
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft
File: hobJK4fdXdLuKrtA7HPxePYEWjQ.mft (raw, json)
Hash identifier: uB3JUoD/xLqAcOnDdbSpQPZk5/+B4a/+QHXbvKoXvws=
Subject key identifier: 33:F5:B1:79:15:B3:E8:6A:51:B7:79:D8:9C:DF:C4:79:45:D1:5B:D3
Authority key identifier: 86:86:C9:2B:87:DD:5D:D2:EE:2A:BB:40:EC:73:F1:78:F6:04:5A:34
Certificate issuer: /CN=A9165DB1/serialNumber=8686C92B87DD5DD2EE2ABB40EC73F178F6045A34
Certificate serial: 0330
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft
Manifest number: 0328
Signing time: Wed 13 May 2026 01:14:04 +0000
Manifest this update: Wed 13 May 2026 01:14:03 +0000
Manifest next update: Wed 20 May 2026 01:14:03 +0000
Files and hashes: 1: hobJK4fdXdLuKrtA7HPxePYEWjQ.crl (hash: bZeTB6cakjJ40dhycoKjBM4HgxinyxBsf32VFu00yEE=)
2: 7D164B822A2811F0819D8C13C4F9AE02.roa (hash: U0yLO5Ev3zOcE/jWxDek+PewuFrsGyucjJ2jYS/L358=)
3: 7CA593102A2811F0819D8C13C4F9AE02.roa (hash: dd0CGQKg2qsZFHW0r2NsR/ySJbalRdUFAJqYcFNJaEc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.crl
rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:14:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 816 (0x330)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165DB1, serialNumber=8686C92B87DD5DD2EE2ABB40EC73F178F6045A34
Validity
Not Before: May 13 01:14:03 2026 GMT
Not After : May 20 01:14:03 2026 GMT
Subject: CN=6a03d05c-4919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ba:0d:f3:7c:f3:ae:b8:b8:8f:8c:57:cb:39:
31:2f:63:52:99:18:65:df:63:a1:df:6d:ad:7e:ac:
7d:98:d7:29:8d:ac:61:7c:61:75:64:ab:b7:a5:9f:
4b:a0:c5:8c:d6:9d:0f:20:c6:7a:30:3a:61:d0:85:
8c:1a:6c:f9:8f:8a:47:3b:8f:35:49:81:09:6a:fb:
20:3e:c2:7a:c7:73:f2:b3:3c:64:8a:bd:dd:9b:6a:
21:12:40:50:48:2a:47:f3:36:24:54:bd:95:90:47:
e6:f9:e4:ef:6f:84:bb:74:52:d8:b1:84:ad:32:1b:
43:77:9b:4c:c3:35:f4:bd:6f:4b:c3:7f:5d:41:0d:
ca:c0:71:6b:24:3c:80:01:62:a5:68:07:e9:26:51:
38:19:14:4f:f3:79:c4:28:ec:70:f7:71:6a:83:97:
08:71:9a:30:ce:cb:c3:60:42:79:05:59:ba:3d:4a:
f8:c0:18:02:a0:59:2a:f4:18:6c:f4:6a:b0:81:7d:
ef:42:cb:a0:45:fc:17:3c:55:45:e0:f0:ec:8e:c6:
ef:fd:ae:49:87:1e:c4:5b:2d:11:22:b2:18:9b:fd:
b7:b1:2b:be:3e:15:52:64:53:cc:f8:5b:2a:d4:de:
e6:47:01:14:cf:78:47:56:27:13:ef:d3:98:55:2b:
43:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F5:B1:79:15:B3:E8:6A:51:B7:79:D8:9C:DF:C4:79:45:D1:5B:D3
X509v3 Authority Key Identifier:
keyid:86:86:C9:2B:87:DD:5D:D2:EE:2A:BB:40:EC:73:F1:78:F6:04:5A:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:32:28:a3:ab:7e:37:fb:a0:e2:66:59:bf:d5:49:67:3d:b4:
0f:bf:f1:53:94:ad:5d:af:46:19:a5:7d:51:48:39:94:d6:9a:
d2:a3:69:09:02:52:e6:94:e1:57:e2:c9:ad:33:a6:6d:71:ac:
2c:ca:94:8a:01:21:2f:ee:b5:e2:b9:2b:c3:15:cf:57:67:f9:
89:0b:8b:dd:f2:27:ad:d4:66:c2:d0:e7:c3:0e:cd:31:6e:39:
08:72:8e:c7:63:ba:01:64:81:a3:cc:77:e5:68:1a:6c:a4:86:
14:64:02:24:ef:db:71:7e:06:39:94:4e:04:78:1e:64:f0:de:
45:33:4e:90:48:61:3e:23:1a:89:56:2b:e1:36:46:d6:da:ee:
31:85:92:ff:f4:42:6e:79:04:89:c3:a5:4c:3a:2d:02:c9:68:
59:7a:9c:01:d9:d3:2c:9c:f8:0c:f1:a9:22:84:62:87:19:3c:
54:7d:87:9c:63:0f:5a:8c:fd:28:df:0d:a0:ee:c7:db:30:98:
04:ee:98:4c:b5:db:44:12:92:a4:48:78:12:ea:06:61:7d:13:
a1:dd:2f:6f:f7:52:e2:83:a1:ae:0d:0a:bf:eb:03:33:48:39:
59:c0:b0:7e:3e:8a:2c:30:36:1b:7a:a6:9e:4d:1f:49:c1:ec:
33:bb:16:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:07:21 2026 by rpki-client