
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.mft
File: HhI4RWNx50SJRiLpisHuVbQUXhA.mft (raw, json)
Hash identifier: tgHPEWVgQoUCeJ0Zndn8zYBIHErTla3Wljh9cdAeRJk=
Subject key identifier: F9:BE:B9:C3:DA:83:89:76:E1:24:AD:D9:F7:A9:AC:A5:D3:EF:D3:0C
Authority key identifier: 1E:12:38:45:63:71:E7:44:89:46:22:E9:8A:C1:EE:55:B4:14:5E:10
Certificate issuer: /CN=A917E678/serialNumber=1E1238456371E744894622E98AC1EE55B4145E10
Certificate serial: 1692
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HhI4RWNx50SJRiLpisHuVbQUXhA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.mft
Manifest number: 162C
Signing time: Tue 22 Sep 2026 16:43:22 +0000
Manifest this update: Tue 22 Sep 2026 16:43:21 +0000
Manifest next update: Tue 29 Sep 2026 16:43:21 +0000
Files and hashes: 1: HhI4RWNx50SJRiLpisHuVbQUXhA.crl (hash: yD8AZjlZlTqmASkz1/WnpkSrM23fb42SEJ6bj5KxKD4=)
2: C9203DF43D5E11F19F1D0B4EAB833773.roa (hash: DX4eexE4YC+Zii7wTi3ae+5wNhCUW2YRgzcsXgrn4Gc=)
3: 0BFFC86E3FC211F18966A53AC7833773.roa (hash: 1bRai1yKxod8Ng4Dkl4xffVS1smeGTtBYsweb+835T4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.crl
rsync://rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HhI4RWNx50SJRiLpisHuVbQUXhA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 14:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5778 (0x1692)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E678, serialNumber=1E1238456371E744894622E98AC1EE55B4145E10
Validity
Not Before: Sep 22 16:43:21 2026 GMT
Not After : Sep 29 16:43:21 2026 GMT
Subject: CN=6ab2b02a-099c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a9:c8:1d:5a:65:46:32:b2:b4:59:eb:13:4b:
ed:36:ea:32:59:0a:e4:1d:87:34:06:8d:fa:e8:e1:
42:d3:3b:2c:d1:c3:67:95:cc:a4:0a:42:e2:2e:91:
53:55:71:30:10:1b:23:06:87:7a:92:15:ec:c7:4e:
64:ca:94:c3:73:cc:67:9d:e8:22:fd:b4:e6:38:7f:
17:da:50:6f:cb:72:09:bf:70:30:d8:82:e6:35:e1:
92:55:08:3c:f9:19:fb:b5:80:eb:ff:da:e3:e6:c7:
c9:a0:bd:40:d9:ef:26:2a:d6:af:40:17:7c:2b:11:
dd:c0:cc:ba:b7:dc:84:e6:23:31:5e:fe:ef:3a:a3:
87:0c:6a:ce:5d:d3:73:d7:79:89:26:2d:ad:b0:25:
cc:0f:0c:23:94:6a:aa:18:9e:c3:2b:8e:72:9f:1e:
74:0d:8e:10:d8:22:07:af:47:9d:85:86:8b:46:f6:
47:e4:8b:39:69:9b:a6:fc:5d:e5:c7:24:14:85:c5:
ce:30:59:f3:36:10:be:41:8d:e9:f0:3d:31:b3:9a:
34:08:b2:df:8e:e8:1c:1f:66:aa:97:e5:e7:eb:d8:
20:25:00:1f:b5:4a:ea:65:5f:11:6f:a9:8a:30:42:
8c:1d:cd:0e:9d:ab:f3:79:0c:80:95:43:84:b2:3c:
d2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:BE:B9:C3:DA:83:89:76:E1:24:AD:D9:F7:A9:AC:A5:D3:EF:D3:0C
X509v3 Authority Key Identifier:
