
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A6AB7/C6DC1D5C450511F1830D62F490833773/hJsNmQIL8dnW-NPwKMlPCqAR9qY.mft
File: hJsNmQIL8dnW-NPwKMlPCqAR9qY.mft (raw, json)
Hash identifier: JAOi3o6YEG4v4UI8yFnox+jnv8H8/aDk3Wits9ndoqs=
Subject key identifier: 38:08:A2:38:E8:0F:17:3A:67:AF:9E:48:FF:80:32:19:1F:19:7C:6C
Authority key identifier: 84:9B:0D:99:02:0B:F1:D9:D6:F8:D3:F0:28:C9:4F:0A:A0:11:F6:A6
Certificate issuer: /CN=A91A6AB7/serialNumber=849B0D99020BF1D9D6F8D3F028C94F0AA011F6A6
Certificate serial: 4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hJsNmQIL8dnW-NPwKMlPCqAR9qY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6AB7/C6DC1D5C450511F1830D62F490833773/hJsNmQIL8dnW-NPwKMlPCqAR9qY.mft
Manifest number: 49
Signing time: Sat 19 Sep 2026 08:24:41 +0000
Manifest this update: Sat 19 Sep 2026 08:24:41 +0000
Manifest next update: Sat 26 Sep 2026 08:24:41 +0000
Files and hashes: 1: hJsNmQIL8dnW-NPwKMlPCqAR9qY.crl (hash: kszHbBdcT32DFLhuJlKIssEZy8bitoWqmqUpr2jvgQA=)
2: 2DFF5E4A450611F1937F277491833773.roa (hash: 47kNyS4a2pq8B+k+t2a9vj5unLrgCE/8MJzFAm97XS0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A6AB7/C6DC1D5C450511F1830D62F490833773/hJsNmQIL8dnW-NPwKMlPCqAR9qY.crl
rsync://rpki.apnic.net/member_repository/A91A6AB7/C6DC1D5C450511F1830D62F490833773/hJsNmQIL8dnW-NPwKMlPCqAR9qY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hJsNmQIL8dnW-NPwKMlPCqAR9qY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75 (0x4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6AB7, serialNumber=849B0D99020BF1D9D6F8D3F028C94F0AA011F6A6
Validity
Not Before: Sep 19 08:24:41 2026 GMT
Not After : Sep 26 08:24:41 2026 GMT
Subject: CN=6aae46c9-ff61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:17:8f:07:42:b1:83:b0:58:58:01:ba:4b:ea:
f0:b4:4d:3b:b5:e9:8c:c6:d4:40:70:0b:3b:0d:45:
4c:2a:3b:de:f5:5b:2b:f2:bf:e4:90:3a:e1:b0:c5:
e2:93:55:7c:eb:ea:37:8d:9b:51:95:92:f4:d8:c5:
f0:2d:a6:3c:66:75:29:f9:30:a1:37:fd:8e:b8:ac:
2e:56:a2:ef:c7:64:1f:a3:0d:18:bc:4a:b1:ab:3c:
e9:34:bc:43:32:1b:61:57:40:7d:4b:c7:b3:68:24:
3a:56:95:9c:d3:a6:1f:e1:de:9a:21:cd:2b:2c:70:
c1:68:0f:25:f4:2c:0b:e5:8b:a8:6d:28:d9:9c:e6:
60:2f:52:37:4a:ca:85:2f:d9:63:e7:f8:9f:e7:ef:
f8:86:4e:93:aa:27:5f:5b:81:2e:58:8c:6a:05:12:
52:e1:66:2d:4d:dc:48:c2:1b:15:02:bc:e3:8f:0e:
03:fd:ca:f8:8a:c3:f5:93:26:e3:5a:82:fd:6f:03:
2c:85:3d:2c:c1:e7:1f:93:27:be:6c:e6:63:23:af:
66:0e:63:0f:63:9a:2e:c7:ea:07:f2:d2:c6:27:da:
01:d6:fb:3e:47:dc:64:9e:57:39:a9:77:f9:5a:02:
c4:5b:5b:30:e8:d4:72:ae:d4:55:a8:1c:2d:5c:ec:
12:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:08:A2:38:E8:0F:17:3A:67:AF:9E:48:FF:80:32:19:1F:19:7C:6C
X509v3 Authority Key Identifier:
keyid:84:9B:0D:99:02:0B:F1:D9:D6:F8:D3:F0:28:C9:4F:0A:A0:11:F6:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6AB7/C6DC1D5C450511F1830D62F490833773/hJsNmQIL8dnW-NPwKMlPCqAR9qY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hJsNmQIL8dnW-NPwKMlPCqAR9qY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6AB7/C6DC1D5C450511F1830D62F490833773/hJsNmQIL8dnW-NPwKMlPCqAR9qY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:8f:9f:47:41:30:04:b6:e3:7b:2d:9e:7b:d8:6f:39:28:e1:
a2:8f:a8:c5:06:27:df:c7:52:af:e8:1b:e9:52:35:10:b8:f4:
ce:d1:3d:21:57:28:ff:b9:e6:f0:3d:fc:57:04:5a:cf:9e:b5:
f8:4f:e9:53:6b:c8:4f:e2:34:00:de:05:e9:d7:06:39:6b:b6:
6f:1b:46:90:a7:66:a3:4b:94:6a:64:9b:7f:e7:b5:94:df:4a:
09:41:d6:42:be:59:fb:3c:5f:cb:eb:a5:8f:a6:2a:4a:98:f8:
08:00:ea:d3:ea:3d:6f:fb:cd:f9:6f:90:14:3a:0b:49:50:a9:
57:aa:ce:f7:6b:f9:d6:ef:1c:10:33:15:86:08:24:bc:6b:06:
f2:38:96:75:20:62:0b:e2:5b:1a:08:c8:f9:2c:e3:38:d5:01:
3a:59:89:2a:b4:0f:01:80:09:40:4f:7f:63:6c:df:e7:ca:33:
cb:54:37:71:75:b0:11:39:ce:cf:9a:40:5d:49:82:a5:d1:42:
05:be:f7:9d:46:ed:0c:ec:ef:ef:15:77:df:d0:2b:da:a0:bd:
e8:3a:02:5d:3f:bc:35:2d:93:59:f9:89:f4:31:71:2b:f4:c3:
8b:a7:74:1d:8f:e8:7a:f1:6c:23:f7:10:ca:d4:e2:88:c5:43:
ad:a0:83:36
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
NkFCNzExMC8GA1UEBRMoODQ5QjBEOTkwMjBCRjFEOUQ2RjhEM0YwMjhDOTRGMEFB
MDExRjZBNjAeFw0yNjA5MTkwODI0NDFaFw0yNjA5MjYwODI0NDFaMBgxFjAUBgNV
BAMTDTZhYWU0NmM5LWZmNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDQF48HQrGDsFhYAbpL6vC0TTu16YzG1EBwCzsNRUwqO971Wyvyv+SQOuGwxeKT
VXzr6jeNm1GVkvTYxfAtpjxmdSn5MKE3/Y64rC5Wou/HZB+jDRi8SrGrPOk0vEMy
G2FXQH1Lx7NoJDpWlZzTph/h3pohzSsscMFoDyX0LAvli6htKNmc5mAvUjdKyoUv
2WPn+J/n7/iGTpOqJ19bgS5YjGoFElLhZi1N3EjCGxUCvOOPDgP9yviKw/WTJuNa
gv1vAyyFPSzB5x+TJ75s5mMjr2YOYw9jmi7H6gfy0sYn2gHW+z5H3GSeVzmpd/la
AsRbWzDo1HKu1FWoHC1c7BL1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUOAiiOOgP
Fzpnr55I/4AyGR8ZfGwwHwYDVR0jBBgwFoAUhJsNmQIL8dnW+NPwKMlPCqAR9qYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2QUI3L0M2REMxRDVDNDUw
NTExRjE4MzBENjJGNDkwODMzNzczL2hKc05tUUlMOGRuVy1OUHdLTWxQQ3FBUjlx
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvaEpzTm1RSUw4ZG5XLU5Qd0tNbFBDcUFSOXFZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2
QUI3L0M2REMxRDVDNDUwNTExRjE4MzBENjJGNDkwODMzNzczL2hKc05tUUlMOGRu
Vy1OUHdLTWxQQ3FBUjlxWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAdj59HQTAEtuN7LZ572G85KOGij6jFBiffx1Kv6BvpUjUQuPTO0T0hVyj/uebw
PfxXBFrPnrX4T+lTa8hP4jQA3gXp1wY5a7ZvG0aQp2ajS5RqZJt/57WU30oJQdZC
vln7PF/L66WPpipKmPgIAOrT6j1v+835b5AUOgtJUKlXqs73a/nW7xwQMxWGCCS8
awbyOJZ1IGIL4lsaCMj5LOM41QE6WYkqtA8BgAlAT39jbN/nyjPLVDdxdbAROc7P
mkBdSYKl0UIFvvedRu0M7O/vFXff0CvaoL3oOgJdP7w1LZNZ+Yn0MXEr9MOLp3Qd
j+h68Wwj9xDK1OKIxUOtoIM2
-----END CERTIFICATE-----
Generated at Mon Sep 21 04:56:20 2026 by rpki-client