
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A31F5/AFDEFE54D6EC11EFA2799C69C4F9AE02/mHokA1wVORcCC2UduY8JHwqqMic.mft
File: mHokA1wVORcCC2UduY8JHwqqMic.mft (raw, json)
Hash identifier: s+SlrFp5nOw+XPlz58m2eGFdXX+yFggyq6sdSs6xNSg=
Subject key identifier: 32:F5:08:F5:72:6B:EA:24:A3:79:E0:36:B9:A9:C7:8B:6B:BC:16:48
Authority key identifier: 98:7A:24:03:5C:15:39:17:02:0B:65:1D:B9:8F:09:1F:0A:AA:32:27
Certificate issuer: /CN=A91A31F5/serialNumber=987A24035C153917020B651DB98F091F0AAA3227
Certificate serial: EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mHokA1wVORcCC2UduY8JHwqqMic.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A31F5/AFDEFE54D6EC11EFA2799C69C4F9AE02/mHokA1wVORcCC2UduY8JHwqqMic.mft
Manifest number: EA
Signing time: Wed 15 Apr 2026 06:01:32 +0000
Manifest this update: Wed 15 Apr 2026 06:01:31 +0000
Manifest next update: Wed 22 Apr 2026 06:01:31 +0000
Files and hashes: 1: mHokA1wVORcCC2UduY8JHwqqMic.crl (hash: bS44DBRfRyh20/seE72Y359Otyv3RjaeMd7Bt6MeB5w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A31F5/AFDEFE54D6EC11EFA2799C69C4F9AE02/mHokA1wVORcCC2UduY8JHwqqMic.crl
rsync://rpki.apnic.net/member_repository/A91A31F5/AFDEFE54D6EC11EFA2799C69C4F9AE02/mHokA1wVORcCC2UduY8JHwqqMic.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mHokA1wVORcCC2UduY8JHwqqMic.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 06:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 234 (0xea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A31F5, serialNumber=987A24035C153917020B651DB98F091F0AAA3227
Validity
Not Before: Apr 15 06:01:31 2026 GMT
Not After : Apr 22 06:01:31 2026 GMT
Subject: CN=69df29bb-3bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1c:40:6c:24:1d:a5:3f:b4:40:f4:77:44:0f:
63:6c:19:c0:38:ed:5f:48:a1:94:b5:74:75:f2:43:
28:80:cd:96:0b:a0:63:1f:67:cb:b7:79:4f:cb:ac:
0e:57:74:a1:29:32:12:4e:da:43:09:3f:ba:da:7f:
f5:d5:c5:3a:e8:bc:2c:b9:b9:ff:cc:a8:8a:36:38:
8e:c1:01:8b:91:88:5c:18:67:a4:08:15:d4:b2:ce:
22:c7:da:87:31:5b:e6:ab:e7:b0:89:9d:62:b0:99:
53:94:f8:89:5c:7e:f6:fc:a3:52:49:a1:08:88:14:
22:c3:61:79:a0:8f:da:f7:c3:bb:29:e1:2b:1c:f7:
85:2c:d1:17:32:cf:59:17:d1:09:e1:92:03:c3:1e:
d2:9e:ee:52:19:be:3f:ca:fb:cf:71:4d:43:0d:a9:
9e:75:a1:2a:5e:ee:1e:36:ba:14:7d:0e:eb:22:14:
b6:ca:da:d3:ed:00:b0:7d:ff:f2:7b:79:1d:cc:ef:
f8:88:6c:d4:39:17:b4:96:af:86:05:28:a1:6c:6c:
dd:4c:79:15:3e:71:08:4d:36:52:6f:91:0b:46:23:
4d:c1:33:5f:89:41:f7:43:4a:bf:47:d9:5c:07:43:
2d:fb:71:42:0b:82:9e:d3:0b:a4:d0:82:d2:d8:11:
9a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F5:08:F5:72:6B:EA:24:A3:79:E0:36:B9:A9:C7:8B:6B:BC:16:48
X509v3 Authority Key Identifier:
