cb:dd:59:e2:c5:be:6d:24:f2:
67:c9:35:59:99:92:cc:16:ac:03:01:34:65:3b:0c:64:a8:31:
36:f3:d0:02:1b:98:b7:0d:c0:d5:8e:19:98:33:11:3c:bb:3d:
c1:a1:e2:02:99:5d:e2:68:49:60:a4:31:d6:cd:b8:78:03:9d:
8e:90:83:73:1d:50:c3:b2:5f:6e:94:38:9c:c3:16:55:eb:f5:
b9:4a:63:93:3e:39:2a:6d:c6:4b:8e:d8:7b:6a:23:be:e0:16:
bb:f9:07:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 23:17:20 2026 by rpki-client