
$ rpki-client -vvf rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft
File: HJuixf6owDTaVR_a3GKlOnoC5ds.mft (raw, json)
Hash identifier: azgYw34r3Psln3qZVJGGtDi4rdXqTpdtZuSk7BPYbZ0=
Subject key identifier: 41:3F:78:6B:85:E1:83:75:88:0F:EB:5C:4A:24:3F:91:2D:D1:73:93
Authority key identifier: 1C:9B:A2:C5:FE:A8:C0:34:DA:55:1F:DA:DC:62:A5:3A:7A:02:E5:DB
Certificate issuer: /CN=A9193D86/serialNumber=1C9BA2C5FEA8C034DA551FDADC62A53A7A02E5DB
Certificate serial: 0A0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft
Manifest number: 09EB
Signing time: Tue 24 Mar 2026 19:39:53 +0000
Manifest this update: Tue 24 Mar 2026 19:39:52 +0000
Manifest next update: Tue 31 Mar 2026 19:39:52 +0000
Files and hashes: 1: HJuixf6owDTaVR_a3GKlOnoC5ds.crl (hash: O9f15IVFtbgiwD1l/yNhemvBQjFxvyzL8jg1YQvxfUE=)
2: 79C02FB0CC8511EC8D238672C4F9AE02.roa (hash: PEyE0w8+UrcKJlHY3jaK16cYhVK4lg74ijcsWV2DoxU=)
3: 52FC6006A19911EA96035C38C4F9AE02.roa (hash: WcxNaiIGqzItQBb7CYbwvBMMYMGcLD8tEl0Q7aIbezo=)
4: 7B136C42CC8511EC8D238672C4F9AE02.roa (hash: f4XaB+bRmsoNFuDMRRMiph6D0qfKs6SQvSg9M2XJC3I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.crl
rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:39:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2573 (0xa0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193D86, serialNumber=1C9BA2C5FEA8C034DA551FDADC62A53A7A02E5DB
Validity
Not Before: Mar 24 19:39:52 2026 GMT
Not After : Mar 31 19:39:52 2026 GMT
Subject: CN=69c2e889-7713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:76:94:6f:20:45:8f:b1:82:16:11:3c:8e:f1:
55:dd:6c:bf:5e:92:03:77:ff:5c:51:af:7a:06:a4:
ff:63:84:5a:a9:5f:30:65:61:17:49:9f:51:c2:3c:
d7:9a:f3:e8:eb:4b:87:06:f8:35:d5:98:42:70:b7:
9a:0c:4d:4f:4e:c8:73:bd:bd:c9:67:a9:5b:99:e7:
e8:aa:d2:6d:29:63:47:b7:b8:26:cb:84:01:2d:16:
e1:87:6f:f2:ec:23:9b:8e:9f:17:2f:5b:ea:8b:f7:
b3:f3:84:dc:67:44:5e:03:fb:82:04:38:19:f0:45:
84:cc:a6:ac:07:d5:e1:1c:47:22:f0:39:d4:b7:61:
9d:a8:cc:27:5e:3b:d5:db:c7:1b:62:d8:e6:44:00:
4d:e3:85:9b:28:db:b9:21:3f:1a:76:3c:25:c3:2e:
51:4a:90:53:07:6e:21:f4:6b:3f:76:22:63:35:e1:
3a:e7:87:da:93:8a:b9:59:f8:c6:08:64:60:a0:d8:
87:14:6c:e5:4f:0d:1a:37:5a:8f:35:46:d6:75:08:
36:61:2a:ed:62:a0:74:c8:3d:ae:38:05:aa:ea:af:
e8:87:59:4f:c7:9e:3a:23:dc:9e:42:63:57:9b:da:
7f:3e:50:63:fe:bb:39:30:1c:06:31:19:aa:4c:0e:
b5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:3F:78:6B:85:E1:83:75:88:0F:EB:5C:4A:24:3F:91:2D:D1:73:93
X509v3 Authority Key Identifier:
keyid:1C:9B:A2:C5:FE:A8:C0:34:DA:55:1F:DA:DC:62:A5:3A:7A:02:E5:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:b8:78:b5:6d:6f:8d:8e:10:bf:ef:f1:a7:a1:1d:d4:db:ae:
3f:f3:ba:cd:9e:b6:53:15:19:85:da:f0:e9:5e:8f:7b:1b:ab:
d0:ae:42:be:68:9f:eb:4e:7a:75:08:e9:de:48:bf:3c:50:62:
86:2f:4b:4b:7f:50:a7:2c:3e:7e:6b:65:42:2e:1c:d5:0d:00:
4d:06:25:bf:ff:ab:a8:19:08:f1:7a:d0:b2:28:6c:69:bb:e6:
7f:d4:02:63:7b:b2:57:fc:3a:0a:af:3b:69:1a:9f:42:4e:ac:
f9:a8:51:4f:1c:26:1d:e3:23:1f:66:b4:62:90:f2:c4:83:5d:
28:f2:a2:59:68:b9:41:65:ce:a0:84:3a:68:6a:7a:3c:0d:f7:
f0:75:dc:8e:53:3e:09:99:5b:7a:a5:08:1c:b6:b3:83:a5:19:
cd:82:78:09:2b:ca:ae:a9:03:b6:db:df:85:e6:32:49:19:7b:
14:12:59:4b:93:b1:6f:68:f3:11:61:fc:55:a3:be:9d:3a:0f:
66:93:ca:26:c1:ab:fb:bb:78:28:98:22:50:9d:15:54:1e:3e:
9d:42:66:98:ac:8f:73:af:50:c6:23:83:ae:90:2a:bd:33:cc:
9b:54:97:d6:2d:30:94:e7:c9:9f:73:89:eb:41:db:e3:95:46:
a1:d4:50:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:17:46 2026 by rpki-client