
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft
File: hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft (raw, json)
Hash identifier: DaekCK+SyDP0V6YNlz6NzR+w0QKAtgQ1c1LHnV2Kjik=
Subject key identifier: 26:82:BF:16:96:82:EE:9F:0E:65:58:90:50:CB:BE:08:EE:BE:CB:FC
Authority key identifier: 86:3C:D0:3C:D7:B0:AC:B5:89:65:9E:D6:A9:1C:F1:EB:20:43:67:53
Certificate issuer: /CN=A9167742/serialNumber=863CD03CD7B0ACB589659ED6A91CF1EB20436753
Certificate serial: 0477
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft
Manifest number: 0461
Signing time: Thu 15 Oct 2026 00:34:22 +0000
Manifest this update: Thu 15 Oct 2026 00:34:21 +0000
Manifest next update: Thu 22 Oct 2026 00:34:21 +0000
Files and hashes: 1: hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl (hash: r/jSjh8EvJOu1P7HOAuJIaEQ9pCu8trYFKw3qDMkNtk=)
2: 6E6B914234E311EDB9020B6DC4F9AE02.roa (hash: 74u63+bcbtzbnwhLBuZvwYUeCNjr3rxkxpotr9+jKD4=)
3: 72F3E64ECB3011EEB1D2092CC4F9AE02.roa (hash: mtRRZz118M4LflJ2dyF7Ey07yP1IfAmcsesHzgsjW3s=)
4: C80B0244CB2F11EEB240B62AC4F9AE02.roa (hash: J33sDWTggg1bRmPFlhAXOyKZA4abpPYfOjDAZ5CZxPI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl
rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 22 Oct 2026 00:34:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1143 (0x477)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167742, serialNumber=863CD03CD7B0ACB589659ED6A91CF1EB20436753
Validity
Not Before: Oct 15 00:34:21 2026 GMT
Not After : Oct 22 00:34:21 2026 GMT
Subject: CN=6ad01f8e-da16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:37:35:5a:27:09:ad:81:24:56:59:dd:fb:11:
b2:0e:32:62:a8:21:63:7b:40:63:66:4b:a9:2f:c5:
53:ea:df:14:a9:b8:5f:c7:e2:7b:b0:63:48:da:f3:
44:5f:a4:54:fa:40:30:49:6b:ca:d2:ea:e7:66:9b:
4c:bf:0a:c9:c4:b7:55:e2:cf:cf:23:46:5a:21:4e:
d5:ab:60:b5:aa:b9:7c:5f:55:e8:f1:fd:41:d5:29:
b1:05:8e:18:4c:18:13:67:e1:0d:f8:ee:1c:96:e7:
69:1a:39:ed:8a:3c:03:69:96:1e:8c:e4:6c:13:a6:
f1:f4:5b:5f:45:34:b9:b1:f2:8a:19:07:22:07:cf:
41:79:1d:ee:d5:b1:19:e2:f6:e2:fa:86:d7:b5:75:
f9:4f:00:15:a4:67:dc:fc:1d:d2:c7:2d:f6:c3:c5:
e1:f9:f2:89:9a:8f:42:f4:85:e7:1a:2d:54:71:64:
f2:22:2f:87:94:b6:1c:e5:0e:cc:28:0f:eb:16:3e:
05:54:db:75:54:f6:d0:e5:f3:61:92:7a:02:46:52:
79:69:0b:e3:83:fd:cc:20:6e:ef:54:f8:df:73:20:
93:ee:89:74:70:14:31:ba:03:b1:c0:15:46:e8:c2:
83:13:87:13:f5:9d:93:7c:84:cf:3f:c1:67:3a:f5:
f2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:82:BF:16:96:82:EE:9F:0E:65:58:90:50:CB:BE:08:EE:BE:CB:FC
X509v3 Authority Key Identifier:
