
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.mft
File: Hr-HiCR2Rfmq8BbQIPTPwuITwpY.mft (raw, json)
Hash identifier: SluwI3NyVVUzGXyG/PHL4r5EdPL7JzSTRIPISEwl1fk=
Subject key identifier: E4:75:75:4F:7C:D7:47:35:F8:99:8A:59:54:FD:0E:FB:22:96:42:FB
Authority key identifier: 1E:BF:87:88:24:76:45:F9:AA:F0:16:D0:20:F4:CF:C2:E2:13:C2:96
Certificate issuer: /CN=A912C770/serialNumber=1EBF8788247645F9AAF016D020F4CFC2E213C296
Certificate serial: 8E
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.mft
Manifest number: 8B
Signing time: Fri 13 Nov 2026 07:48:26 +0000
Manifest this update: Fri 13 Nov 2026 07:48:26 +0000
Manifest next update: Fri 20 Nov 2026 07:48:26 +0000
Files and hashes: 1: Hr-HiCR2Rfmq8BbQIPTPwuITwpY.crl (hash: cdCW6BkTWGcRzfKz8Iz1pQil4bhv+LKg/C8+4/fQ0L8=)
2: C7FCC7D210DE11F18FBC6D5B083D8C67.roa (hash: ZJ2mGof4d8TGjIUSjiSJIxX88gLNKzRhctZ8YiDrvqI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.crl
rsync://rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Nov 2026 07:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142 (0x8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C770, serialNumber=1EBF8788247645F9AAF016D020F4CFC2E213C296
Validity
Not Before: Nov 13 07:48:26 2026 GMT
Not After : Nov 20 07:48:26 2026 GMT
Subject: CN=6af6c0ca-1485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1b:c3:92:45:2e:8f:11:94:15:45:03:31:5c:
dc:33:16:5d:a6:40:af:bc:98:32:e7:7d:af:80:48:
2d:71:6b:9d:d5:71:6e:18:c9:26:bb:3e:80:9a:2e:
ec:f5:bd:38:82:0c:f8:2c:c9:db:cf:97:ff:eb:ba:
59:c3:af:05:39:55:07:cd:32:5c:b5:23:a8:4c:f9:
3a:10:f6:84:b5:95:2a:5c:f4:ee:b0:fc:14:7b:8f:
8d:35:a2:86:9c:17:78:89:88:ca:fc:e1:83:fa:de:
ca:2b:16:40:58:79:68:34:d9:48:c6:af:91:00:73:
b0:a5:8e:e8:4c:7a:e5:c7:d5:90:69:6f:b8:a5:b7:
87:44:bb:40:46:fe:3c:40:e1:8f:5d:29:09:26:68:
12:2e:d2:a7:e9:a7:a5:bc:c6:c5:33:a0:11:f5:41:
5f:8a:58:db:0c:89:10:55:7c:1d:a0:e8:26:b9:5f:
03:ad:a5:05:19:ff:ab:99:3a:65:ee:98:67:54:81:
9a:da:a7:b3:7b:01:99:c5:7a:3c:db:ae:06:bc:e8:
9d:dc:4b:8a:b8:46:c7:34:62:c4:67:05:dc:c7:b8:
82:6a:7c:be:de:4f:8c:43:8c:c6:5a:15:95:d1:fe:
d3:2d:b1:68:5b:93:a6:ac:e9:d4:96:d7:75:99:ad:
ed:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:75:75:4F:7C:D7:47:35:F8:99:8A:59:54:FD:0E:FB:22:96:42:FB
X509v3 Authority Key Identifier:
keyid:1E:BF:87:88:24:76:45:F9:AA:F0:16:D0:20:F4:CF:C2:E2:13:C2:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:68:9a:f6:9d:eb:14:5f:eb:0b:65:b0:0a:d5:f7:1e:f6:04:
7a:d3:ce:e4:d8:a4:69:54:82:d8:48:e9:68:c2:1b:26:16:7a:
2a:56:2a:9c:fa:f1:95:f1:b5:64:4d:ff:66:47:68:08:aa:9c:
25:4b:82:fe:37:e5:56:8f:85:42:c2:21:94:de:51:b9:77:ce:
8a:b6:14:6a:fe:59:6d:8f:b2:79:17:85:45:bd:9f:9f:d2:28:
4b:14:ca:d5:0d:93:93:89:26:24:11:05:7d:3b:44:53:89:4a:
73:2e:d8:47:aa:df:d6:97:c2:52:6b:c5:00:18:26:22:23:02:
7b:ec:7b:df:76:5c:4d:5b:99:23:31:c8:de:05:09:be:cd:95:
ce:d9:60:91:50:44:6c:d6:33:ff:38:43:7e:d2:ef:b9:6a:0b:
22:26:64:8d:c6:f6:2f:18:b5:73:64:80:42:e0:54:6f:d4:85:
9a:a4:e8:2d:d6:b0:9f:61:bb:90:1a:ad:7c:67:fd:c5:35:43:
60:3a:23:b1:db:e9:07:08:ac:39:cf:94:79:7c:b6:77:55:75:
8c:fb:a2:ce:dd:c0:27:b7:1a:2a:e2:59:82:4d:d2:61:3a:e2:
3e:97:43:86:13:9b:4e:14:41:70:df:8a:dc:6a:b6:0a:a4:6f:
38:aa:fe:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:28:55 2026 by rpki-client