
$ rpki-client -vvf rpki.apnic.net/member_repository/A91509C4/4B8961381D8B11E28A33C7E508B02CD2/hQaYWfujzd6OwbgaHgTdYFCzgRM.mft
File: hQaYWfujzd6OwbgaHgTdYFCzgRM.mft (raw, json)
Hash identifier: 7uElSZkv2suMz70FxRZ7htdd34kVXn+BO1Rc4b0TFXc=
Subject key identifier: FA:25:FB:1E:A0:59:05:AA:ED:3A:D2:D1:AE:DD:25:80:0F:36:EB:39
Authority key identifier: 85:06:98:59:FB:A3:CD:DE:8E:C1:B8:1A:1E:04:DD:60:50:B3:81:13
Certificate issuer: /CN=A91509C4/serialNumber=85069859FBA3CDDE8EC1B81A1E04DD6050B38113
Certificate serial: 354C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQaYWfujzd6OwbgaHgTdYFCzgRM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91509C4/4B8961381D8B11E28A33C7E508B02CD2/hQaYWfujzd6OwbgaHgTdYFCzgRM.mft
Manifest number: 354C
Signing time: Fri 12 Jun 2026 14:34:46 +0000
Manifest this update: Fri 12 Jun 2026 14:34:46 +0000
Manifest next update: Fri 19 Jun 2026 14:34:46 +0000
Files and hashes: 1: hQaYWfujzd6OwbgaHgTdYFCzgRM.crl (hash: lRSQrG9qBsvIenu6eLmJEo3Nay/FIhCkk5YLhulHpng=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91509C4/4B8961381D8B11E28A33C7E508B02CD2/hQaYWfujzd6OwbgaHgTdYFCzgRM.crl
rsync://rpki.apnic.net/member_repository/A91509C4/4B8961381D8B11E28A33C7E508B02CD2/hQaYWfujzd6OwbgaHgTdYFCzgRM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQaYWfujzd6OwbgaHgTdYFCzgRM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 14:34:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13644 (0x354c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91509C4, serialNumber=85069859FBA3CDDE8EC1B81A1E04DD6050B38113
Validity
Not Before: Jun 12 14:34:46 2026 GMT
Not After : Jun 19 14:34:46 2026 GMT
Subject: CN=6a2c1906-59c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:16:14:53:dc:19:6d:fd:ee:19:1a:4a:2d:9b:
78:e4:f3:cf:a1:48:d0:cf:ba:dc:ba:42:24:47:50:
69:40:5f:39:7e:7c:e4:85:f6:6b:02:95:ed:20:bc:
cd:e1:54:e5:fe:eb:c7:e1:22:35:54:10:f8:25:2c:
6b:f6:79:92:67:cf:cf:17:73:f9:1a:c5:86:44:95:
1f:7c:fa:95:7e:dd:ae:00:d6:08:7b:73:2c:f7:8b:
b7:3a:dc:3f:42:00:14:da:a8:4e:37:34:b5:a5:4a:
60:cf:75:7c:4d:31:7c:9b:dc:61:67:0b:a2:16:42:
3c:66:d8:eb:36:15:d3:fd:40:ca:a4:1d:ac:74:d7:
8f:33:40:39:07:52:27:f6:d0:9d:5b:b6:fe:73:a7:
e4:c5:20:8b:1e:d3:5d:38:79:9c:9a:27:5c:bd:ff:
a4:a9:54:77:02:c2:e1:d5:62:d3:a9:74:2b:33:15:
15:3b:ff:a5:32:64:87:f4:ca:7d:47:4b:2c:66:d8:
58:ab:7a:67:89:17:eb:1c:cc:db:04:96:0f:9d:1d:
f0:7c:aa:b7:e4:e5:7c:88:6f:f0:51:ff:bc:4f:af:
26:0e:b6:fb:af:2f:4a:73:dd:7f:01:81:24:85:35:
ec:22:93:2b:7f:b1:3d:68:e9:ee:4b:9c:ed:94:b3:
20:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:25:FB:1E:A0:59:05:AA:ED:3A:D2:D1:AE:DD:25:80:0F:36:EB:39
X509v3 Authority Key Identifier:
keyid:85:06:98:59:FB:A3:CD:DE:8E:C1:B8:1A:1E:04:DD:60:50:B3:81:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91509C4/4B8961381D8B11E28A33C7E508B02CD2/hQaYWfujzd6OwbgaHgTdYFCzgRM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQaYWfujzd6OwbgaHgTdYFCzgRM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91509C4/4B8961381D8B11E28A33C7E508B02CD2/hQaYWfujzd6OwbgaHgTdYFCzgRM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:fb:aa:fa:7d:4a:e6:63:4d:61:cb:ec:7f:5a:61:82:db:fa:
ee:3e:00:e5:f4:f2:90:da:4f:78:8f:88:dd:ea:3e:ad:2c:ba:
3e:a4:5a:ee:61:4c:f9:1c:1a:e4:ea:5a:87:74:68:06:fb:9e:
73:e8:4a:ec:64:9d:5a:0e:7e:69:b0:32:fb:04:58:d0:2f:5b:
45:11:c9:21:01:60:29:7b:7f:65:94:ff:1c:d9:40:4b:91:d7:
03:45:c2:bc:71:3b:a1:11:09:df:27:33:cc:36:4c:2e:1e:f3:
5f:18:7b:28:c9:9b:ff:c2:2b:80:a8:45:5b:9b:da:77:16:6d:
81:ab:c5:e9:7a:bd:50:9b:d8:46:48:2f:28:2c:ba:85:77:ef:
9c:8c:66:6b:00:1c:ed:11:28:c6:6f:6b:44:0c:d0:6b:dc:a2:
05:a2:c1:5a:12:a5:a9:6d:05:0b:69:b8:34:28:d3:a4:c7:34:
74:9c:52:bc:3f:6f:3b:12:25:9a:dd:82:b4:a5:07:2f:d1:d1:
c6:06:68:06:a4:97:5a:1b:64:82:e3:9f:21:2a:e8:bb:9b:37:
e7:49:cd:62:d1:01:0f:b7:0e:36:47:af:82:4f:9c:6e:05:cb:
e5:a0:73:b0:0a:1e:17:b3:e4:a4:b9:32:3d:62:bd:fe:40:38:
21:55:a3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:48:23 2026 by rpki-client