
$ rpki-client -vvf rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/HNyP8SmsVhBgxHINdUk_12hGxhU.mft
File: HNyP8SmsVhBgxHINdUk_12hGxhU.mft (raw, json)
Hash identifier: iFwk1b+4S/vaVLXGi2Y2psOrO4Opq6nFpZpdWId8tfY=
Subject key identifier: D4:9C:63:BF:76:D6:81:D3:21:95:24:98:63:CB:F7:17:8D:E3:9E:CB
Authority key identifier: 1C:DC:8F:F1:29:AC:56:10:60:C4:72:0D:75:49:3F:D7:68:46:C6:15
Certificate issuer: /CN=A919FE07/serialNumber=1CDC8FF129AC561060C4720D75493FD76846C615
Certificate serial: 0C0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNyP8SmsVhBgxHINdUk_12hGxhU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/HNyP8SmsVhBgxHINdUk_12hGxhU.mft
Manifest number: 0CFB
Signing time: Tue 24 Mar 2026 18:39:29 +0000
Manifest this update: Tue 24 Mar 2026 18:39:28 +0000
Manifest next update: Tue 31 Mar 2026 18:39:28 +0000
Files and hashes: 1: HNyP8SmsVhBgxHINdUk_12hGxhU.crl (hash: lw8TaCvHSgDT6EkS7z5WnUJeU2n5qe1784fPubYiS4U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/HNyP8SmsVhBgxHINdUk_12hGxhU.crl
rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/HNyP8SmsVhBgxHINdUk_12hGxhU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNyP8SmsVhBgxHINdUk_12hGxhU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:39:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3086 (0xc0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919FE07, serialNumber=1CDC8FF129AC561060C4720D75493FD76846C615
Validity
Not Before: Mar 24 18:39:28 2026 GMT
Not After : Mar 31 18:39:28 2026 GMT
Subject: CN=69c2da61-bcb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9f:73:53:8a:0b:16:94:08:52:64:2b:70:69:
67:42:38:95:72:cc:08:32:5f:04:3d:5d:42:97:57:
8e:a8:78:11:59:9d:7a:10:6a:75:8d:3a:52:22:e2:
6b:c8:0c:08:d0:54:9b:bf:b4:97:a8:e5:64:2c:ed:
7f:38:35:0a:a0:fd:5c:70:bb:13:00:f2:97:23:bd:
2a:9e:09:61:9a:eb:ef:9c:d7:55:b8:7d:59:58:b2:
38:dc:37:8f:cf:69:32:20:8c:a6:91:c9:16:ad:79:
fa:13:28:a2:e7:7b:db:ed:46:46:82:10:87:f1:bc:
ba:a3:1f:a8:6e:c1:f4:d1:d5:1b:97:bb:71:4e:00:
3b:86:dd:95:52:9a:ab:09:7f:9b:ce:dc:97:b5:00:
16:42:9a:20:41:09:4b:42:e0:cc:e9:5a:2e:8c:f9:
54:62:25:11:65:8e:38:9a:dc:ef:1e:08:3d:ae:3f:
a6:6b:bc:3c:04:4b:31:3b:12:fa:f7:9a:99:05:3a:
88:b5:da:29:5f:1e:ba:3f:a0:4e:bb:af:3c:1e:51:
94:53:bb:71:48:33:c0:2a:3d:ea:9a:3a:85:fa:93:
e9:35:6f:93:22:dd:d1:1f:32:f9:b6:29:b9:96:3a:
ca:28:1b:24:fb:cd:ec:ae:b1:27:d8:2c:16:f3:37:
3d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:9C:63:BF:76:D6:81:D3:21:95:24:98:63:CB:F7:17:8D:E3:9E:CB
X509v3 Authority Key Identifier:
keyid:1C:DC:8F:F1:29:AC:56:10:60:C4:72:0D:75:49:3F:D7:68:46:C6:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/HNyP8SmsVhBgxHINdUk_12hGxhU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNyP8SmsVhBgxHINdUk_12hGxhU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/HNyP8SmsVhBgxHINdUk_12hGxhU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:3f:9c:de:6b:0e:d3:c2:fa:5a:df:a1:d3:ea:4b:c7:f6:c8:
72:fd:eb:55:d5:e9:0e:ef:3a:b3:c9:ce:e7:56:f1:63:49:d8:
ad:5b:f7:11:98:34:57:98:1a:fe:c5:c4:0c:4a:45:c7:e3:ac:
6f:15:1c:2a:60:65:9a:1d:6f:c3:f3:be:7a:af:ac:e7:92:79:
28:28:25:73:c0:22:cb:1a:3c:a2:a0:81:6c:a6:3a:00:54:5c:
b9:39:ce:2a:e0:1c:e6:d6:47:4b:6d:fa:09:a5:ce:a6:24:0b:
8e:16:24:30:ad:a0:60:81:61:04:60:e7:43:51:74:7c:dd:96:
11:63:43:b0:0d:a3:8c:35:5d:29:98:48:5e:62:68:43:aa:60:
03:06:de:da:59:2b:c9:86:47:e0:8f:ff:8b:86:66:d7:b8:3a:
48:d7:c5:0c:f2:d2:4d:29:16:7d:74:a4:36:5c:a7:aa:9e:0a:
38:56:67:8a:5f:26:3f:e4:2e:1f:79:2d:89:cf:38:3a:4f:a2:
56:4f:c4:60:00:e8:aa:27:99:6c:b2:38:17:e2:ba:d1:b3:0a:
69:fc:f7:39:d4:65:1f:e0:f4:12:1a:96:0d:83:35:b2:03:b7:
c9:c2:5e:3f:70:fc:5c:8f:d1:ef:50:ad:dd:d2:0c:94:ff:7a:
e7:be:a5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:53:53 2026 by rpki-client