
$ rpki-client -vvf rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.mft
File: HjKemPZ2kum1dgI6L7xVfVfdVWw.mft (raw, json)
Hash identifier: Cqy6adSpa7TF09wpvu/8+ZP54y/68Qi1a7oOu1rLPnE=
Subject key identifier: BC:B1:38:49:0A:41:23:EE:B0:C9:0B:FE:D9:DF:B4:25:CB:02:5D:99
Authority key identifier: 1E:32:9E:98:F6:76:92:E9:B5:76:02:3A:2F:BC:55:7D:57:DD:55:6C
Certificate issuer: /CN=A91568F6/serialNumber=1E329E98F67692E9B576023A2FBC557D57DD556C
Certificate serial: 0E2F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.mft
Manifest number: 0E01
Signing time: Sat 28 Feb 2026 17:59:19 +0000
Manifest this update: Sat 28 Feb 2026 17:59:19 +0000
Manifest next update: Sat 07 Mar 2026 17:59:19 +0000
Files and hashes: 1: HjKemPZ2kum1dgI6L7xVfVfdVWw.crl (hash: 3cMAftF62tMA3xwTgi8x95BaxdASKkqM22JCFR8hCrk=)
2: D0551B50046411F09760073DC4F9AE02.roa (hash: Ml6MHIFRGUbHxsyGVzTTlekIkq7JzuhUAzoayMJcf6g=)
3: 50063EE8822A11EDB2081A49C4F9AE02.roa (hash: W9F0AxXLeTRt9akhBBWzGaKX1wJNYfdBQQ5r+SkSiyU=)
4: FD120CC2D94411EDA95E3613C4F9AE02.roa (hash: u8GCpF3JjtF0fC5bHONBso6P9ZKL07gluzKPfJhmpXI=)
5: 79B042BAF3BD11EE961D7A7AC4F9AE02.roa (hash: 9OL0Nn9V+ede9DJf9mkaMrtLaF0tRZO3OAn8HvMuFRw=)
6: F2826A504FCF11EB88444467C4F9AE02.roa (hash: QqSGad7FxeptCh4lzX5ee03GteRq4SxJe8s+1HGe3x4=)
7: 8F7DDD8889B811EE9E7ABE26C4F9AE02.roa (hash: JsvlnopzOaOKTX3AuOnQGEvn3QbobkZ0VGpy6s7Zufs=)
8: 4EF1DE0E822A11EDB2081A49C4F9AE02.roa (hash: ccQHTXT/JWlYkUSlrHBZlxj0fPuZnF/MXZqxQxgBSSk=)
9: 87BB6D70822711ED94C3212CC4F9AE02.roa (hash: TgzuO7T0sgwTCl2sRbtN58HlHEFkWtWHdI30YEepdig=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.crl
rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 17:59:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3631 (0xe2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91568F6, serialNumber=1E329E98F67692E9B576023A2FBC557D57DD556C
Validity
Not Before: Feb 28 17:59:19 2026 GMT
Not After : Mar 7 17:59:19 2026 GMT
Subject: CN=69a32cf7-c86e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c0:3b:f9:de:49:ab:eb:80:47:00:32:78:1e:
d6:a5:4b:43:b0:92:94:06:7f:6b:e7:d3:65:08:50:
73:43:12:ed:72:23:78:17:d1:06:80:b6:18:8d:45:
e7:7d:9e:08:e8:7d:55:f7:40:b9:4b:99:04:ae:64:
bc:f5:65:fa:11:f1:1f:9b:f8:31:5b:0d:e4:74:7a:
6c:34:d7:ab:9a:43:3a:e6:f9:ea:83:f2:f5:8f:75:
f5:8e:39:91:55:38:11:f0:ae:83:10:74:cf:35:3d:
96:9a:67:31:a8:74:cc:03:c3:c3:43:5a:78:40:19:
fb:90:87:04:63:b0:f8:a1:22:59:f0:a2:c3:be:40:
b9:c4:b2:2d:02:9b:8d:6d:aa:0a:91:d2:dd:5d:49:
6a:9e:c5:fe:33:6d:fd:9b:b6:f4:82:85:b7:2c:6f:
89:0f:15:6f:6b:08:ad:df:ad:98:3f:73:96:8d:f7:
fd:8c:5b:8f:88:a7:a7:26:00:7a:71:8d:e7:9b:ab:
0d:35:e8:fc:c8:54:94:d6:4a:f6:bf:fe:fb:0b:a8:
cd:d7:ba:4c:75:69:bc:db:d6:59:20:35:9a:78:ee:
99:3c:b9:d4:78:35:59:17:81:f0:4c:11:18:4e:4a:
a9:ae:47:72:03:6d:61:fb:96:fc:57:65:25:51:51:
16:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B1:38:49:0A:41:23:EE:B0:C9:0B:FE:D9:DF:B4:25:CB:02:5D:99
X509v3 Authority Key Identifier:
keyid:1E:32:9E:98:F6:76:92:E9:B5:76:02:3A:2F:BC:55:7D:57:DD:55:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:d7:9f:80:af:ce:94:2b:72:e7:30:8d:62:ab:b3:64:fc:ad:
15:5f:df:29:2c:03:ee:33:ee:28:5d:44:96:0e:02:c8:7e:9f:
b1:b5:87:18:e9:16:c3:f1:22:2a:40:c6:b5:99:7f:5e:ca:e6:
34:e0:86:e9:79:4d:7f:bf:48:80:19:91:cc:cf:cb:a9:61:a9:
0b:20:1d:ba:34:63:43:76:65:f1:18:74:37:81:4e:45:5e:cb:
cc:37:8c:d7:bc:54:e3:b8:f6:c8:64:07:0b:4d:c1:3b:b4:f7:
51:51:a1:f1:12:90:2e:25:8a:de:f1:0b:2a:41:04:2a:2b:d7:
e1:9a:7a:f3:1a:fa:a4:43:12:a2:59:c4:80:f5:2f:25:3a:01:
ce:5b:f2:12:01:6a:fd:2e:24:a6:a9:75:2e:63:0a:07:e9:de:
d8:66:cf:e0:3f:f7:35:fd:92:29:1e:b4:7e:66:7f:c6:b2:94:
7f:67:86:b7:00:5d:39:31:d1:1d:d2:1c:07:f3:e0:2b:dc:c0:
96:af:e2:1b:04:2c:bb:5e:bf:0d:3b:42:71:fe:03:1f:9b:50:
e6:3a:34:7c:86:18:5d:3e:99:36:be:9d:e0:cb:84:84:a1:a8:
cd:65:9c:2f:39:42:e6:54:72:cd:4f:69:1c:80:c0:a6:db:51:
5b:15:97:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:39:20 2026 by rpki-client