
$ rpki-client -vvf rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft
File: SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft (raw, json)
Hash identifier: XCW8seRgXFHq2sCdghHBl4i/fqQ8Rf/lhUATJc+9V5U=
Subject key identifier: 04:AD:3C:ED:CB:7E:94:C0:8B:34:11:93:77:3C:81:43:AE:39:87:DE
Authority key identifier: 4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB
Certificate issuer: /CN=A91896D4/serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB
Certificate serial: 029D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft
Manifest number: 0281
Signing time: Fri 17 Apr 2026 01:46:40 +0000
Manifest this update: Fri 17 Apr 2026 01:46:39 +0000
Manifest next update: Fri 24 Apr 2026 01:46:39 +0000
Files and hashes: 1: SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl (hash: Z+3frIl6RZE5SDk5l//J94co4EtfDpAAcKzO/UQmJd8=)
2: CD23AE8C403011EEA773CE47C4F9AE02.roa (hash: 3thOWBScBaW27emyNgWIB6Tm9y3isPfdf3d0Ik133Zg=)
3: C93A47F63ABB11EE8A78BE4CC4F9AE02.roa (hash: kt58U+JdwwoWOrJfOurK3ZzukKhfcE+5o9qCOQ61N04=)
4: 6985BF0062D611EEB5C5721CC4F9AE02.roa (hash: RnuV+1DoXIf2HDUvOKaEZgCO7oWGACeQmNMNZ7oeAtg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl
rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:46:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 669 (0x29d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91896D4, serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB
Validity
Not Before: Apr 17 01:46:39 2026 GMT
Not After : Apr 24 01:46:39 2026 GMT
Subject: CN=69e190ff-45d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:21:43:d1:d4:5c:bf:2a:a4:54:82:20:26:91:
04:2d:a3:5c:fd:98:1d:fe:17:e7:4c:21:7a:48:c0:
d8:e4:42:e0:b2:13:2e:19:8a:77:39:61:72:ad:24:
73:6c:6b:b9:ba:9a:1d:d8:85:b4:6e:b4:bc:bc:6d:
2f:4d:f2:41:dc:6b:d0:73:b0:d7:43:c5:94:04:a6:
a3:a7:f3:1e:44:cb:ec:14:26:ba:ff:a9:8d:7f:99:
06:95:53:ba:d6:46:96:11:93:c1:5b:3b:35:fa:75:
06:20:81:dc:c6:f1:e0:cd:2d:53:71:9f:f5:8c:82:
58:71:1f:e0:8e:d8:c7:2a:65:43:a4:0d:65:fd:5e:
74:80:ca:02:ff:97:b9:5e:2f:71:00:5c:bf:ee:8c:
48:28:2a:d0:1a:2c:7c:64:1f:fb:26:ec:a6:76:d4:
89:0f:84:53:34:9f:07:d9:48:f5:2a:47:1b:51:46:
f4:81:e6:09:b1:4e:a1:34:4c:b1:45:6f:69:88:e7:
70:42:6d:7f:c8:75:f0:2f:65:2b:28:fb:58:09:34:
29:e9:29:13:49:0c:56:92:ba:7d:99:37:4e:72:96:
a8:d6:06:c6:cc:53:87:28:57:4d:29:91:c2:6d:a8:
10:c6:d1:04:19:20:25:3d:54:73:9a:cd:e1:7c:3d:
70:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:AD:3C:ED:CB:7E:94:C0:8B:34:11:93:77:3C:81:43:AE:39:87:DE
X509v3 Authority Key Identifier:
keyid:4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
df:87:30:08:ec:74:f8:64:6e:cc:2d:8c:17:1d:84:15:8b:c7:
86:c0:6e:cf:80:b8:2a:f1:f9:58:09:b8:55:49:ff:48:66:a2:
56:d7:2e:75:86:fe:b3:e1:8b:10:86:fe:d1:f8:c1:3e:0e:db:
09:66:3c:b2:66:10:4e:1c:c6:22:2a:2b:54:fd:e6:31:ee:73:
05:fc:ac:0b:5c:d3:39:c7:3a:9b:bf:11:9b:06:9e:1b:f4:ec:
51:6e:5f:3d:47:ea:ea:20:e1:0a:e9:25:ed:f5:ef:72:83:df:
fe:97:5d:0c:d3:a0:56:03:7b:09:1a:5a:db:34:b4:49:6b:bd:
30:c1:fc:e9:c6:8f:b1:23:1e:51:80:c1:50:0c:dc:9c:be:79:
b5:c4:2e:26:3b:28:4a:bf:b8:90:03:3b:ac:b4:25:ed:08:df:
f5:1a:cf:16:b9:eb:6a:72:13:e3:f8:5e:66:9f:76:0c:b7:5d:
00:67:68:d2:26:9a:8d:30:ad:77:75:08:07:19:94:a7:65:61:
d2:14:a0:b8:f1:73:99:dc:b7:c2:ff:0d:29:58:ad:d0:b2:fd:
f9:79:f1:bf:0f:b3:51:f5:a5:9b:5a:5e:0c:5d:b9:df:81:e3:
4e:cb:77:ac:e1:c2:25:a2:be:6a:ad:f5:90:42:25:cc:38:c8:
55:b1:49:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:00:26 2026 by rpki-client