
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.mft
File: I-HkJZ-rzUn9WMzUbPIAzRIeLqw.mft (raw, json)
Hash identifier: 8apDvYHuB8tNf+JlkNHKSDcHJYoWY8io/v43IYxwQkU=
Subject key identifier: 9B:13:7B:EA:68:7E:F5:87:F8:11:1E:42:35:C7:38:9A:EE:95:A8:B1
Authority key identifier: 23:E1:E4:25:9F:AB:CD:49:FD:58:CC:D4:6C:F2:00:CD:12:1E:2E:AC
Certificate issuer: /CN=A9158682/serialNumber=23E1E4259FABCD49FD58CCD46CF200CD121E2EAC
Certificate serial: 53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.mft
Manifest number: 51
Signing time: Mon 11 May 2026 08:25:03 +0000
Manifest this update: Mon 11 May 2026 08:25:03 +0000
Manifest next update: Mon 18 May 2026 08:25:03 +0000
Files and hashes: 1: I-HkJZ-rzUn9WMzUbPIAzRIeLqw.crl (hash: 3tZ1Dp8XuwCjggYzRWxlqOlEmkVEB8kQ2g3aAI0Gda0=)
2: C5D7EA08D5CF11F0A0EA7C48C4F9AE02.roa (hash: qzSxvuujDmL239/Gh/JLB+28QvjA0lGPnBH2BpP+kM4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.crl
rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:25:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83 (0x53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158682, serialNumber=23E1E4259FABCD49FD58CCD46CF200CD121E2EAC
Validity
Not Before: May 11 08:25:03 2026 GMT
Not After : May 18 08:25:03 2026 GMT
Subject: CN=6a01925f-6284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a7:a0:c7:f6:00:e8:76:d2:05:9e:9e:69:4f:
8e:32:03:a0:82:ec:04:51:43:f0:39:78:09:46:99:
ea:7d:62:26:f8:70:2e:54:8b:74:09:ac:3d:c3:d0:
8b:55:86:f6:d0:27:10:99:c3:be:b6:0e:1a:86:32:
08:4a:bd:9c:5e:06:6a:b6:aa:ff:29:b1:47:4b:0c:
f4:9b:a3:ef:fe:28:5a:eb:10:74:2e:ca:be:cf:c2:
3a:fa:dd:c0:b7:36:96:4d:fa:0b:7e:03:14:10:55:
43:cb:d1:bf:d7:df:0a:50:de:a6:33:ca:c6:7c:72:
91:2f:f8:1c:c9:53:9c:6a:61:57:9b:6d:eb:c2:1c:
4d:07:66:47:ed:16:fe:ab:cc:59:37:94:79:23:00:
2a:be:4e:72:fb:9d:dc:37:95:55:6d:44:43:7a:e7:
a7:e2:44:f2:07:3c:0d:78:ec:2d:d8:7d:b2:76:46:
5c:a6:53:55:11:c1:b2:79:0a:e6:80:bf:e7:16:d9:
d5:17:8c:87:a8:b6:8c:11:3e:72:43:03:55:1a:4a:
24:f5:45:ee:53:30:7d:71:b5:24:33:56:35:8b:ed:
36:21:26:fb:96:dd:4a:bf:4c:b5:2e:25:7a:3a:83:
75:fa:a9:6c:d5:dd:05:db:74:02:83:0a:2b:bc:6d:
98:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:13:7B:EA:68:7E:F5:87:F8:11:1E:42:35:C7:38:9A:EE:95:A8:B1
X509v3 Authority Key Identifier:
keyid:23:E1:E4:25:9F:AB:CD:49:FD:58:CC:D4:6C:F2:00:CD:12:1E:2E:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:50:79:52:08:51:c8:eb:28:51:34:f3:02:01:12:c5:7d:cc:
7e:9b:08:87:f4:5c:ed:4a:c5:2d:b7:e6:19:5e:f5:69:cd:1f:
a5:d6:7e:07:6e:e0:f6:79:89:26:89:36:9b:39:b2:23:29:35:
8d:0e:65:0d:d3:19:11:17:ba:44:54:53:1c:04:79:74:73:16:
31:dd:9d:07:86:d1:37:f5:c1:f7:ef:ef:a7:ba:75:8d:2f:7a:
ba:ff:2b:7c:f2:56:a2:3c:9f:18:57:8a:2a:2e:54:49:31:fd:
e6:85:b1:42:66:27:63:0a:12:f4:78:15:56:79:14:bb:43:f7:
35:50:c9:20:ce:33:59:93:50:11:56:fa:bc:9e:cd:ee:90:e0:
ac:14:9f:f2:d1:d5:88:4f:8b:5d:fe:6e:fe:2a:5b:a2:e5:a5:
8e:8c:86:9c:fc:75:df:a2:83:ab:25:e9:52:55:03:49:7f:a5:
0f:f6:b1:4d:d1:e5:82:33:bf:cf:e2:ce:18:d3:ae:08:e7:e2:
00:83:4b:c4:e5:e6:53:ab:9d:3b:08:fa:70:3c:19:3d:03:3b:
a3:90:06:fc:9a:82:21:d9:35:fe:bd:a0:39:0a:06:27:91:4b:
b6:f0:d3:4e:f4:11:5a:12:c7:aa:b2:c2:54:92:a0:bf:84:07:
a0:2c:57:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:16:51 2026 by rpki-client