
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft
File: HQDCg8qhqzzENxoqOE1isc1E-6c.mft (raw, json)
Hash identifier: fvjrngHaspLtnWx9VwbDQjhhov/SiDTR2tMG69ngVWQ=
Subject key identifier: E6:81:FA:1E:C2:BE:D9:86:4E:21:42:4D:07:4F:5B:2E:6C:06:7B:C6
Authority key identifier: 1D:00:C2:83:CA:A1:AB:3C:C4:37:1A:2A:38:4D:62:B1:CD:44:FB:A7
Certificate issuer: /CN=A912F387/serialNumber=1D00C283CAA1AB3CC4371A2A384D62B1CD44FBA7
Certificate serial: 01FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft
Manifest number: 01E3
Signing time: Wed 13 May 2026 03:40:29 +0000
Manifest this update: Wed 13 May 2026 03:40:29 +0000
Manifest next update: Wed 20 May 2026 03:40:29 +0000
Files and hashes: 1: HQDCg8qhqzzENxoqOE1isc1E-6c.crl (hash: UpWK8w0iXfMhjArzbltCjFW62++oCyWaTUFdGKZjNvs=)
2: FC34967C6C8611EFBF35D221C4F9AE02.roa (hash: 9vn9aNac6NN/1kMCYleAi9M7mbZTN9Jpf9hVVI22FOc=)
3: 9556705A2E6111EF9D743040C4F9AE02.roa (hash: aK9c79sTcvK5iWtA4NQLYDiheDhiqCqKnIFb6fchAKg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.crl
rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 03:40:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 508 (0x1fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F387, serialNumber=1D00C283CAA1AB3CC4371A2A384D62B1CD44FBA7
Validity
Not Before: May 13 03:40:29 2026 GMT
Not After : May 20 03:40:29 2026 GMT
Subject: CN=6a03f2ad-0398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ec:ed:08:ac:4d:0a:76:00:09:bf:f7:a2:ac:
58:cb:91:b4:6b:97:7c:fb:17:ee:dd:5b:77:32:08:
4f:c3:68:74:7c:6b:3c:44:24:af:59:5e:d0:42:61:
7a:69:b3:04:c1:9d:62:ed:ff:83:fd:02:0f:ab:f3:
d1:6a:21:1d:a1:99:6f:d4:cd:19:2a:81:6f:5d:26:
03:f8:dd:23:1c:b1:a8:7e:79:88:bf:29:c7:21:2d:
1f:43:12:de:0d:ef:1d:93:68:f0:5a:1a:56:b3:45:
e5:ba:db:c4:2a:e4:49:d0:61:54:16:d7:26:98:fc:
01:d1:20:6b:bf:0c:4e:2c:6b:b0:05:81:f2:90:07:
cb:b4:49:57:d8:53:b6:e4:45:7c:85:3f:6c:7b:58:
dd:9c:9c:a9:d2:72:8e:80:9e:fa:cb:04:08:6c:9d:
ae:1d:de:e8:fb:32:98:05:92:d8:7c:76:ec:17:1e:
73:80:eb:67:50:d8:3a:2c:8f:de:6f:b1:06:22:32:
b6:77:d9:72:47:86:fc:9b:c1:58:bf:d4:e9:73:03:
87:cb:78:f8:ba:74:11:f0:cf:b6:c5:09:b5:e4:58:
88:24:cf:a1:e7:66:3e:e2:23:40:64:36:28:6c:8f:
61:5d:69:30:7a:25:26:16:1c:b2:27:9c:43:07:a1:
0b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:81:FA:1E:C2:BE:D9:86:4E:21:42:4D:07:4F:5B:2E:6C:06:7B:C6
X509v3 Authority Key Identifier:
keyid:1D:00:C2:83:CA:A1:AB:3C:C4:37:1A:2A:38:4D:62:B1:CD:44:FB:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:c5:85:8c:9d:27:af:8e:13:d9:18:b0:8a:64:19:c0:08:52:
1b:f4:ab:dc:63:16:14:95:05:fb:ae:70:93:da:d2:1f:30:60:
1d:2c:93:f1:0d:a4:09:2a:87:ae:19:da:bb:43:ab:ed:ff:3c:
e7:c5:87:b0:ea:66:57:44:4a:fc:74:02:89:2f:84:34:05:6a:
80:5e:4a:8d:5c:cd:77:f9:e2:f3:c4:df:e1:9f:5d:ed:7f:e7:
21:56:6c:18:d2:8a:b4:ec:ae:17:a6:14:07:b4:92:5b:12:06:
aa:b4:f9:42:09:73:c5:04:db:7f:14:c1:b3:5e:a0:5b:95:3a:
2a:d7:c6:4e:3c:45:1d:fc:bd:14:76:b1:3a:ab:80:b4:12:bd:
1f:ab:e0:41:d1:a5:3e:9d:a6:42:8a:a9:e7:3e:0f:24:3c:1d:
09:9a:11:25:03:51:11:42:9c:4b:24:81:7d:fe:59:98:c1:2d:
e7:0f:55:d5:8a:be:93:10:67:2e:cc:68:55:12:2b:85:ee:90:
80:43:f1:30:cf:11:58:72:01:90:b3:82:ff:5a:f1:f9:7d:fb:
d3:37:e1:2d:9f:fe:6a:0c:dd:2e:bd:94:53:c8:5f:22:50:7f:
1e:cd:39:3c:d8:b9:be:de:6b:db:03:0f:72:4b:eb:df:3a:c9:
3b:fd:5e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:35:49 2026 by rpki-client