
$ rpki-client -vvf rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft
File: h_lY2vSYZZqe7g_xRCJrFxBIneA.mft (raw, json)
Hash identifier: A9J4ez+4MoZSicgtAbxrs2OvtY0j1Vp00YOEwjrCw5o=
Subject key identifier: 9B:6A:95:29:ED:56:D3:70:A6:CB:1F:D6:57:D8:6B:1B:AD:F2:56:C7
Authority key identifier: 87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0
Certificate issuer: /CN=A91354AE/serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0
Certificate serial: 0461
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft
Manifest number: 044D
Signing time: Sat 13 Jun 2026 00:17:38 +0000
Manifest this update: Sat 13 Jun 2026 00:17:38 +0000
Manifest next update: Sat 20 Jun 2026 00:17:38 +0000
Files and hashes: 1: h_lY2vSYZZqe7g_xRCJrFxBIneA.crl (hash: S7Lia1ISE1Ze30z//WtN33qpE3KhSACYdmGo97V6Cwc=)
2: 8DB35F6A766511EF8820F844C4F9AE02.roa (hash: YKkvmk+q8uJbT1Z9J9DbUkbZ+Iajvavs0STqwkz+YJA=)
3: FFF8A36A34E311EE877E760DC4F9AE02.roa (hash: GiZELc+b+jUgp2lXXKA22MVtc86QrBiVWxgNmFeaq0w=)
4: 8C5D4FF4766511EF8820F844C4F9AE02.roa (hash: iCSd+4enkqxY2lDM1zxQZRRXgBPKUIXfnyxSxCEqtSs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl
rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 00:17:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1121 (0x461)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91354AE, serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0
Validity
Not Before: Jun 13 00:17:38 2026 GMT
Not After : Jun 20 00:17:38 2026 GMT
Subject: CN=6a2ca1a2-18d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:29:83:c2:b5:d9:02:e2:83:73:90:c4:e1:bc:
5a:3e:df:11:4f:2e:e0:bd:77:ba:cb:5f:7b:af:95:
d9:0e:c5:94:bb:de:6f:61:44:a8:57:a8:0d:66:65:
c0:db:56:ad:cc:69:d2:42:03:49:90:ed:79:42:67:
00:a1:89:f4:2d:53:f1:16:a1:51:3a:16:21:35:dc:
e7:a6:66:e6:41:b4:c1:aa:73:5f:47:9b:47:8e:e8:
e6:19:05:92:e4:64:d8:3c:94:05:d8:57:1b:ab:81:
00:aa:6d:f4:5e:84:0f:ee:3c:ad:28:1e:60:75:9f:
02:0f:9d:dc:06:f0:85:1f:3c:d4:af:4e:43:db:c6:
5f:34:65:3f:12:d2:9b:0d:6a:fe:c4:61:ff:cd:54:
4d:a0:11:ee:dd:36:ca:4e:4f:c3:f1:cd:91:a9:cf:
57:16:71:93:7c:07:de:5f:9b:88:f9:8f:ac:2a:53:
de:d4:2e:ee:8e:34:a5:eb:22:76:cd:ca:b9:6c:8e:
40:1b:d7:bc:7f:65:9b:78:b6:61:6a:c0:77:df:f2:
3f:f0:67:aa:d9:e5:24:ce:33:52:20:a3:03:c9:86:
8a:8a:5a:cf:9f:eb:80:02:50:66:c0:d7:8c:00:48:
34:93:14:80:c6:bf:fd:54:8d:e3:dc:d1:b5:1a:03:
de:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:6A:95:29:ED:56:D3:70:A6:CB:1F:D6:57:D8:6B:1B:AD:F2:56:C7
X509v3 Authority Key Identifier:
keyid:87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:9d:e0:7a:ba:05:30:2d:99:aa:73:65:33:b7:d6:38:7e:aa:
19:b1:fd:8b:1e:28:28:38:22:e9:0f:9c:9b:2b:4c:b6:53:5f:
47:d5:fd:28:0f:bf:8d:43:8a:de:c7:14:3f:1c:9e:54:30:d8:
e4:59:6b:c7:15:39:b8:f3:9c:d3:4a:15:d5:0c:56:1b:00:8d:
a8:db:f8:82:97:52:36:b8:a0:d4:d1:89:70:51:e5:21:f2:46:
0a:d5:fd:06:40:5c:34:79:8e:c0:cc:c2:24:37:00:ca:5f:0e:
0a:50:77:b3:6d:87:19:23:80:96:7e:af:9b:dc:89:08:20:ba:
85:49:30:6b:e8:70:f1:1a:68:bf:cf:3c:70:d6:a7:7d:f0:05:
28:e3:28:f6:85:39:38:f3:34:a1:e1:47:45:e7:69:06:40:68:
67:1d:bc:19:1c:68:0d:42:be:3c:4c:35:9b:a0:18:3b:89:51:
e7:17:0f:f5:cf:e6:fe:55:10:88:13:4b:ee:d3:4d:56:2e:da:
ca:63:be:23:91:a5:ce:b9:41:0a:4f:1d:67:79:60:9a:5a:21:
13:ab:25:0d:7a:0a:91:c1:e8:14:b9:c9:6e:20:63:58:8b:64:
40:a0:fb:80:6c:1a:bf:40:e8:0e:95:66:cb:99:38:f7:51:ab:
42:6a:53:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:01:35 2026 by rpki-client