keyid:86:3C:D0:3C:D7:B0:AC:B5:89:65:9E:D6:A9:1C:F1:EB:20:43:67:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:83:4d:65:99:d1:97:e8:01:36:48:70:03:a7:a0:1f:ce:2e:
a4:2f:8b:69:f8:a6:4b:47:cd:9b:a2:6f:16:74:de:5a:82:d8:
07:ba:66:51:dc:c9:d4:09:4d:90:c8:0f:e4:83:2e:27:be:ec:
81:68:4a:f3:88:47:86:19:8c:2c:bc:d6:ce:fe:24:e7:c2:4c:
f6:18:2b:50:25:08:72:83:39:cb:66:01:ec:b9:69:b1:ca:9a:
f9:e1:87:de:10:a1:0b:92:08:a4:1a:19:16:9c:03:5c:85:41:
bb:20:74:fb:9b:4a:a5:73:e5:5a:cd:d3:3e:0e:3e:2a:9b:01:
42:92:ce:c5:98:ee:28:89:04:c5:6d:48:ce:2d:ac:6e:9f:47:
ba:4d:57:91:0d:d2:bc:aa:60:6e:ac:95:e0:e1:fe:91:ee:36:
e1:7f:85:a6:a3:a7:a9:58:93:fd:86:8c:62:23:a5:3c:05:a4:
5e:9e:20:8f:03:09:be:4f:91:f7:44:a9:60:b2:7e:c9:5b:41:
61:3a:e1:df:90:90:b8:f2:ca:21:45:ec:ab:52:39:39:ef:ee:
44:bf:fd:c8:55:cc:c1:98:9a:48:cf:9f:cb:88:2b:02:0d:b3:
5e:bf:61:85:ee:17:a9:5d:e1:60:49:ec:d9:b7:4a:87:9e:b6:
de:04:b3:eb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBHcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njc3NDIxMTAvBgNVBAUTKDg2M0NEMDNDRDdCMEFDQjU4OTY1OUVENkE5MUNGMUVC
MjA0MzY3NTMwHhcNMjYxMDE1MDAzNDIxWhcNMjYxMDIyMDAzNDIxWjAYMRYwFAYD
VQQDEw02YWQwMWY4ZS1kYTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAozc1WicJrYEkVlnd+xGyDjJiqCFje0BjZkupL8VT6t8Uqbhfx+J7sGNI2vNE
X6RU+kAwSWvK0urnZptMvwrJxLdV4s/PI0ZaIU7Vq2C1qrl8X1Xo8f1B1SmxBY4Y
TBgTZ+EN+O4cludpGjntijwDaZYejORsE6bx9FtfRTS5sfKKGQciB89BeR3u1bEZ
4vbi+obXtXX5TwAVpGfc/B3Sxy32w8Xh+fKJmo9C9IXnGi1UcWTyIi+HlLYc5Q7M
KA/rFj4FVNt1VPbQ5fNhknoCRlJ5aQvjg/3MIG7vVPjfcyCT7ol0cBQxugOxwBVG
6MKDE4cT9Z2TfITPP8FnOvXyqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCaCvxaW
gu6fDmVYkFDLvgjuvsv8MB8GA1UdIwQYMBaAFIY80DzXsKy1iWWe1qkc8esgQ2dT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Nzc0Mi85NEU1MDgwMEI3
RDcxMUVDOUE4Mzc0NjJDNEY5QUUwMi9oanpRUE5ld3JMV0paWjdXcVJ6eDZ5QkRa
MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hqelFQTmV3ckxXSlpaN1dxUnp4NnlCRFoxTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
Nzc0Mi85NEU1MDgwMEI3RDcxMUVDOUE4Mzc0NjJDNEY5QUUwMi9oanpRUE5ld3JM
V0paWjdXcVJ6eDZ5QkRaMU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABINNZZnRl+gBNkhwA6egH84upC+LafimS0fNm6JvFnTeWoLYB7pmUdzJ1AlN
kMgP5IMuJ77sgWhK84hHhhmMLLzWzv4k58JM9hgrUCUIcoM5y2YB7Llpscqa+eGH
3hChC5IIpBoZFpwDXIVBuyB0+5tKpXPlWs3TPg4+KpsBQpLOxZjuKIkExW1Izi2s
bp9Huk1XkQ3SvKpgbqyV4OH+ke424X+FpqOnqViT/YaMYiOlPAWkXp4gjwMJvk+R
90SpYLJ+yVtBYTrh35CQuPLKIUXsq1I5Oe/uRL/9yFXMwZiaSM+fy4grAg2zXr9h
he4XqV3hYEns2bdKh5623gSz6w==
-----END CERTIFICATE-----
Generated at Fri Oct 16 04:55:09 2026 by rpki-client