
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft
File: hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft (raw, json)
Hash identifier: pd+KDcVYVEdAeYq2dgRipyrEnYbWafHHnovcNUpcja4=
Subject key identifier: FA:8C:60:D9:DF:49:EB:18:0C:ED:C1:D0:35:41:C2:73:90:EA:D1:A9
Authority key identifier: 85:4F:E7:27:53:60:D0:78:10:AF:FB:A6:C2:8F:FF:23:58:2A:20:EB
Certificate issuer: /CN=A91958BE/serialNumber=854FE7275360D07810AFFBA6C28FFF23582A20EB
Certificate serial: 02A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hU_nJ1Ng0HgQr_umwo__I1gqIOs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft
Manifest number: 029A
Signing time: Fri 25 Sep 2026 01:43:21 +0000
Manifest this update: Fri 25 Sep 2026 01:43:20 +0000
Manifest next update: Fri 02 Oct 2026 01:43:20 +0000
Files and hashes: 1: hU_nJ1Ng0HgQr_umwo__I1gqIOs.crl (hash: x7i2/KSFuM0vmAZKRBv223ibU86ZnTM6eMwu50PZjAY=)
2: 54FB2C8CD61711EEB983D919C4F9AE02.roa (hash: TbfWDOkKXHkzMNkZNKzeVrIaqyaCMBTW7mW+IffOy/E=)
3: 5576D030D61711EEB983D919C4F9AE02.roa (hash: s/O8ETZBmbvc7nhFpjkpvezLNvaBayfgZF8YajNhMHY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.crl
rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hU_nJ1Ng0HgQr_umwo__I1gqIOs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 01:43:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 678 (0x2a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91958BE, serialNumber=854FE7275360D07810AFFBA6C28FFF23582A20EB
Validity
Not Before: Sep 25 01:43:20 2026 GMT
Not After : Oct 2 01:43:20 2026 GMT
Subject: CN=6ab5d1b8-6231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a1:1a:d1:48:47:e1:b5:80:49:a2:77:b5:db:
62:92:c5:28:1a:e6:e1:dd:a3:a1:cd:6d:16:cd:1a:
49:22:74:33:b9:da:5f:ad:21:93:52:b8:4d:38:cd:
00:8c:11:ce:7c:0a:71:a6:92:83:38:0b:c3:f0:d2:
69:0e:43:15:93:1a:89:da:e4:f8:74:73:5d:8f:44:
98:1e:77:87:a8:c2:b3:2d:c8:1e:13:cf:92:fd:82:
53:ae:2b:c9:a3:4e:ef:1d:20:11:c3:b6:f3:6a:4d:
ed:f2:a1:62:a7:75:ec:e4:cd:9f:ce:5b:e5:4f:0c:
66:53:0d:d4:59:28:1c:85:0b:bb:5e:e9:eb:b4:e3:
3d:5a:98:4b:ee:54:48:0c:c6:68:a9:04:7b:9b:89:
b7:84:d9:e4:05:43:44:3f:e8:c6:26:80:c5:68:50:
86:c0:b7:5b:5f:6b:f4:96:ec:76:eb:7e:ba:c7:4f:
79:ce:ad:e6:b4:51:68:52:4d:5e:96:02:f3:de:1a:
24:56:ae:2a:7c:37:ab:8a:c2:53:07:c9:41:a2:4b:
28:25:f7:44:25:1d:99:08:df:ad:14:d1:42:d9:d6:
a1:2f:77:04:45:81:04:d1:a8:42:c6:d1:46:7f:9a:
48:19:9e:1a:a6:34:71:36:70:6f:5a:b9:dd:aa:ee:
03:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:8C:60:D9:DF:49:EB:18:0C:ED:C1:D0:35:41:C2:73:90:EA:D1:A9
X509v3 Authority Key Identifier:
keyid:85:4F:E7:27:53:60:D0:78:10:AF:FB:A6:C2:8F:FF:23:58:2A:20:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hU_nJ1Ng0HgQr_umwo__I1gqIOs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:82:ec:9a:b2:2a:23:bf:33:e3:d2:fd:1c:2c:2b:d3:f2:c7:
07:2a:2a:49:24:c0:60:df:50:43:62:cc:57:f7:78:1c:23:67:
6e:77:ea:9a:46:63:b5:1b:24:e9:09:9c:29:78:1f:4e:3f:ce:
e8:ba:03:7c:6e:48:6c:84:bc:12:a9:a3:ff:68:59:cc:c3:cb:
76:8f:ea:99:73:aa:b3:6c:72:8d:8e:3d:a7:0b:0f:db:c6:de:
ec:2f:d8:c6:3e:d0:83:34:81:d5:13:80:3b:5c:c3:34:91:52:
76:fd:8b:59:ef:31:0b:0f:1a:a0:63:05:40:82:8f:35:8a:52:
64:6a:43:87:71:35:0a:d2:b5:82:0d:9e:30:29:a2:9a:18:6b:
a2:65:ba:fc:e2:4b:4e:4b:43:92:f3:53:af:9c:05:ec:47:09:
2b:b7:2e:4f:6f:f4:51:60:63:e6:ba:51:9e:f0:3c:93:2f:d1:
70:91:6c:08:fb:d0:88:b8:19:ef:9e:c7:ba:e2:48:a3:17:22:
2f:9a:c2:8e:ce:3e:b3:bf:79:e0:1b:47:d1:11:14:93:59:0f:
40:db:b2:4b:a1:93:75:5c:d0:a9:24:ba:5d:b5:be:d0:7b:60:
03:91:e7:03:c6:3b:77:2b:55:c0:19:3f:d0:36:10:6b:52:ee:
12:6c:44:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:25:44 2026 by rpki-client