
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft
File: s-hiKkEGGf2XI_nR28U1fhX6fcw.mft (raw, json)
Hash identifier: pO03Sk49fKqZAbLHp2vx3EF2zPHMkg8QsTBGr0BzccQ=
Subject key identifier: 5B:36:2F:C8:9E:4B:6A:F0:01:6C:FA:3E:1B:84:3A:05:49:8C:9C:54
Authority key identifier: B3:E8:62:2A:41:06:19:FD:97:23:F9:D1:DB:C5:35:7E:15:FA:7D:CC
Certificate issuer: /CN=A91A85CF/serialNumber=B3E8622A410619FD9723F9D1DBC5357E15FA7DCC
Certificate serial: DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-hiKkEGGf2XI_nR28U1fhX6fcw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft
Manifest number: DB
Signing time: Sun 01 Mar 2026 07:44:00 +0000
Manifest this update: Sun 01 Mar 2026 07:44:00 +0000
Manifest next update: Sun 08 Mar 2026 07:44:00 +0000
Files and hashes: 1: s-hiKkEGGf2XI_nR28U1fhX6fcw.crl (hash: j0PISy4jUj4XZpqJPn/kK43gLyCLDPKu33gYqigiwHs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.crl
rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-hiKkEGGf2XI_nR28U1fhX6fcw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:43:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 219 (0xdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A85CF, serialNumber=B3E8622A410619FD9723F9D1DBC5357E15FA7DCC
Validity
Not Before: Mar 1 07:44:00 2026 GMT
Not After : Mar 8 07:44:00 2026 GMT
Subject: CN=69a3ee40-f6c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:25:8b:77:07:78:ab:62:27:70:be:a9:78:f0:
b0:67:c3:87:0c:ce:a6:e0:da:66:c6:69:41:17:d3:
84:08:dd:8c:97:c8:a8:02:7e:ba:55:8d:3d:b7:94:
f6:14:2b:82:0a:8f:aa:08:09:2b:00:ca:2e:fd:87:
50:36:13:ec:20:c4:f5:df:0c:7c:e5:bb:a6:16:5c:
cb:5d:40:35:68:1a:ae:3f:3f:c6:08:a7:ba:1f:9a:
19:50:94:c1:0d:63:6f:1e:f3:92:8b:8f:d7:83:7d:
0f:b8:d9:06:42:05:10:b6:28:78:26:25:ce:27:cc:
99:9d:f3:ec:f5:54:2c:fc:8b:1d:6d:58:fd:a4:f2:
c6:71:50:42:54:e0:7b:1a:cf:c4:be:e1:9c:e1:10:
45:90:46:2a:82:7f:b6:49:e3:2c:b8:f3:7d:f2:af:
51:d2:b6:2c:a2:c4:b8:fc:13:62:b2:2f:e9:82:3a:
2a:8b:55:b3:a5:22:5d:28:df:2c:0c:de:09:0a:c0:
42:70:c2:9b:09:ae:a0:96:28:9f:fa:92:37:23:44:
a0:0d:5f:41:a8:f6:17:d1:8e:9a:28:1f:db:63:60:
7b:64:dc:8b:0b:5f:0d:f5:72:6e:a3:d5:0b:90:00:
b7:47:45:72:de:04:90:40:ad:1e:51:ac:b6:1b:39:
fc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:36:2F:C8:9E:4B:6A:F0:01:6C:FA:3E:1B:84:3A:05:49:8C:9C:54
X509v3 Authority Key Identifier:
keyid:B3:E8:62:2A:41:06:19:FD:97:23:F9:D1:DB:C5:35:7E:15:FA:7D:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-hiKkEGGf2XI_nR28U1fhX6fcw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:df:1b:9a:67:63:98:48:5a:b6:12:88:c5:00:71:ae:d6:88:
ee:3f:28:8f:91:a1:93:73:90:3e:05:19:c8:11:03:47:5d:74:
5e:5c:d3:2e:ad:4f:eb:7e:75:00:97:6a:03:59:40:c4:06:28:
57:ed:50:11:8d:fd:c2:d3:99:75:6c:38:90:cd:55:d2:72:d0:
11:fa:e8:a7:f3:69:a5:ef:70:15:8c:5f:66:f6:a4:63:19:a6:
6f:86:f4:7d:c4:b5:aa:56:48:77:7d:d7:28:63:9d:77:db:05:
22:7f:f0:11:49:d1:7e:68:e0:f5:1d:64:5b:aa:90:57:7a:5e:
dc:9f:07:f6:5f:e6:d2:f0:5b:9e:ff:08:22:4e:9e:72:d1:cb:
cf:49:04:2b:96:23:41:9d:09:6f:67:88:91:09:9c:61:48:ea:
1a:b3:94:a8:f2:9c:8e:30:a4:59:fd:fb:19:ba:c9:0d:f6:58:
79:69:ee:38:33:67:cf:aa:06:9e:27:08:c4:60:f0:d4:48:b1:
53:ff:8a:bb:34:01:09:33:5d:4b:27:25:76:21:ca:0f:1e:eb:
5a:02:16:db:f1:a4:4a:74:e9:ef:34:0e:d9:99:dd:20:4b:54:
da:53:61:19:cd:6d:43:85:fc:1b:93:39:ae:5e:97:d7:7c:d1:
14:89:20:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:07:35 2026 by rpki-client