
$ rpki-client -vvf rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft
File: h_lY2vSYZZqe7g_xRCJrFxBIneA.mft (raw, json)
Hash identifier: VoqRwiNLz2TCk7/3dc+z2ojNYbATom0+guSBBfn8q9Q=
Subject key identifier: 3E:7C:74:5E:4E:35:1D:4B:56:B2:AE:58:E8:3F:D6:EE:72:1D:6C:4F
Authority key identifier: 87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0
Certificate issuer: /CN=A91354AE/serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0
Certificate serial: 0422
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft
Manifest number: 0414
Signing time: Sun 01 Mar 2026 01:15:08 +0000
Manifest this update: Sun 01 Mar 2026 01:15:07 +0000
Manifest next update: Sun 08 Mar 2026 01:15:07 +0000
Files and hashes: 1: h_lY2vSYZZqe7g_xRCJrFxBIneA.crl (hash: 1VQMAEgcaQacBseoW4nJg1yiFJTd8RhGrzcX63Klflw=)
2: 8C5D4FF4766511EF8820F844C4F9AE02.roa (hash: a/GUffZHyYeIWzCyqNA7Fc/IgTrpVgmYYpvH+uBkGnA=)
3: FFF8A36A34E311EE877E760DC4F9AE02.roa (hash: Td4Qw51TSr10UgTmfhROy8qSBPdrA5ySYZaY11oYN0U=)
4: 8DB35F6A766511EF8820F844C4F9AE02.roa (hash: DUjlMecJ3MCBuCiDf6r0BnVvRVnuDf5vmODbFKyvDAA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl
rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 01:15:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1058 (0x422)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91354AE, serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0
Validity
Not Before: Mar 1 01:15:07 2026 GMT
Not After : Mar 8 01:15:07 2026 GMT
Subject: CN=69a3931c-5b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:cc:9d:0e:48:a7:d2:41:37:43:ab:0e:1e:f6:
86:9f:63:31:5c:ec:28:5f:9a:55:9e:58:05:3d:4d:
91:2b:ee:98:74:15:7b:fa:9f:20:90:62:81:59:4e:
bf:64:4d:61:03:88:2d:d6:ef:29:91:1e:17:15:2d:
ab:8d:e1:4b:37:e2:93:06:52:fd:2d:01:26:33:4c:
8c:a8:af:2a:f3:55:54:19:04:36:bd:90:87:d8:8d:
75:e1:f7:0f:32:5d:a2:30:16:f4:1f:9e:19:f9:fd:
84:07:4e:1d:42:14:a7:af:d1:b6:6c:a3:56:58:64:
16:37:2b:40:d9:69:3e:9c:56:33:c9:62:7c:21:a5:
27:f9:37:8e:53:d9:49:a7:9f:d8:6c:27:d1:dc:c4:
65:47:18:68:78:3d:b6:b0:98:f0:9d:ca:f8:ee:53:
b1:01:aa:02:52:cd:88:00:aa:93:ff:a2:d5:da:46:
0b:c7:67:90:21:30:60:18:b8:33:21:44:c1:5d:dd:
67:2e:cd:22:ac:19:77:73:42:96:72:e5:2b:5f:31:
d7:32:fb:5f:cd:06:12:eb:11:37:f4:80:d5:bf:f1:
19:21:84:f1:12:f9:5f:34:f5:21:37:5c:fd:fa:f6:
e7:ac:00:9f:82:7a:6e:71:39:8f:b4:8c:48:03:27:
de:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:7C:74:5E:4E:35:1D:4B:56:B2:AE:58:E8:3F:D6:EE:72:1D:6C:4F
X509v3 Authority Key Identifier:
keyid:87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:92:75:f7:db:3d:d1:50:e9:dd:dd:2b:3c:21:45:d3:5a:bc:
d9:a1:91:fe:91:77:ed:96:29:27:74:b1:de:e5:00:b7:52:53:
33:42:1d:23:5b:a3:cf:58:0b:51:c4:8d:8d:55:28:f9:7b:ce:
da:10:6d:f0:e6:f8:e0:85:4f:7a:f9:8a:bc:10:84:2c:7c:26:
28:de:5e:be:7a:d5:6d:89:0b:58:b0:2b:39:8c:f5:21:ae:cd:
55:ee:d6:0a:8f:86:95:ca:1d:ed:f2:9b:24:51:2d:1b:28:23:
20:72:16:9b:56:61:62:0b:09:1b:17:8f:16:3c:89:a3:d9:eb:
90:fe:c2:48:95:3c:bf:73:ca:ba:5b:67:d1:6b:7e:e1:27:d4:
8a:1a:9c:f6:fe:ab:ec:9f:f8:60:52:db:c9:3e:20:40:2d:6b:
54:c9:20:22:dd:fc:b3:2d:ce:94:b6:6d:b6:ca:1f:99:eb:5f:
0d:ee:e9:86:63:12:d9:c2:45:83:65:ff:e4:4e:cc:ff:57:29:
92:4a:f8:40:5e:48:66:15:12:e1:c4:27:e0:15:bc:1e:db:53:
d1:b5:1a:7a:25:d2:16:a3:98:fe:69:f1:fb:25:6e:36:de:1f:
e5:9d:91:59:3f:b4:60:75:8c:db:62:47:59:82:3a:ac:06:cb:
2c:1c:d8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:27:45 2026 by rpki-client