
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.mft
File: hqZPKtLd4rfZYk5pInrQmxd4xsE.mft (raw, json)
Hash identifier: oG/wqjwPs+Uwu8e+XxAd+o/SIWms2sY4Lx338omxn7Q=
Subject key identifier: 1C:4E:58:09:DB:D0:CC:43:5D:69:66:AE:3A:43:0F:CB:D2:4B:2A:41
Authority key identifier: 86:A6:4F:2A:D2:DD:E2:B7:D9:62:4E:69:22:7A:D0:9B:17:78:C6:C1
Certificate issuer: /CN=A9169A3F/serialNumber=86A64F2AD2DDE2B7D9624E69227AD09B1778C6C1
Certificate serial: 0161
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hqZPKtLd4rfZYk5pInrQmxd4xsE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.mft
Manifest number: 0161
Signing time: Sat 03 Oct 2026 05:41:19 +0000
Manifest this update: Sat 03 Oct 2026 05:41:18 +0000
Manifest next update: Sat 10 Oct 2026 05:41:18 +0000
Files and hashes: 1: hqZPKtLd4rfZYk5pInrQmxd4xsE.crl (hash: beYOZ/cS3CMIG6G6x1tmBjo7QMj0+sZVaHZtAlsY6hc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.crl
rsync://rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hqZPKtLd4rfZYk5pInrQmxd4xsE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 05:41:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 353 (0x161)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169A3F, serialNumber=86A64F2AD2DDE2B7D9624E69227AD09B1778C6C1
Validity
Not Before: Oct 3 05:41:18 2026 GMT
Not After : Oct 10 05:41:18 2026 GMT
Subject: CN=6ac0957f-e15f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:de:8d:2a:13:82:20:cd:af:6d:52:2e:aa:00:
13:97:53:f6:ae:fe:c4:02:fa:30:46:98:4f:96:17:
48:38:c2:cf:04:27:90:9c:d5:6f:48:65:79:de:37:
1a:b7:8f:04:e4:dd:6c:d5:91:61:51:e2:79:41:7b:
36:d5:e8:5a:e8:8e:a0:6e:f9:d1:2b:38:a8:eb:f0:
fd:c0:a7:c3:32:47:4e:23:b4:99:cb:d2:f5:7e:61:
cf:bb:29:4c:44:24:85:ce:c8:87:41:2a:3f:4a:2a:
ee:d5:59:2a:55:2c:4a:84:02:ed:e2:e7:1e:bd:bb:
7b:9d:3e:b6:cf:77:d7:92:19:b9:c5:48:6a:b9:f5:
da:cf:57:95:76:e7:c3:f3:f4:05:50:a2:1a:2a:ef:
41:14:f5:2d:51:16:ba:a4:fd:6b:e6:27:d7:57:56:
43:47:fb:25:3b:0a:f1:e9:5f:5c:fe:b5:3a:8a:43:
ed:72:98:ca:49:0a:df:a4:3c:71:b6:b9:ad:11:d7:
5a:c4:fc:67:65:54:0c:e6:7e:92:7b:1d:c7:48:47:
d2:85:ae:82:c1:0a:22:62:b9:2a:62:09:d5:fa:6a:
ca:1d:4e:9c:20:d8:6f:ef:5e:0a:d4:c4:e6:5d:71:
5b:19:03:ef:eb:6f:b9:72:30:1e:76:10:7d:9a:de:
a9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:4E:58:09:DB:D0:CC:43:5D:69:66:AE:3A:43:0F:CB:D2:4B:2A:41
X509v3 Authority Key Identifier:
keyid:86:A6:4F:2A:D2:DD:E2:B7:D9:62:4E:69:22:7A:D0:9B:17:78:C6:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hqZPKtLd4rfZYk5pInrQmxd4xsE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:c9:22:3c:12:60:8f:3f:65:2b:6c:44:2e:b2:cc:b2:5f:2b:
3a:72:6f:79:cc:a5:21:7d:6e:59:01:a6:ea:4d:92:bd:02:5b:
ec:13:20:b7:03:65:7f:4f:f9:e7:a3:2c:06:d7:cd:ee:c1:37:
ae:d8:a8:e4:15:48:61:f7:8e:06:1a:65:b3:85:a5:be:08:47:
61:b0:b9:22:3a:f5:0e:93:07:08:d7:9f:eb:45:ee:0a:60:43:
29:a2:71:5a:09:d9:21:62:43:5d:49:e9:5f:40:7b:e4:dd:ed:
9f:3c:22:18:a8:c2:4a:ec:24:fe:3f:28:cc:19:68:58:e4:c5:
29:00:4d:b4:79:0e:5f:b5:f2:a3:63:fa:fe:48:c1:9e:88:a1:
6b:03:fc:96:77:aa:3c:47:c2:0c:0d:08:64:e4:62:3d:6f:ce:
ad:a6:d5:ec:0c:a2:59:fa:f5:2e:28:f1:79:66:36:ba:b7:c1:
8b:eb:55:af:bb:a1:f5:86:ea:fd:a4:60:16:01:be:95:71:74:
42:2d:f0:1f:42:ee:ba:5c:a3:ba:10:85:de:0e:25:b0:bf:42:
d4:cb:67:c4:96:ba:d0:e6:05:c6:e1:e9:6b:3e:df:c7:0b:3f:
4f:33:75:9b:74:64:15:9b:e8:b7:d9:60:96:4d:f3:1d:7f:7b:
d4:c9:45:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 17:38:19 2026 by rpki-client