
$ rpki-client -vvf rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft
File: 4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft (raw, json)
Hash identifier: IHH5TrC+zz0LPDJpaFn+VGIurioN3dIUMqu7iv8VBS8=
Subject key identifier: 29:B3:D0:35:F7:07:E9:20:77:82:F0:22:10:8F:BE:AE:12:3B:2B:8A
Authority key identifier: E1:C1:C7:2B:67:93:A9:03:BA:3D:E0:31:02:75:19:B4:30:21:75:6A
Certificate issuer: /CN=A91493FC/serialNumber=E1C1C72B6793A903BA3DE031027519B43021756A
Certificate serial: 0289
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cHHK2eTqQO6PeAxAnUZtDAhdWo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft
Manifest number: 027C
Signing time: Sat 13 Jun 2026 01:57:51 +0000
Manifest this update: Sat 13 Jun 2026 01:57:51 +0000
Manifest next update: Sat 20 Jun 2026 01:57:51 +0000
Files and hashes: 1: 4cHHK2eTqQO6PeAxAnUZtDAhdWo.crl (hash: rjM/KEwJ0kApFWQB77/p2U3PmigOmbEHh06Bp24l6hc=)
2: 38702E769AF611ED8D41985BC4F9AE02.roa (hash: nnTjgZ46HqO0Mpo0brQW7RdIt/A/0sbmdcDjLarFt5g=)
3: D076B1A49F2911ED937CF05AC4F9AE02.roa (hash: ruF2i3AOGgPYwroRD2rSZSmDfGWURXx0prKXNcqPrNM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.crl
rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cHHK2eTqQO6PeAxAnUZtDAhdWo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 649 (0x289)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91493FC, serialNumber=E1C1C72B6793A903BA3DE031027519B43021756A
Validity
Not Before: Jun 13 01:57:51 2026 GMT
Not After : Jun 20 01:57:51 2026 GMT
Subject: CN=6a2cb91f-a108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f0:71:83:ea:5d:a3:5d:96:f1:fb:45:1a:88:
dc:e1:89:93:fe:1e:4f:a1:f9:39:6c:cc:94:60:97:
de:2c:b6:18:26:8f:77:74:94:3d:41:b9:31:f0:a8:
e7:0b:47:af:3c:7e:43:35:a1:ba:a4:fa:6f:82:27:
e8:a5:42:a6:cf:6a:06:8d:91:e7:09:a4:a2:2c:2d:
1f:61:42:9d:2c:c6:27:2e:e5:2b:1c:da:ce:8c:a1:
41:24:0d:83:54:f7:35:ac:98:ed:a0:88:f0:a0:8d:
2b:bc:42:b2:c7:ef:6a:a9:42:ce:29:65:23:0b:03:
63:84:a3:88:0a:f8:1b:7e:9a:51:e9:3f:fa:06:99:
e3:68:0f:47:5c:da:f6:37:23:22:5d:1f:95:c3:39:
3a:f5:ee:d7:05:18:6d:83:95:1a:09:d0:3e:1c:70:
6c:45:a0:28:9f:ff:5b:f6:fb:c9:ee:48:a3:4a:e7:
f9:b6:7d:c7:b5:11:39:74:d7:98:20:0c:31:c6:6a:
f6:e5:4a:ab:e1:93:7b:ef:16:a9:84:72:ff:78:d4:
be:37:af:31:3e:56:f2:17:73:ac:bf:00:f4:e9:80:
6d:11:75:e6:03:69:4b:a5:1d:71:35:83:6a:ba:8f:
2a:31:a9:cf:6b:e9:58:74:62:81:c8:c2:05:fb:b5:
55:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B3:D0:35:F7:07:E9:20:77:82:F0:22:10:8F:BE:AE:12:3B:2B:8A
X509v3 Authority Key Identifier:
keyid:E1:C1:C7:2B:67:93:A9:03:BA:3D:E0:31:02:75:19:B4:30:21:75:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cHHK2eTqQO6PeAxAnUZtDAhdWo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:b8:b9:04:e9:3a:0f:0c:52:c5:4d:bc:24:86:23:d6:9c:a1:
0a:8c:52:59:4d:a2:ad:7a:c5:92:b8:c8:46:b6:68:65:c9:5b:
e1:45:13:ee:69:c1:60:b1:81:c6:43:6b:22:65:18:6c:b7:28:
73:83:5c:b1:5b:f7:d6:c2:c7:54:7c:78:67:f6:57:62:77:54:
fd:5e:50:f1:69:cc:ea:b0:cb:22:f7:13:bb:c9:60:30:63:16:
34:74:1d:61:03:dd:21:9c:40:72:c9:f2:8b:7e:8b:16:d7:b2:
b7:12:0c:f1:7d:3a:f1:f7:63:ca:27:65:78:5c:d8:e7:74:2c:
bd:ee:79:37:ee:74:d3:30:1d:90:6e:3c:71:d3:f2:a2:93:53:
aa:88:34:5e:68:8f:ee:b8:8e:2e:a4:5d:a0:49:06:80:95:72:
64:af:c8:8e:a5:be:64:19:c1:d9:bc:89:fc:1e:72:47:79:02:
98:d9:07:c7:3c:3a:8c:1a:d8:c1:a9:26:80:b8:86:55:30:0b:
30:09:a5:c9:f8:09:76:a5:c8:18:78:ba:32:be:f1:0f:e8:9f:
3a:7a:b4:21:6b:50:77:30:19:a3:73:fa:fb:fd:1f:b8:24:8b:
9e:73:e4:f6:b9:3d:cc:d8:fe:55:78:ee:40:ad:bd:43:8b:6f:
0f:d5:ad:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:03:03 2026 by rpki-client