keyid:98:7A:24:03:5C:15:39:17:02:0B:65:1D:B9:8F:09:1F:0A:AA:32:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A31F5/AFDEFE54D6EC11EFA2799C69C4F9AE02/mHokA1wVORcCC2UduY8JHwqqMic.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mHokA1wVORcCC2UduY8JHwqqMic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A31F5/AFDEFE54D6EC11EFA2799C69C4F9AE02/mHokA1wVORcCC2UduY8JHwqqMic.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:58:e5:84:04:00:50:29:20:c2:1e:28:77:75:a1:1d:60:b4:
38:9a:29:c2:36:b2:63:04:70:17:16:db:dd:ec:2e:43:5e:76:
81:2a:03:fe:e8:87:11:fe:f7:75:0e:7a:0c:af:e5:6a:1c:32:
42:da:85:8c:47:a5:77:f1:51:c8:0a:d0:57:63:fa:98:e5:3e:
3a:0c:85:65:54:e4:e0:e4:47:84:23:3f:39:a2:df:3f:93:0e:
89:46:a7:5b:b3:2b:9f:c5:5e:ca:9c:c8:5f:6a:85:a1:81:b0:
0b:50:8c:20:ee:c1:11:01:c5:94:0c:28:00:fb:a1:c9:c7:83:
70:15:cf:5a:0a:21:3c:23:31:70:f8:34:f5:e2:af:19:8e:b5:
3e:b3:95:a2:2a:b2:41:a8:d4:6c:fa:c0:f2:39:a2:04:0c:d6:
92:4b:0c:ae:5f:48:2e:d8:23:30:0c:d5:d1:e3:19:34:c4:b9:
61:9d:d9:32:80:3c:7e:34:14:39:82:14:23:68:1a:99:7e:f2:
58:48:03:60:45:08:13:33:87:2b:83:9a:0f:1b:b1:90:e1:54:
31:2b:5f:6a:90:ee:70:60:3a:4f:dd:b6:dd:09:d4:b8:8c:2b:
11:d5:cf:13:51:41:67:03:f8:14:b9:73:ed:8d:5e:90:4f:6d:
ef:8e:d2:12
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTMxRjUxMTAvBgNVBAUTKDk4N0EyNDAzNUMxNTM5MTcwMjBCNjUxREI5OEYwOTFG
MEFBQTMyMjcwHhcNMjYwNDE1MDYwMTMxWhcNMjYwNDIyMDYwMTMxWjAYMRYwFAYD
VQQDEw02OWRmMjliYi0zYmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4RxAbCQdpT+0QPR3RA9jbBnAOO1fSKGUtXR18kMogM2WC6BjH2fLt3lPy6wO
V3ShKTISTtpDCT+62n/11cU66Lwsubn/zKiKNjiOwQGLkYhcGGekCBXUss4ix9qH
MVvmq+ewiZ1isJlTlPiJXH72/KNSSaEIiBQiw2F5oI/a98O7KeErHPeFLNEXMs9Z
F9EJ4ZIDwx7Snu5SGb4/yvvPcU1DDamedaEqXu4eNroUfQ7rIhS2ytrT7QCwff/y
e3kdzO/4iGzUORe0lq+GBSihbGzdTHkVPnEITTZSb5ELRiNNwTNfiUH3Q0q/R9lc
B0Mt+3FCC4Ke0wuk0ILS2BGaGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDL1CPVy
a+oko3ngNrmpx4trvBZIMB8GA1UdIwQYMBaAFJh6JANcFTkXAgtlHbmPCR8KqjIn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzFGNS9BRkRFRkU1NEQ2
RUMxMUVGQTI3OTlDNjlDNEY5QUUwMi9tSG9rQTF3Vk9SY0NDMlVkdVk4Skh3cXFN
aWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21Ib2tBMXdWT1JjQ0MyVWR1WThKSHdxcU1pYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MzFGNS9BRkRFRkU1NEQ2RUMxMUVGQTI3OTlDNjlDNEY5QUUwMi9tSG9rQTF3Vk9S
Y0NDMlVkdVk4Skh3cXFNaWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqFjlhAQAUCkgwh4od3WhHWC0OJopwjayYwRwFxbb3ewuQ152gSoD/uiHEf73
dQ56DK/lahwyQtqFjEeld/FRyArQV2P6mOU+OgyFZVTk4ORHhCM/OaLfP5MOiUan
W7Mrn8VeypzIX2qFoYGwC1CMIO7BEQHFlAwoAPuhyceDcBXPWgohPCMxcPg09eKv
GY61PrOVoiqyQajUbPrA8jmiBAzWkksMrl9ILtgjMAzV0eMZNMS5YZ3ZMoA8fjQU
OYIUI2gamX7yWEgDYEUIEzOHK4OaDxuxkOFUMStfapDucGA6T9223QnUuIwrEdXP
E1FBZwP4FLlz7Y1ekE9t747SEg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:31:55 2026 by rpki-client