
$ rpki-client -vvf rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft
File: hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft (raw, json)
Hash identifier: h+ZKE+roqra3g8LUrvp+TO3MdYC+zFhZ1wHPi1P4kRI=
Subject key identifier: 32:77:73:19:78:4D:23:65:42:95:D3:DD:A2:BA:43:75:28:E1:27:F8
Authority key identifier: 85:4F:E7:27:53:60:D0:78:10:AF:FB:A6:C2:8F:FF:23:58:2A:20:EB
Certificate issuer: /CN=A91958BE/serialNumber=854FE7275360D07810AFFBA6C28FFF23582A20EB
Certificate serial: 0239
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hU_nJ1Ng0HgQr_umwo__I1gqIOs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft
Manifest number: 022F
Signing time: Mon 02 Mar 2026 01:46:57 +0000
Manifest this update: Mon 02 Mar 2026 01:46:55 +0000
Manifest next update: Mon 09 Mar 2026 01:46:55 +0000
Files and hashes: 1: hU_nJ1Ng0HgQr_umwo__I1gqIOs.crl (hash: d/55Wxj3ZlcAXeJmV0/qw/CR9XgK9V3o6NF2+0ZGa5I=)
2: 5576D030D61711EEB983D919C4F9AE02.roa (hash: 05QuhzxS6Rv7IEmh1jeaGvvIDM5pA0OXeqbGhZ+/gWM=)
3: 54FB2C8CD61711EEB983D919C4F9AE02.roa (hash: kdVR/T3ew7TyPnhxkEWRlQM3zCM8IzXis0xGyLY9c78=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.crl
rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hU_nJ1Ng0HgQr_umwo__I1gqIOs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:46:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 569 (0x239)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91958BE, serialNumber=854FE7275360D07810AFFBA6C28FFF23582A20EB
Validity
Not Before: Mar 2 01:46:55 2026 GMT
Not After : Mar 9 01:46:55 2026 GMT
Subject: CN=69a4ec10-23f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6f:21:15:bd:42:f4:1a:a5:c4:8d:88:2a:0c:
4e:7a:52:14:1c:5f:6e:d5:6c:96:d3:fc:59:be:bb:
94:10:f1:97:3a:27:07:7c:5b:19:ce:9d:9b:9c:bd:
4f:3b:c6:45:be:26:94:d6:db:47:5d:cf:f5:6f:c9:
9d:e5:bf:e9:b6:69:39:61:12:c1:90:31:2b:ea:ef:
3e:fe:2e:f8:a5:a0:fb:22:2c:10:45:37:71:bd:ff:
ad:d5:b9:71:f1:e5:c3:f6:af:3e:9b:d3:21:65:2a:
03:99:fc:bf:bf:99:3f:98:8f:9e:da:de:e3:38:1f:
89:75:78:80:b5:06:d1:0e:cc:5d:60:00:50:28:d0:
48:cc:da:30:ad:fd:e4:6c:5c:7d:e5:ac:16:99:85:
94:31:74:42:60:18:dc:ba:5d:9e:63:5e:a1:03:eb:
c9:2a:8b:a1:f3:96:5e:4b:be:48:c2:68:15:d9:67:
1e:72:71:c9:01:b6:2b:9b:ce:ae:3e:34:ae:8c:18:
81:01:38:56:14:08:10:eb:61:69:96:d7:7c:2a:6b:
de:3d:64:d1:5f:86:f9:97:e5:9f:a4:9e:81:c3:69:
64:15:91:b1:6d:63:e2:5e:54:8c:fe:70:20:1c:1d:
d3:97:49:f9:c8:80:6f:00:e1:83:4d:87:7c:d6:51:
44:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:77:73:19:78:4D:23:65:42:95:D3:DD:A2:BA:43:75:28:E1:27:F8
X509v3 Authority Key Identifier:
keyid:85:4F:E7:27:53:60:D0:78:10:AF:FB:A6:C2:8F:FF:23:58:2A:20:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hU_nJ1Ng0HgQr_umwo__I1gqIOs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:68:5e:a6:af:7d:ba:2c:8d:f3:32:f3:59:8b:08:87:48:df:
a0:32:0d:72:f5:6d:eb:46:da:80:2f:57:1d:47:c6:32:57:2d:
a8:79:6c:29:2c:33:6f:5e:c7:9f:ec:71:1b:75:5b:60:03:4f:
7b:89:70:9c:f4:e8:45:af:80:cd:25:f3:5f:5e:8b:a4:96:a6:
88:55:2a:ab:5c:17:16:39:b2:a1:f7:47:83:df:bb:1e:88:b3:
58:f9:3b:ba:d4:70:2c:58:a8:b4:2e:cc:1a:8c:42:69:96:ff:
68:c4:f4:d1:5f:cd:24:c2:a4:e6:4b:ac:fc:6c:cf:64:c8:3b:
bf:4f:9a:48:b2:7e:7b:fb:1d:5c:69:ce:ea:0d:3c:77:c8:d5:
72:9b:ab:3c:b5:c7:bb:63:e5:19:31:62:6d:26:ec:a6:18:d4:
3a:29:dd:42:a9:4b:a1:dd:2b:83:96:0e:7e:d9:fe:6c:47:81:
a4:63:e1:8f:32:b6:bf:cb:6e:ab:3b:67:57:3a:71:86:f9:d1:
ee:67:84:b4:2a:60:85:f1:ec:ce:5c:56:26:ab:f4:89:fd:14:
c2:48:29:96:59:28:96:65:87:6a:64:3d:2d:8d:1e:9b:ac:95:
60:ee:f3:18:10:4c:fa:14:de:02:2d:63:bc:35:a3:b4:53:7e:
55:62:2d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:13:50 2026 by rpki-client