
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.mft
File: HSpVFaipmzCyHRhxvPr9J-saEyo.mft (raw, json)
Hash identifier: pzuSme/UU/xkreV+gshLIIiyZdwM7Rqtu7z2soDfJSg=
Subject key identifier: C0:0F:AC:9F:62:BA:AD:9A:33:14:D5:90:19:8E:11:CE:AD:9F:8B:26
Authority key identifier: 1D:2A:55:15:A8:A9:9B:30:B2:1D:18:71:BC:FA:FD:27:EB:1A:13:2A
Certificate issuer: /CN=A9185B30/serialNumber=1D2A5515A8A99B30B21D1871BCFAFD27EB1A132A
Certificate serial: 02FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSpVFaipmzCyHRhxvPr9J-saEyo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.mft
Manifest number: 02F4
Signing time: Wed 25 Mar 2026 00:56:16 +0000
Manifest this update: Wed 25 Mar 2026 00:56:16 +0000
Manifest next update: Wed 01 Apr 2026 00:56:16 +0000
Files and hashes: 1: HSpVFaipmzCyHRhxvPr9J-saEyo.crl (hash: YKqTAtb6X/K6p4t1pRa+gKciWdNtrt/ZhQdf0Rwh7Ew=)
2: D6E7D65C192E11ED927BF512C4F9AE02.roa (hash: DVr0amxAWZgoxiAH+g9huvxmF7FumJsE61KGOjDJl5E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.crl
rsync://rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSpVFaipmzCyHRhxvPr9J-saEyo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:56:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 762 (0x2fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185B30, serialNumber=1D2A5515A8A99B30B21D1871BCFAFD27EB1A132A
Validity
Not Before: Mar 25 00:56:16 2026 GMT
Not After : Apr 1 00:56:16 2026 GMT
Subject: CN=69c332b0-22d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f3:d8:c6:20:ce:69:a1:e6:3f:4d:29:37:16:
64:20:31:0e:ab:8d:01:75:de:a8:ff:81:9d:8a:2c:
28:b5:d4:8f:14:52:1b:32:df:c2:ba:e2:54:bb:26:
ea:fb:32:4d:ed:e4:07:fe:7f:b9:20:b0:ce:9f:cd:
3e:61:45:7d:d3:63:f4:c7:b8:ee:d9:e2:bb:e1:ac:
a1:a0:fa:4f:4b:6e:7e:a8:19:b1:86:fe:cc:e8:d2:
8d:80:1c:b5:50:b8:13:4e:5f:fd:bf:b4:67:20:04:
66:2e:51:5f:c1:81:ec:a2:cd:60:f8:0a:35:fb:f5:
8a:1f:4f:53:e2:ea:7d:8c:58:e4:78:21:3f:3b:0b:
cf:6b:a6:a5:6d:fa:e2:79:df:04:b2:a5:d2:db:e0:
25:06:b7:0a:d5:cd:92:93:3d:3c:1c:2e:8f:b3:c8:
e5:46:2a:c5:02:ee:f6:24:0e:3d:8b:42:f8:62:44:
6b:01:f0:d8:b7:84:3b:e2:1d:d9:48:44:07:49:43:
00:46:7e:d5:0f:1e:26:44:52:59:a6:1c:d4:1e:b8:
e0:4a:a9:f2:d3:e2:ea:9c:4b:6c:8c:cf:93:a4:be:
98:85:74:89:b4:51:a0:3d:a8:96:14:e7:af:57:f3:
e0:3c:cd:68:40:b1:43:12:c4:5c:d8:31:59:83:a0:
1a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:0F:AC:9F:62:BA:AD:9A:33:14:D5:90:19:8E:11:CE:AD:9F:8B:26
X509v3 Authority Key Identifier:
keyid:1D:2A:55:15:A8:A9:9B:30:B2:1D:18:71:BC:FA:FD:27:EB:1A:13:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSpVFaipmzCyHRhxvPr9J-saEyo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:24:d6:77:9d:84:8b:79:bb:c5:53:b9:9e:9a:3a:31:b7:71:
75:af:02:35:27:dd:6a:1a:f6:4a:76:2a:2c:93:02:3c:9a:4a:
b5:27:86:8c:59:2f:9e:44:48:09:bf:e6:70:a1:ba:35:ae:57:
fe:4c:97:1f:e1:22:2f:82:71:92:0a:2c:19:69:93:b4:cc:a7:
40:b9:7c:8a:a2:cd:ca:1a:c1:69:6b:5b:cf:1a:f9:34:c7:52:
ae:c1:dc:31:ec:2c:2d:b1:a9:d7:af:91:c9:9d:23:5b:c3:a0:
6d:12:9d:89:14:71:45:07:4d:dd:4f:d8:4e:5a:a9:6e:31:bb:
eb:20:7f:02:95:09:42:e4:b8:f5:82:83:2f:27:5e:20:28:51:
d9:d0:4c:a2:00:ec:30:02:1a:d4:91:74:c2:7d:33:8a:6c:e5:
9b:d5:65:17:33:f3:3e:64:de:6e:a3:b7:2d:3f:66:03:01:80:
37:fa:1e:c1:21:ca:20:f9:f8:d7:89:bd:cf:f7:2f:11:e1:72:
6b:fc:aa:be:5d:dc:8a:a6:81:13:bf:d5:d4:4a:c0:c1:6b:37:
81:3b:6f:c7:23:28:74:8a:0c:31:b4:19:40:96:44:7e:4a:c7:
e4:59:d1:91:5a:89:d1:b1:b5:44:3e:ed:0d:76:43:52:5a:0d:
29:b1:41:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:28:44 2026 by rpki-client