
$ rpki-client -vvf rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.mft
File: HjKemPZ2kum1dgI6L7xVfVfdVWw.mft (raw, json)
Hash identifier: Q6dOzngqh+Xfqz5YkjVn+HbZ3G7RGzrvDHbmfzEMzZY=
Subject key identifier: 67:B2:C5:DF:D3:03:1A:94:74:51:7F:C6:AE:30:3C:5F:9B:89:4A:FF
Authority key identifier: 1E:32:9E:98:F6:76:92:E9:B5:76:02:3A:2F:BC:55:7D:57:DD:55:6C
Certificate issuer: /CN=A91568F6/serialNumber=1E329E98F67692E9B576023A2FBC557D57DD556C
Certificate serial: 0E6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.mft
Manifest number: 0E38
Signing time: Fri 12 Jun 2026 17:47:11 +0000
Manifest this update: Fri 12 Jun 2026 17:47:10 +0000
Manifest next update: Fri 19 Jun 2026 17:47:10 +0000
Files and hashes: 1: HjKemPZ2kum1dgI6L7xVfVfdVWw.crl (hash: njT36uv95t9ZOLnnxJVjKcRhwaaLejE/oakhcPxVQWk=)
2: 8F7DDD8889B811EE9E7ABE26C4F9AE02.roa (hash: bJa45JxM0BM6SHPylrF6iczdI3TR6YwWJGhmk5n+6Co=)
3: 4EF1DE0E822A11EDB2081A49C4F9AE02.roa (hash: kuKfhwok7IV2xZV+q15Uru1Qvlc7Ty7LyqYda2rZjaY=)
4: 50063EE8822A11EDB2081A49C4F9AE02.roa (hash: hFX5YE8MCfCx/kmb790trFxkpl5n33coYoMd9aDEGes=)
5: 87BB6D70822711ED94C3212CC4F9AE02.roa (hash: m40Au0D9D53HHKA3UY789RoJoXUIJ7gV5QbX6BIo4EU=)
6: FD120CC2D94411EDA95E3613C4F9AE02.roa (hash: fHXngSTjkehnoyzfzZzWQmngco23iukL2koF5Ddr+ak=)
7: D0551B50046411F09760073DC4F9AE02.roa (hash: rp8AtmMvaJKirkqtM8xsbLFfIx4jMN0u7R5/2vGn/yo=)
8: 79B042BAF3BD11EE961D7A7AC4F9AE02.roa (hash: OYQ8Q3ql6qFWt6j+WB79+jUAS4lPKWiDOJJ6WWsPhFE=)
9: F2826A504FCF11EB88444467C4F9AE02.roa (hash: Ucwe0TblfY65Z8jyUiAbiD9N4E5gQiucEqZR5BprIfA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.crl
rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:47:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3694 (0xe6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91568F6, serialNumber=1E329E98F67692E9B576023A2FBC557D57DD556C
Validity
Not Before: Jun 12 17:47:10 2026 GMT
Not After : Jun 19 17:47:10 2026 GMT
Subject: CN=6a2c461f-8a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:38:eb:70:01:b0:fd:63:19:e9:ff:80:01:14:
00:80:70:32:86:7c:52:6d:d3:4e:9b:4c:e3:06:a4:
fc:21:c5:92:aa:77:b7:49:38:3a:8e:e3:5f:e0:bd:
d6:a8:53:dc:e0:bf:62:1b:e8:76:db:87:ed:69:6c:
48:e7:95:70:77:80:ea:89:ff:bc:6c:4c:a4:65:62:
b9:c4:ea:51:3f:df:a8:fb:64:6f:6b:ab:f5:3a:43:
ae:f9:01:b6:48:f7:86:e6:2c:e6:de:fd:b2:75:21:
96:90:8f:30:25:76:5c:7f:cf:c1:58:c0:46:11:36:
ad:9c:82:14:20:85:31:b0:cb:c6:5f:31:c7:a6:d8:
d5:43:08:d3:72:cf:a0:35:fa:4c:23:9d:95:f2:b5:
0d:42:df:aa:95:9c:d6:87:fd:39:ba:4a:22:47:cc:
61:c2:bd:66:f1:a5:09:6d:bf:56:a8:b0:2f:80:9e:
39:be:1d:ce:b1:c9:12:3d:da:67:fc:bb:80:d8:05:
3b:05:84:d0:91:68:58:91:37:d2:35:e0:1b:6b:f1:
2d:f1:15:22:9e:d9:8d:64:14:3f:23:91:18:be:c0:
3b:22:8e:86:c8:e1:5f:b6:7a:85:af:4b:c9:3d:3e:
46:cf:63:36:03:4f:14:db:18:55:38:87:d9:7b:57:
80:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B2:C5:DF:D3:03:1A:94:74:51:7F:C6:AE:30:3C:5F:9B:89:4A:FF
X509v3 Authority Key Identifier:
keyid:1E:32:9E:98:F6:76:92:E9:B5:76:02:3A:2F:BC:55:7D:57:DD:55:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:c5:c6:03:74:1b:6d:cf:fb:ad:cf:b1:65:1c:70:43:d6:5e:
c3:c3:1e:89:1b:29:c5:bf:e3:ec:ec:c8:04:1a:99:d1:38:0b:
9d:a1:ca:e3:5f:95:ec:c1:c4:f5:5a:59:10:d0:2e:63:df:1e:
db:a0:d7:49:23:fa:8d:da:a2:ff:29:29:89:4b:f0:c2:eb:2d:
fa:cb:1d:7a:7f:3a:a2:4e:a5:09:24:80:a5:54:ea:6d:1b:69:
72:c5:7c:7c:cc:3e:cf:7a:92:45:64:a5:ff:00:3c:03:fb:c3:
b1:a0:77:ca:76:df:c3:eb:a9:7f:ef:f6:d8:1a:df:1e:0b:a8:
08:07:17:ca:57:90:48:d2:fb:07:e3:98:79:41:60:46:7c:19:
40:e2:e5:17:06:9b:66:20:1d:a8:48:5f:ed:be:49:83:db:a0:
42:0a:7f:37:e1:48:b7:5b:0b:ab:3d:27:50:0b:64:26:95:66:
8a:81:5c:b0:96:74:11:cb:84:99:90:ab:63:7d:49:44:8d:c1:
01:7e:99:6f:d5:c5:fb:95:d4:e1:84:b6:5a:3d:f9:a7:45:0e:
2f:e8:84:57:9f:e2:e5:72:fe:30:4a:c3:88:2b:aa:d9:30:e6:
5c:d3:9a:89:45:03:a0:78:aa:d6:af:5d:32:5e:c7:6c:39:ac:
3e:44:d1:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:34:26 2026 by rpki-client