
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft
File: hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft (raw, json)
Hash identifier: +RyJu1c8oMG7yEW7rQKs2DP3AUO3CHQqtsEYGvZYfaE=
Subject key identifier: 62:70:61:22:4B:7C:7E:FA:AA:35:A8:1F:3A:35:1D:9E:76:24:9B:47
Authority key identifier: 87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56
Certificate issuer: /CN=A91982EF/serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656
Certificate serial: 0184
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft
Manifest number: 015F
Signing time: Wed 23 Sep 2026 05:04:58 +0000
Manifest this update: Wed 23 Sep 2026 05:04:58 +0000
Manifest next update: Wed 30 Sep 2026 05:04:58 +0000
Files and hashes: 1: hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl (hash: 4AXldxiS33BlxxIDuVMEqCsERWjz3XvSHMciB5NFj6s=)
2: 98AEAB84B72111EF8A087D30C4F9AE02.roa (hash: d33D0nn4vSuDr9mrd9PxLM5FRlHIJ8B/2JN7+OeYbXY=)
3: 3A8C7518B72111EFA9A92F26C4F9AE02.roa (hash: O/afFCUP8vi3DtNxbtCLXq4PUJjWlL9Mty/w2HiZ0No=)
4: 1A3A1E2C287D11F18C83C945A7833773.roa (hash: ZCfKBgXebATm3jCXx6esyXYyxCluZLc0GUaxOph0UXs=)
5: F33309A2B72011EFB3A5D772C4F9AE02.roa (hash: n9XHNHcl2xF8ubtL4a2OwVIihOJ0QV9E2Gddb2c8vlo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl
rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 05:04:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 388 (0x184)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91982EF, serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656
Validity
Not Before: Sep 23 05:04:58 2026 GMT
Not After : Sep 30 05:04:58 2026 GMT
Subject: CN=6ab35dfa-b50e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:26:97:cb:c2:1f:57:b5:7d:22:07:71:b9:37:
04:f1:df:25:ef:bb:3d:59:af:95:97:09:65:8b:f3:
3b:e4:27:93:ef:6f:52:2a:c5:a0:40:7f:06:8e:7c:
af:3d:aa:4c:6b:a1:8d:8a:02:2f:12:7a:72:78:5c:
02:be:34:9f:76:57:cc:e5:5c:a3:ff:47:e4:cb:2b:
f2:39:e6:00:c8:c9:95:d0:26:c9:94:e0:53:3b:13:
c2:eb:60:10:77:a0:ee:17:8f:f6:22:a3:f2:9f:da:
c1:22:6d:cd:b0:bd:ac:1d:56:6c:74:55:5e:33:8b:
6a:0d:c8:86:3c:d5:d6:3d:15:12:ad:3f:11:7b:7f:
15:02:0b:9b:ca:3a:e5:14:8b:ba:5b:13:b1:6a:e1:
f6:5e:b0:10:97:05:f2:72:0b:6b:c6:7d:8a:5c:6c:
c4:0a:4b:10:19:58:71:03:39:f5:78:b6:2b:c9:cf:
ac:b3:d8:4b:be:17:ca:bf:35:99:bf:04:66:d2:ac:
35:19:5b:8a:de:72:da:9a:d7:a8:b3:ab:6c:43:b4:
93:dd:c8:d1:65:ae:b6:2c:05:50:0e:a1:e5:c1:65:
03:34:e8:cd:98:67:02:5e:95:57:11:fe:73:31:72:
6d:af:3b:ce:1e:9e:2b:47:64:a3:e7:5d:7b:3e:7b:
8c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:70:61:22:4B:7C:7E:FA:AA:35:A8:1F:3A:35:1D:9E:76:24:9B:47
X509v3 Authority Key Identifier:
keyid:87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:c6:82:b3:1e:8b:9d:1c:67:cb:73:e6:b9:0c:c6:2e:bc:8a:
7f:6d:bc:20:43:24:fe:fc:cd:3b:b8:de:36:73:e2:8b:2f:8c:
7b:c9:d9:98:41:1f:0c:97:5a:47:74:96:fc:42:5b:0d:4c:3b:
a1:9b:3e:84:37:e8:fe:5d:45:3b:aa:7e:8d:0b:b5:45:f6:89:
10:a3:4f:3b:47:05:5a:4e:49:36:43:f7:40:f5:84:95:42:d7:
1b:75:3d:dc:2e:fd:69:d3:bb:46:8e:49:02:09:cb:68:63:8a:
d4:43:53:6c:74:8b:dd:19:1f:b8:95:53:bb:1b:25:9f:ae:b0:
4a:8e:75:ee:8e:90:64:8b:74:50:cb:e6:c5:33:90:ca:52:af:
6f:21:1f:46:61:46:12:9e:f7:35:03:06:ac:62:e0:20:ba:57:
d6:e0:b2:19:76:ce:f3:c1:1c:f6:f1:ac:c8:fd:01:ae:2e:45:
3b:e2:cf:5d:3d:aa:af:91:90:6b:1e:2e:a4:01:ff:ab:73:86:
c1:85:63:a9:be:f8:82:33:53:a2:e6:a2:43:fa:6f:53:c7:39:
38:a1:83:cc:a8:cb:49:0a:5d:ab:82:06:0f:3f:ff:f3:8f:4e:
ce:87:84:da:48:ad:60:03:d0:38:d0:d4:80:4b:57:82:36:79:
39:93:d7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:21:38 2026 by rpki-client