
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.mft
File: HMTgP8GsieF7GYJHtuZFSrunG4w.mft (raw, json)
Hash identifier: AT/TOHX9snQUE0fv/E/Agmk+rZL8gq/QR9VsS80BY9w=
Subject key identifier: F7:BA:2D:19:8F:87:49:D5:DE:47:1D:27:E9:0D:1D:0B:0D:C3:BF:93
Authority key identifier: 1C:C4:E0:3F:C1:AC:89:E1:7B:19:82:47:B6:E6:45:4A:BB:A7:1B:8C
Certificate issuer: /CN=A9174BB4/serialNumber=1CC4E03FC1AC89E17B198247B6E6454ABBA71B8C
Certificate serial: 17F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HMTgP8GsieF7GYJHtuZFSrunG4w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.mft
Manifest number: 17F4
Signing time: Thu 26 Mar 2026 16:30:31 +0000
Manifest this update: Thu 26 Mar 2026 16:30:31 +0000
Manifest next update: Thu 02 Apr 2026 16:30:31 +0000
Files and hashes: 1: HMTgP8GsieF7GYJHtuZFSrunG4w.crl (hash: cH0iQOMmUov/bAXSTt47f5DL6WNmRnwgtBuPeV9THAA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.crl
rsync://rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HMTgP8GsieF7GYJHtuZFSrunG4w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 16:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6132 (0x17f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174BB4, serialNumber=1CC4E03FC1AC89E17B198247B6E6454ABBA71B8C
Validity
Not Before: Mar 26 16:30:31 2026 GMT
Not After : Apr 2 16:30:31 2026 GMT
Subject: CN=69c55f27-91ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:96:8e:d2:21:13:18:86:d6:53:c5:03:62:47:
7e:1a:12:ba:1e:e8:60:c9:32:4c:db:f6:25:3a:c1:
d8:6f:6d:60:57:95:b7:f8:d8:d3:7a:db:8a:79:ac:
a3:1a:47:52:87:6e:77:fc:ee:01:ae:df:d1:50:fd:
34:44:1e:3f:6c:ae:1e:41:71:49:e5:20:27:73:fa:
78:72:a2:06:50:d5:86:27:8c:69:39:fe:68:00:00:
88:c5:4d:83:77:53:7e:fc:bb:f9:71:b3:d0:83:9a:
3c:ed:be:eb:5a:c8:10:7a:31:7e:77:23:34:14:92:
06:86:ef:04:37:1f:04:59:b6:9d:6b:8f:84:34:db:
0e:74:7f:c5:40:3f:57:1f:e2:35:cd:5f:21:a9:a4:
3e:c6:f6:f4:b7:29:90:f0:fc:1d:de:a4:7d:1f:f9:
16:ef:c8:f8:3b:6e:b9:05:fd:99:25:c4:ac:71:d1:
db:db:01:4b:76:c7:94:89:e4:3a:18:8b:05:06:59:
d2:de:a1:28:b2:91:db:28:09:ff:50:e8:3f:b2:f7:
ff:92:30:b2:36:bb:a5:5b:e6:9a:ca:4b:59:fb:38:
d2:fa:2d:de:f0:c5:8f:60:a3:9f:6f:06:9c:4e:2a:
0d:d9:54:9e:fb:b8:a5:54:2c:47:87:aa:4d:60:a6:
fc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:BA:2D:19:8F:87:49:D5:DE:47:1D:27:E9:0D:1D:0B:0D:C3:BF:93
X509v3 Authority Key Identifier:
keyid:1C:C4:E0:3F:C1:AC:89:E1:7B:19:82:47:B6:E6:45:4A:BB:A7:1B:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HMTgP8GsieF7GYJHtuZFSrunG4w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:6a:75:3f:fe:cc:52:aa:4c:e2:a8:7a:e7:1d:99:ed:4f:d1:
18:9e:2e:af:14:49:3c:ca:1d:38:38:46:7d:bc:3a:ff:52:30:
cd:01:b1:55:28:1f:31:22:80:1a:d1:cb:a8:0c:c1:be:a6:13:
22:82:89:98:25:61:40:3c:df:5b:00:c8:c2:e1:6d:78:98:b5:
5a:5c:9b:59:3f:79:f4:e4:17:d5:ca:cc:e5:0d:9c:ba:cd:ea:
72:4d:e0:b2:26:dd:f9:88:f8:e0:fb:a5:33:cc:b3:04:72:b2:
22:e0:82:9e:e0:e0:e2:5e:8d:5a:25:26:0f:73:df:ca:6f:57:
11:40:1a:1d:e4:f3:3b:39:bb:d6:d2:62:b4:88:fe:c7:8c:00:
65:60:ff:fa:e5:74:71:80:36:b5:d1:1d:5a:50:a0:07:fd:2a:
f7:21:e8:4d:e7:d5:ce:d6:86:56:09:7d:59:c0:69:26:e8:cb:
9b:e7:00:6f:b7:db:6f:da:72:fb:3e:52:11:5a:59:22:9a:14:
96:d4:5d:16:b1:c7:d2:d8:98:1b:3b:17:df:c3:74:b5:82:e2:
a2:73:f1:6e:c1:fc:06:fd:32:70:4b:d5:dc:cd:6e:69:71:f0:
dd:e5:a5:0a:c9:40:54:1b:1b:c2:db:4c:59:81:38:4c:36:c2:
20:e2:9c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:49:01 2026 by rpki-client