
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.mft
File: hctAGQp33J5olNhX9zu3qQ4JdOQ.mft (raw, json)
Hash identifier: Y92uO0mLKuck/7U+2m45tU5q13jAZCkqrmEY5pC/uig=
Subject key identifier: 33:2E:95:69:C1:9D:54:64:19:0E:A1:A1:F1:BF:CD:78:21:45:3D:A0
Authority key identifier: 85:CB:40:19:0A:77:DC:9E:68:94:D8:57:F7:3B:B7:A9:0E:09:74:E4
Certificate issuer: /CN=A9169BB4/serialNumber=85CB40190A77DC9E6894D857F73BB7A90E0974E4
Certificate serial: 0674
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hctAGQp33J5olNhX9zu3qQ4JdOQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.mft
Manifest number: 0662
Signing time: Thu 24 Sep 2026 22:30:36 +0000
Manifest this update: Thu 24 Sep 2026 22:30:35 +0000
Manifest next update: Thu 01 Oct 2026 22:30:35 +0000
Files and hashes: 1: hctAGQp33J5olNhX9zu3qQ4JdOQ.crl (hash: NBQm09E9X/xzKdv7gDA4/SMDwHTfUmeDxrUKmfnH0KI=)
2: FD9A4AA0E53111EBAB62446EC4F9AE02.roa (hash: dvZYfakMSSbge81B1yJ5zs2/Bab6s8HAu0l/53IOM8M=)
3: 7FCFB4745E8411EE89DF693EC4F9AE02.roa (hash: iRtV8BZ2CFLFs7wV9sW4BcqaRUjah+02FqIo4vn8Ivs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.crl
rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hctAGQp33J5olNhX9zu3qQ4JdOQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 22:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1652 (0x674)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169BB4, serialNumber=85CB40190A77DC9E6894D857F73BB7A90E0974E4
Validity
Not Before: Sep 24 22:30:35 2026 GMT
Not After : Oct 1 22:30:35 2026 GMT
Subject: CN=6ab5a48c-efc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:62:28:75:47:09:f1:d3:81:f5:92:3e:1a:81:
8e:fc:d1:d0:fc:f0:e3:f0:9f:06:b5:36:3b:2a:a9:
92:a6:b4:b8:88:6a:99:fa:58:3e:56:98:a5:d4:c1:
e5:64:1c:5b:ee:f7:73:ba:2a:a9:0a:7f:50:6c:45:
d2:24:c3:e6:68:04:75:a6:2c:e4:a8:d5:fe:8a:1e:
07:39:3e:e2:b7:c3:29:b4:61:a4:45:c8:31:2c:7a:
8e:9e:3f:59:c6:4a:f1:9a:26:b5:1c:55:e3:1f:ff:
96:f6:79:48:d2:ac:53:1c:0f:29:46:2d:a5:21:8c:
eb:ca:57:c4:b6:e1:66:fd:65:3c:65:0e:1e:f1:49:
a3:dc:b4:ce:0e:4d:e0:60:fa:3b:35:13:2f:a7:cf:
49:9b:a4:f3:c2:68:be:4c:d0:6f:3f:a4:82:70:4d:
8a:22:d1:58:4f:f0:8b:28:d0:ba:60:6b:b8:2b:e1:
1b:98:91:4f:9b:b8:da:b9:b6:14:cc:66:58:c3:ff:
7f:bf:ad:b5:53:be:3b:a0:14:ce:bf:e5:1e:ea:a6:
67:a3:53:db:cb:f4:4f:3d:0a:98:36:99:ff:38:3a:
52:2b:8e:37:5d:6d:ed:b1:3c:b4:b3:ee:61:61:f7:
65:52:69:0f:38:4f:b9:c8:8f:66:3e:16:ff:9d:23:
df:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:2E:95:69:C1:9D:54:64:19:0E:A1:A1:F1:BF:CD:78:21:45:3D:A0
X509v3 Authority Key Identifier:
keyid:85:CB:40:19:0A:77:DC:9E:68:94:D8:57:F7:3B:B7:A9:0E:09:74:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hctAGQp33J5olNhX9zu3qQ4JdOQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:b9:8c:32:74:1c:dc:22:a2:bc:ca:b4:88:b9:32:96:54:19:
6b:21:c3:db:d8:42:71:da:8e:fa:57:c4:9e:4b:42:eb:e8:8f:
f0:dc:06:3d:63:87:7c:e5:6a:ba:fc:0f:f1:80:26:c5:8e:e5:
dd:0e:e4:4a:1a:3b:ae:19:12:25:6d:35:be:0f:4a:84:2d:df:
75:7c:a5:24:c5:00:99:2a:85:94:c4:ca:7c:da:37:1a:00:fb:
27:79:12:d0:45:68:f2:0c:02:b5:f5:88:9b:5d:f0:a1:bd:69:
fb:73:ec:75:42:b8:b7:9d:63:62:38:23:7c:8e:37:0a:da:dd:
d7:4b:8b:b4:c5:cf:59:50:11:bf:48:e3:fc:ca:c9:9c:b2:ff:
11:be:57:60:23:ca:32:72:1e:ce:86:9d:5d:0f:e7:0e:f3:fa:
4f:a9:8e:60:02:44:c2:b5:92:6b:5f:1a:9b:dc:3d:7a:70:c8:
a9:ab:f2:01:98:3c:91:91:ba:30:ba:ec:32:42:00:87:78:65:
50:b2:77:d9:4c:74:3f:0f:43:db:6e:44:29:5b:5b:df:54:dd:
99:5f:51:e9:64:6d:5d:8a:da:d2:a9:8d:67:cf:f7:1a:1c:f8:
75:2a:cc:47:7f:4d:14:b4:7e:cb:b8:fc:7c:57:1c:25:6a:52:
60:ae:23:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:55:46 2026 by rpki-client