keyid:1E:12:38:45:63:71:E7:44:89:46:22:E9:8A:C1:EE:55:B4:14:5E:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HhI4RWNx50SJRiLpisHuVbQUXhA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:2b:cf:87:a8:49:b6:2c:28:36:2d:d6:9f:08:8f:23:75:1c:
09:e1:84:e4:1f:3c:e3:16:2e:87:33:39:df:6a:6d:00:e8:9a:
aa:bf:99:b7:ee:34:6c:ef:94:28:4d:2c:a6:22:d7:04:0e:97:
99:02:5f:5a:83:2c:9f:14:a9:1a:1a:78:7c:4c:50:b5:ef:c9:
04:d0:16:58:64:33:a0:a5:b8:20:da:0f:1f:b7:7e:83:9f:b3:
f1:b2:99:ba:b5:b0:9c:4a:10:c9:97:19:4e:b7:0b:e3:57:72:
73:7b:ed:6d:f1:3a:12:67:fa:bd:38:45:3e:3e:42:d8:ab:6d:
c9:79:a8:fb:d3:37:14:0a:4b:5b:55:a4:5e:13:16:99:ca:75:
f5:f1:98:d9:05:15:88:57:e7:ae:8d:8c:26:2a:92:7c:d5:ba:
99:33:fe:20:e4:67:01:b2:0a:26:4d:3b:37:f3:26:33:06:24:
85:52:f6:3b:06:d2:03:3b:7b:e2:cf:ef:57:7b:c7:89:59:f8:
3f:71:6c:ed:55:a1:6a:4e:3b:5f:f9:45:ea:91:a3:7d:e5:13:
ba:54:ca:5b:89:cc:db:83:71:84:fb:da:3e:9d:6b:ea:41:ba:
f0:42:c9:fd:78:da:07:37:18:bf:c0:b2:b6:53:71:6b:55:11:
18:4c:fc:ac
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICFpIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0U2NzgxMTAvBgNVBAUTKDFFMTIzODQ1NjM3MUU3NDQ4OTQ2MjJFOThBQzFFRTU1
QjQxNDVFMTAwHhcNMjYwOTIyMTY0MzIxWhcNMjYwOTI5MTY0MzIxWjAYMRYwFAYD
VQQDEw02YWIyYjAyYS0wOTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqqnIHVplRjKytFnrE0vtNuoyWQrkHYc0Bo366OFC0zss0cNnlcykCkLiLpFT
VXEwEBsjBod6khXsx05kypTDc8xnnegi/bTmOH8X2lBvy3IJv3Aw2ILmNeGSVQg8
+Rn7tYDr/9rj5sfJoL1A2e8mKtavQBd8KxHdwMy6t9yE5iMxXv7vOqOHDGrOXdNz
13mJJi2tsCXMDwwjlGqqGJ7DK45ynx50DY4Q2CIHr0edhYaLRvZH5Is5aZum/F3l
xyQUhcXOMFnzNhC+QY3p8D0xs5o0CLLfjugcH2aql+Xn69ggJQAftUrqZV8Rb6mK
MEKMHc0OnavzeQyAlUOEsjzS5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPm+ucPa
g4l24SSt2feprKXT79MMMB8GA1UdIwQYMBaAFB4SOEVjcedEiUYi6YrB7lW0FF4Q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC82OTdFMzU2QTY5
NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9IaEk0UldOeDUwU0pSaUxwaXNIdVZiUVVY
aEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0hoSTRSV054NTBTSlJpTHBpc0h1VmJRVVhoQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RTY3OC82OTdFMzU2QTY5NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9IaEk0UldOeDUw
U0pSaUxwaXNIdVZiUVVYaEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsSvPh6hJtiwoNi3WnwiPI3UcCeGE5B884xYuhzM532ptAOiaqr+Zt+40bO+U
KE0spiLXBA6XmQJfWoMsnxSpGhp4fExQte/JBNAWWGQzoKW4INoPH7d+g5+z8bKZ
urWwnEoQyZcZTrcL41dyc3vtbfE6Emf6vThFPj5C2KttyXmo+9M3FApLW1WkXhMW
mcp19fGY2QUViFfnro2MJiqSfNW6mTP+IORnAbIKJk07N/MmMwYkhVL2OwbSAzt7
4s/vV3vHiVn4P3Fs7VWhak47X/lF6pGjfeUTulTKW4nM24NxhPvaPp1r6kG68ELJ
/XjaBzcYv8CytlNxa1URGEz8rA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 21:16:56 2026 by rpki-client