
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A00E4/5608A4989A6511EF9F7AB226C4F9AE02/hneZBT7JF0sRHLtGspf6ZH6YKqU.mft
File: hneZBT7JF0sRHLtGspf6ZH6YKqU.mft (raw, json)
Hash identifier: 5OZkpDgGiqjPzsqKAWM/yrYhO/0CuQyRGosBdzjfQPQ=
Subject key identifier: 38:5E:6C:E8:E4:A5:E9:3C:E4:1D:CC:83:1C:E9:4D:CF:6F:9A:D8:FC
Authority key identifier: 86:77:99:05:3E:C9:17:4B:11:1C:BB:46:B2:97:FA:64:7E:98:2A:A5
Certificate issuer: /CN=A91A00E4/serialNumber=867799053EC9174B111CBB46B297FA647E982AA5
Certificate serial: 0168
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hneZBT7JF0sRHLtGspf6ZH6YKqU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A00E4/5608A4989A6511EF9F7AB226C4F9AE02/hneZBT7JF0sRHLtGspf6ZH6YKqU.mft
Manifest number: 0168
Signing time: Sat 03 Oct 2026 05:36:17 +0000
Manifest this update: Sat 03 Oct 2026 05:36:17 +0000
Manifest next update: Sat 10 Oct 2026 05:36:17 +0000
Files and hashes: 1: hneZBT7JF0sRHLtGspf6ZH6YKqU.crl (hash: wEP1u+x7rU6u7huEGqOTEZdxqqoaClaNXY6nb3CFae0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A00E4/5608A4989A6511EF9F7AB226C4F9AE02/hneZBT7JF0sRHLtGspf6ZH6YKqU.crl
rsync://rpki.apnic.net/member_repository/A91A00E4/5608A4989A6511EF9F7AB226C4F9AE02/hneZBT7JF0sRHLtGspf6ZH6YKqU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hneZBT7JF0sRHLtGspf6ZH6YKqU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 05:36:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 360 (0x168)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A00E4, serialNumber=867799053EC9174B111CBB46B297FA647E982AA5
Validity
Not Before: Oct 3 05:36:17 2026 GMT
Not After : Oct 10 05:36:17 2026 GMT
Subject: CN=6ac09451-2c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:32:89:83:d4:bd:c3:87:ac:96:18:34:55:c4:
3d:c1:68:12:0d:b6:65:c2:4c:53:cb:bb:ad:2a:c6:
3b:da:b9:8f:2b:59:f2:9b:12:9b:ea:53:7a:ef:ab:
d1:be:93:0c:27:43:da:c3:c0:69:35:6c:3f:ed:42:
22:7c:55:0a:ac:8f:98:8e:7d:98:29:e7:65:37:4e:
eb:4f:f5:82:2e:90:95:74:bd:a8:41:80:5a:d9:54:
a4:3a:22:cc:53:6e:fe:dd:e9:55:83:b8:22:41:96:
3d:9d:06:0a:f2:a2:58:ad:02:1b:a5:4d:bd:3f:f2:
2a:ff:ec:c0:f3:4f:ce:a6:e4:e7:e4:5a:8e:7c:31:
8b:65:83:67:0b:43:70:9f:ea:01:0b:1a:11:7c:08:
af:24:dd:28:6d:9d:ff:01:8b:aa:4a:22:88:f1:15:
9c:27:e9:fe:5d:75:56:3a:e0:4d:2e:02:36:16:d3:
9d:32:6f:93:96:37:2b:e8:57:16:18:a1:19:47:99:
a5:73:bd:96:cf:6e:20:68:92:ed:1f:85:c2:66:74:
b1:de:cf:34:1e:a9:f6:0c:66:fe:9a:84:d1:2f:ec:
1c:61:f7:ea:ce:50:53:89:0e:2a:c8:0c:58:f3:80:
f9:ab:34:f7:66:8f:29:9f:36:5a:dd:82:e5:62:eb:
77:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:5E:6C:E8:E4:A5:E9:3C:E4:1D:CC:83:1C:E9:4D:CF:6F:9A:D8:FC
X509v3 Authority Key Identifier:
keyid:86:77:99:05:3E:C9:17:4B:11:1C:BB:46:B2:97:FA:64:7E:98:2A:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A00E4/5608A4989A6511EF9F7AB226C4F9AE02/hneZBT7JF0sRHLtGspf6ZH6YKqU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hneZBT7JF0sRHLtGspf6ZH6YKqU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A00E4/5608A4989A6511EF9F7AB226C4F9AE02/hneZBT7JF0sRHLtGspf6ZH6YKqU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:46:93:34:7e:58:e2:79:f6:ac:cf:24:25:6a:83:f3:1a:fd:
46:a9:74:86:e1:c8:1b:05:bd:ff:07:8b:03:9c:40:60:48:79:
3a:ea:7e:ad:8e:32:c1:1a:a7:6f:0e:33:93:d6:5f:90:7c:8d:
85:cc:56:33:f1:58:c5:53:db:73:cd:6c:69:84:96:95:d4:eb:
56:bd:cb:4e:bc:4d:be:05:fd:4b:f1:cf:8e:1a:9e:20:9f:05:
81:cb:2b:3a:bc:6c:69:bd:9f:c7:ae:fd:84:1d:c5:be:0d:e0:
20:f6:c7:76:7d:b8:a4:1b:a8:5b:83:84:04:d6:f1:3a:ea:c0:
ea:68:d1:e4:32:b0:51:8c:57:c4:9d:b2:70:b0:a5:6c:46:20:
9c:a0:b1:4f:70:50:63:93:da:dc:5c:a7:41:03:ef:ba:ad:de:
2a:65:a7:d9:46:7c:6a:8f:09:69:44:c4:c1:ca:67:9f:eb:2e:
4c:9f:5d:b8:67:88:4d:5c:29:e0:cb:98:f1:d8:4f:6b:6b:12:
2d:9d:1a:11:c1:1f:f7:f6:50:14:00:c6:e9:25:39:d8:f5:35:
d1:04:81:82:be:7b:d0:68:5c:0c:27:0f:4e:2b:81:98:b7:fd:
db:33:aa:17:fe:a9:cd:ae:24:ff:4c:cb:67:83:8c:ee:d1:ea:
d9:e3:ba:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:51:33 2026 by rpki-client