
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A31F5/AFDEFE54D6EC11EFA2799C69C4F9AE02/mHokA1wVORcCC2UduY8JHwqqMic.mft
File: mHokA1wVORcCC2UduY8JHwqqMic.mft (raw, json)
Hash identifier: nJ/9E37R4pKWDM0FgUOvfXAYoor6RfKSGVvqcMC7nBw=
Subject key identifier: D7:78:28:CC:C5:35:03:83:29:B9:A6:62:AC:AE:3B:D2:CB:84:50:AE
Authority key identifier: 98:7A:24:03:5C:15:39:17:02:0B:65:1D:B9:8F:09:1F:0A:AA:32:27
Certificate issuer: /CN=A91A31F5/serialNumber=987A24035C153917020B651DB98F091F0AAA3227
Certificate serial: D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mHokA1wVORcCC2UduY8JHwqqMic.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A31F5/AFDEFE54D6EC11EFA2799C69C4F9AE02/mHokA1wVORcCC2UduY8JHwqqMic.mft
Manifest number: D1
Signing time: Sun 01 Mar 2026 07:54:49 +0000
Manifest this update: Sun 01 Mar 2026 07:54:48 +0000
Manifest next update: Sun 08 Mar 2026 07:54:48 +0000
Files and hashes: 1: mHokA1wVORcCC2UduY8JHwqqMic.crl (hash: ZMryBcms4xsMnTAE3mhrMBlBMYM80YQdsIinpXZF03Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A31F5/AFDEFE54D6EC11EFA2799C69C4F9AE02/mHokA1wVORcCC2UduY8JHwqqMic.crl
rsync://rpki.apnic.net/member_repository/A91A31F5/AFDEFE54D6EC11EFA2799C69C4F9AE02/mHokA1wVORcCC2UduY8JHwqqMic.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mHokA1wVORcCC2UduY8JHwqqMic.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:54:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 209 (0xd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A31F5, serialNumber=987A24035C153917020B651DB98F091F0AAA3227
Validity
Not Before: Mar 1 07:54:48 2026 GMT
Not After : Mar 8 07:54:48 2026 GMT
Subject: CN=69a3f0c9-0c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:78:88:06:03:c0:ea:77:52:2c:2d:2a:e8:92:
0b:a8:68:68:25:53:70:58:2a:9d:a3:b4:4c:68:15:
0a:cb:89:8a:e9:93:15:21:da:7f:c6:c1:89:84:e5:
6b:b0:30:bd:8c:9a:7f:f1:fc:7e:fa:72:17:52:cb:
9e:34:fb:a3:52:0e:32:e4:b0:27:5a:40:22:8b:0f:
0a:38:d2:7f:91:41:5c:74:fc:f1:d5:b5:63:59:3c:
ef:21:0d:0f:ee:47:e2:97:3f:74:f0:0e:07:b1:f5:
6d:86:27:21:ef:d7:06:64:cc:8d:b2:1f:9b:f3:48:
0a:5e:6e:04:e7:fd:08:65:aa:15:4b:dc:07:15:56:
ab:d0:ab:0a:ee:3b:75:f3:99:f8:7d:09:cb:69:05:
bc:77:71:4e:66:1f:e9:9a:6d:7b:c5:3a:f1:2e:a3:
11:0a:d8:2c:3a:b8:29:8e:b4:43:b5:97:92:99:cf:
96:f1:41:70:80:86:5f:5e:46:7e:84:77:ed:64:1c:
19:0c:49:9a:6f:5f:b2:3f:1a:e8:c1:37:8c:82:a2:
b7:34:da:eb:4f:a7:14:63:8e:cd:9a:09:fe:ee:7e:
84:8b:52:53:51:7b:17:af:f4:43:dc:b2:51:92:1c:
c9:43:cd:c0:e4:59:4c:9f:f8:b2:7d:c8:ee:cc:36:
87:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:78:28:CC:C5:35:03:83:29:B9:A6:62:AC:AE:3B:D2:CB:84:50:AE
X509v3 Authority Key Identifier:
keyid:98:7A:24:03:5C:15:39:17:02:0B:65:1D:B9:8F:09:1F:0A:AA:32:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A31F5/AFDEFE54D6EC11EFA2799C69C4F9AE02/mHokA1wVORcCC2UduY8JHwqqMic.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mHokA1wVORcCC2UduY8JHwqqMic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A31F5/AFDEFE54D6EC11EFA2799C69C4F9AE02/mHokA1wVORcCC2UduY8JHwqqMic.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:c6:19:7e:5a:a2:9b:79:ad:59:35:75:f2:32:8b:82:97:dc:
05:b6:76:dc:bd:dd:a8:a1:1e:9e:8a:be:dd:ea:54:1a:48:20:
c4:95:b1:11:1c:ad:95:10:d0:b9:15:73:f6:89:50:1a:f4:ff:
17:dc:51:eb:0a:4b:d4:f3:ec:28:fb:af:fe:11:3c:38:e4:76:
36:c4:12:53:e7:05:3d:a0:1f:9b:3e:13:9c:b5:bd:be:3c:48:
d0:b5:c5:f8:15:3d:f5:9c:69:06:11:23:4d:0c:64:9e:7b:ab:
84:93:41:78:bc:fa:76:12:b6:9f:25:50:8a:18:df:ee:48:88:
3d:b7:ac:5d:39:95:43:69:0b:14:19:17:db:c0:de:a6:36:91:
5a:93:98:d6:40:2b:09:76:f0:46:65:1c:da:c4:89:2e:e5:c5:
f5:c9:71:cd:f0:3f:d0:d5:a4:88:08:57:bd:c5:7b:36:15:b6:
d9:a1:51:dd:bc:eb:70:eb:98:72:c0:32:cc:d4:1a:c9:24:20:
cb:58:7c:4a:5c:e2:00:92:fc:68:13:9c:b2:81:ed:4c:ca:bd:
bd:ed:8f:7d:4d:22:71:47:86:e1:0b:71:7f:d5:db:b3:ad:63:
a6:00:a9:75:c2:ec:0f:00:0c:ef:e5:27:eb:70:c1:a7:82:2f:
07:a6:b1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:24:11 2026 by rpki-client