
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/HgqTik3H07rU9fll3NVeCymMQts.mft
File: HgqTik3H07rU9fll3NVeCymMQts.mft (raw, json)
Hash identifier: fFWrrUY3725JrQiJrPbcWh4fal0gQJeXr9E4Wczdi3w=
Subject key identifier: DC:27:10:EF:9F:5B:19:6E:2B:22:1D:3C:12:FA:01:70:2B:DF:4E:5E
Authority key identifier: 1E:0A:93:8A:4D:C7:D3:BA:D4:F5:F9:65:DC:D5:5E:0B:29:8C:42:DB
Certificate issuer: /CN=A9174A4F/serialNumber=1E0A938A4DC7D3BAD4F5F965DCD55E0B298C42DB
Certificate serial: 0ED7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgqTik3H07rU9fll3NVeCymMQts.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/HgqTik3H07rU9fll3NVeCymMQts.mft
Manifest number: 0EC9
Signing time: Wed 22 Jul 2026 17:52:10 +0000
Manifest this update: Wed 22 Jul 2026 17:52:09 +0000
Manifest next update: Wed 29 Jul 2026 17:52:09 +0000
Files and hashes: 1: HgqTik3H07rU9fll3NVeCymMQts.crl (hash: LIfe5iPTRNIZzj++YQONfJZnB49zskmru145wwENiv8=)
2: 7592203EB1B111E999187E66C4F9AE02.roa (hash: FPxJw4sExbccVQ2M9hVDSe9NeO0aMI9+xaKlLCWTwe8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/HgqTik3H07rU9fll3NVeCymMQts.crl
rsync://rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/HgqTik3H07rU9fll3NVeCymMQts.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgqTik3H07rU9fll3NVeCymMQts.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:52:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3799 (0xed7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174A4F, serialNumber=1E0A938A4DC7D3BAD4F5F965DCD55E0B298C42DB
Validity
Not Before: Jul 22 17:52:09 2026 GMT
Not After : Jul 29 17:52:09 2026 GMT
Subject: CN=6a61034a-c20f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:89:96:cd:0a:ea:f4:1a:5d:1a:7e:77:c4:fd:
67:be:59:b9:60:8d:39:74:3a:11:be:41:16:3e:45:
d9:11:3c:48:21:70:e3:82:ad:cc:10:1a:5d:32:23:
48:dc:88:27:5e:52:3f:3c:1d:cc:84:98:c9:f6:b0:
c2:d1:65:e6:03:f9:b3:46:fe:2d:fe:93:a6:d2:89:
d7:3a:52:79:e4:bf:48:5d:ea:08:a5:1a:42:fa:17:
65:5b:2f:0b:8f:35:87:cb:6c:ac:8c:85:00:24:3d:
c2:57:89:0f:24:ca:96:7d:f7:2b:1c:70:8b:08:19:
90:92:62:fd:a2:5b:9a:1f:0a:1f:b9:09:6b:bc:7b:
26:23:8c:d6:fa:e1:14:9b:34:7e:11:46:1c:58:60:
98:d4:c9:75:91:3c:f2:2f:9e:53:8e:26:7e:a2:98:
67:e5:eb:bb:bd:54:63:dd:41:f1:f0:58:80:d6:c2:
58:ed:7e:34:ed:cc:64:ac:51:1c:a1:65:cb:fb:52:
77:77:dc:ac:ad:dd:ae:83:d4:5f:a2:f6:81:2c:b6:
b1:00:de:1a:81:d1:f3:ec:5f:d9:a5:d9:db:83:5a:
b4:f3:63:7d:b9:dc:3d:a9:5c:7e:2d:c1:1c:11:f6:
83:c5:ee:34:d7:39:fa:3a:34:5b:aa:ec:d9:d1:d4:
0c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:27:10:EF:9F:5B:19:6E:2B:22:1D:3C:12:FA:01:70:2B:DF:4E:5E
X509v3 Authority Key Identifier:
keyid:1E:0A:93:8A:4D:C7:D3:BA:D4:F5:F9:65:DC:D5:5E:0B:29:8C:42:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/HgqTik3H07rU9fll3NVeCymMQts.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgqTik3H07rU9fll3NVeCymMQts.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/HgqTik3H07rU9fll3NVeCymMQts.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:1e:e9:75:23:59:fe:2e:57:0a:0a:8c:d5:83:21:6a:d3:d8:
4c:20:7c:0b:f7:9e:2f:0f:80:19:a6:7f:4c:be:04:b6:f5:49:
1a:d9:f4:05:97:87:5e:d7:c1:85:b0:47:74:f2:34:7c:ec:ce:
02:e5:1f:e1:9b:c8:22:5c:0f:1e:92:76:44:6b:6e:96:52:11:
d7:c3:5c:af:68:e8:2a:96:95:94:ca:e9:1d:cc:bd:31:2d:80:
b0:93:45:c5:48:d0:01:ef:5a:cb:81:e9:0b:03:19:51:d7:02:
22:21:55:2b:1c:f2:d1:e5:fc:09:14:d4:49:ee:84:6f:14:1c:
27:db:af:b3:54:8a:b1:5c:fc:bc:f2:78:8d:25:8c:7e:39:21:
b0:f6:5b:f8:08:04:a3:27:f8:81:67:94:1c:87:14:fa:d9:8e:
b3:e0:17:b2:b7:8b:cf:61:29:52:ee:50:0e:38:30:4a:cc:45:
45:ec:8f:bc:ca:a5:f2:54:eb:c7:fe:ec:9d:d4:dc:e2:e8:9f:
55:91:89:ee:90:e2:8f:f5:8b:ef:82:45:8e:6d:e7:c0:76:71:
04:cf:f8:2b:ef:96:ca:05:e8:e7:a3:86:1e:18:b5:0d:19:14:
b1:40:84:4c:f8:b2:48:c6:88:dc:46:c8:a0:a8:ed:3f:9b:f1:
f5:0d:ce:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:45:23 2026 by rpki-client